last executing test programs: 6.620075633s ago: executing program 0 (id=836): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 5.53709595s ago: executing program 0 (id=842): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 4.578743102s ago: executing program 0 (id=849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x10, 0x6, @remote}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r6, 0x1, 0x3, 0x3}, 0x50) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 3.636920263s ago: executing program 1 (id=851): fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3.494414048s ago: executing program 1 (id=852): sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x1406, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x4) 3.445776191s ago: executing program 1 (id=853): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000102c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000010380)={&(0x7f0000010280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000010340)={&(0x7f0000010300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0400289d7000fddbdf2501000000a2e3b7c96e505594c04b9672e632d7def6"], 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4008040) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002abd7000000000000000000000000000000000004c001400"], 0x1a0}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x100000001) waitid$P_PIDFD(0x3, r5, 0x0, 0x8, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000095f2085d550e9391b6523d82fd5905b2bce76a4f860e819651684073c505139ff6dddbc6e2f43bade50e43da75ddcf81890629401dce1343bf738fa4d750e3fa63b3e66dc8829985734b2fc1733a83c3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0x4}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) personality(0xfe47fef9f5ff7379) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.277376412s ago: executing program 1 (id=855): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x3fe, 0x28}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x100}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18008000000000000000000003000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r8, 0x0, 0x7}, 0x18) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000100)=@req3={0x12000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r11, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r10, @ANYRESHEX=r10, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES16=r11, @ANYRES8=r9, @ANYRES32=r8, @ANYBLOB, @ANYRES64=r12], 0x20) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r13, @ANYRES32=r6, @ANYBLOB='8\x00\x00\x00 \x00\x00', @ANYRES32=r7, @ANYBLOB="f34243c37a5d32633236e1228304fb4ea1b507da0c4091f8f9d98ac781b6e99335", @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback=r1, r0, 0x0, 0x2000, r3, @value=r0, @void, @void, @void, r12}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r14}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x7) 2.276965832s ago: executing program 4 (id=856): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="088402000000000008001d00ca0e00000e8f30165d73587c56b86e30eaaea5b1a237cac02e1b6f3076486ea81e8b845f21fc11147baac8fe1bf83bd555850d919c7c23d8745addc981db4767094c71c3a42dfa8820cc97fc45600308a55db78ae49b52a1cf727f41027d3603d479ee136805a4103294a5ffc8b4719756ecc21bbe1c9a"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000010c0019"], 0x50}, 0x1, 0x0, 0x0, 0x904}, 0x80088c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe15) socket(0xa, 0x6, 0x48000007) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) read(0xffffffffffffffff, &(0x7f0000001180)=""/4096, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000001000000000000000000009500000100000000334ec95fd976d61519ce15db457a0ef5e4fa30852ac4fba2d35ca61ec0443ea63cd6d7b61fa735701e2c0ecb45d99a0ebbfaae48551d8045acf7c6b765fe"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x4}}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) memfd_secret(0x0) epoll_create1(0x0) 2.224144823s ago: executing program 1 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000050) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000600)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x0, 0x81, 0x0, 0x0, 0x4, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000005c0), 0x1}, 0x180443, 0x7, 0x43a3bd76, 0x7, 0x400009, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0x0, 0x4, 0x5, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffd}) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r6, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x289}], 0x51, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x94}}, 0x24004001) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_io_uring_setup(0x45c6, &(0x7f0000000640)={0x0, 0xe357, 0x80, 0x0, 0x2d9}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) 2.120458478s ago: executing program 4 (id=860): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000800)={'\x00', 0x40, 0xa, 0x0, 0x59, 0x10}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x2, 0x2, 0x9}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000b0000000009"], 0x18}}], 0x1, 0x810) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x12, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x11, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000d40)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=\xb8\x9b\xf0\\\xa6 \xc7\x19\x13\xd1z\xad$\xe2\xc4\xe4\x88\xfbq\x101\xe4aoq?\xdb\x93\xd4\x02\xad\x1b\x9dO\x9e}\f\xe0\xad\xac\x06\xc9\xab\xc9}DY|\xc1\xf0\xd4hW\a\f\x9e', 0x3a, '(\x18\xb2\x03(\xe2\x1dP\x91Br\x98Q@6\xd2L\xb8\x18\x8c\x94*\rH\x8c?\xe0\x16w25Z_\'jJ\r\xf4\xce\xebl\xec', 0x3a, './file2', 0x3a, [0x46]}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xcf) 2.104659039s ago: executing program 2 (id=861): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204858, &(0x7f00000003c0)=ANY=[], 0x1, 0x54a, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fdatasync(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1e, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @sk_lookup=0x24, r1, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x2, 0xe, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000b40)=[r1, r1], &(0x7f0000000b80)=[{0x5, 0x5, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x5}, {0x1, 0x4, 0x1, 0x7}, {0x4, 0x2, 0xe, 0xa}, {0x0, 0x1, 0x5, 0x9}, {0x3, 0x1, 0x0, 0x2}, {0x5, 0x4, 0xf, 0x9}, {0x4, 0x5, 0x1}, {0x0, 0x2, 0xa, 0x2}, {0x0, 0x1, 0x4, 0xf}], 0x10, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xb, 0x0, &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0xa) fchdir(r10) sendto$packet(r10, &(0x7f0000000240)="95d1be61defd08f10e38ad8e8176418b17bf46c87e9b19c473f4c5751aca2a4c2b4536733fe85af6f5880d56b3b7a438c279253d1e6f16c48088aa27822db1d6a6d7bd96ea06014a3ff1c3922eeab2a740adde365441e2eb4c47475af26dba1796b4699a41e5f9d3a7f61856e2e81d0a2c681e3672684b67996e5d89afc8fcb8f06f8af571", 0x85, 0x94, &(0x7f0000000300)={0x11, 0x17, 0x0, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x9, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 1.979685214s ago: executing program 4 (id=862): fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.972445005s ago: executing program 2 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000100000000850018001b000000bdc591480a06704d2d6cb70000000000000095000000000000002574be9cad5fc3a02452599fca04c589da14c080a7c2711404e7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x115e, &(0x7f00000002c0)={@random="fafd63c9700f", @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1120, 0x2c, 0x0, @dev, @mcast2, {[@srh={0x3c, 0x4, 0x4, 0x2, 0x6, 0x60, 0xfff9, [@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}]}, @dstopts={0x32}, @hopopts={0xff, 0x210, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x58, {0x3, 0x14, 0xfc, 0x1, [0x2, 0x2, 0x8, 0x9, 0x93, 0x9, 0x200, 0xffffffffffffffff, 0x2, 0x45]}}, @generic={0xca, 0x1000, "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"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x2c, 0x0, 0x4f, 0x1, 0x0, 0x3, 0x66}, @routing={0xff, 0x0, 0x1, 0x71}, @hopopts={0x0, 0x0, '\x00', [@pad1, @pad1]}, @dstopts={0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x81}]}, @routing={0x9f, 0x4, 0x0, 0x3, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3881}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)={0x5, 0x8d, 0x3d, 0x8001, 0x1, "71feaf337e88b3e57800"}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000fcffffff01000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000800)="c7", 0x1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd4e}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, 0x0) 1.924253137s ago: executing program 4 (id=865): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0x1, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendto$inet(r0, &(0x7f0000000640)="dc3ae316829fedf526cf21187a2d61dc4d2c8b20dba270256644c93380cc43409ac5eff08daf743a514a94cce6f3698a4bf087fb39c2183ffc4a1fd1e640dbcffa796730f52cab640f6577d5f0b8464a7cc97a27e7290d027aea36fa68ecadbd", 0x60, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000003c0000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000004000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005a00)={0x30, r8, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1.923474147s ago: executing program 1 (id=866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000039000900000c00010000000000000200"/36], 0x24}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x4e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) r11 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r11, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') socket$inet(0x2, 0x5, 0x7fffffff) r12 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) 1.809987612s ago: executing program 4 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x80000001}]}, 0x78}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 1.804749302s ago: executing program 0 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x80000001}]}, 0x78}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x17}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.550778803s ago: executing program 2 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x203, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000440), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote, r3}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0xf7ffffff, 0x5, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r2) 1.550042763s ago: executing program 3 (id=870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000007b000000950020000000000000000000000000a55036a8c5b294a656c1753d42d94b08eff445e90f5e7d08e589bd36b02ebb1dc9274d89ef335b84c188d3fa9dbe311431944669476c02200f8d54a39a247c77497134f0a69c5aa3aee56ea208f107774ff10ef72f087fa35219c79f5c08e479ef24d7ec0ba6e3024183953700"/147], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x82}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) rename(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x97}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) getcwd(&(0x7f0000000000)=""/137, 0x89) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000b693208dea00c8adce9314643b0ae863ed0dbf024c04a5a298bcec1aea091cd9374c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, 0x0, 0x0) getsockname$packet(r9, 0x0, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x8040) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r3}, 0x14) 1.426138208s ago: executing program 3 (id=871): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_io_uring_setup(0x561a, &(0x7f0000000400)={0x0, 0xc890, 0x100}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) epoll_create(0x8617) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg2\x00'}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) connect$802154_dgram(r5, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r5, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0xfffffffffffffde9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 1.257556406s ago: executing program 2 (id=873): socket$key(0xf, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x40001000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000680), &(0x7f00000006c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000180)=""/98, 0x62, 0x0, &(0x7f0000000280)=""/55, 0x37}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000, 0x0, 0xf0000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0xc90, 0x30, 0xffff, 0xfffffffe, 0x80, {}, [{0xc7c, 0x1, [@m_police={0xc78, 0x3ffe, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0xc4e, 0x3, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffff7, 0x1000, 0x4c10, 0x5, 0x6, 0x9, 0x3, 0x1, 0x4, 0x8001, 0x5, 0x9, 0x7, 0x9, 0x1, 0x80000001, 0x49, 0x836, 0x6, 0x2, 0x4, 0x5, 0x1, 0x1ff, 0x4, 0x9, 0x3, 0x6e89, 0x7, 0x8, 0x6, 0x8, 0x3, 0x3, 0x3, 0x6, 0x5, 0x80000001, 0x4d, 0x2, 0x3, 0x7, 0x40, 0xe, 0x9, 0x9, 0x5, 0xfffffffd, 0xada8, 0x1, 0x7cf816ed, 0x6, 0x9, 0x1, 0x7f, 0x10001, 0x3ff, 0x8, 0x5, 0x336, 0xc4, 0x5, 0x400, 0xff, 0x1000, 0xfffffff7, 0x7, 0x3, 0x4, 0x1000, 0x4, 0x4, 0xffff, 0x4, 0x9, 0x7, 0xd, 0x8, 0x6, 0x8, 0x1, 0x6, 0xfffff2f9, 0x9, 0x2, 0x2f05, 0x6, 0x800, 0x8, 0x4000005, 0x5, 0x2, 0x4b9, 0x80000000, 0x6, 0x4, 0x80000001, 0x4, 0x202e, 0x3, 0xfffffffb, 0xe5a, 0xad03, 0x5, 0x4, 0x6, 0x0, 0x6, 0xcec1, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x8, 0x5, 0x5, 0xb8, 0xb28, 0x2, 0x5, 0x7fffffff, 0x0, 0x60, 0x9, 0x6, 0x9, 0x4, 0x9, 0x80000001, 0x9, 0x63, 0x7fff, 0x100, 0x412d, 0x98ad, 0x3, 0x7fff, 0xffffffff, 0x16e5, 0x10000, 0x8, 0x80000000, 0xd, 0x7, 0x4ca7, 0x9, 0x6, 0x1, 0x3, 0x13, 0x2, 0xb, 0x6, 0x6, 0x2, 0x5a5a605, 0xc7f, 0xb9f, 0x8, 0xa, 0x4, 0x0, 0x4, 0x80000000, 0x58, 0x5, 0x0, 0x9, 0x0, 0xff, 0x80000000, 0x9, 0xffffffff, 0x7b, 0x0, 0x3, 0xffffe209, 0x7, 0x2000000, 0x9, 0x2, 0x800, 0x7, 0xffff, 0x8, 0xadcd, 0x4, 0x7, 0x2, 0x9, 0x8, 0x4, 0x7, 0x2000008, 0x6, 0x101, 0x600, 0x5, 0xd, 0x9, 0x1, 0x10000, 0x3cba, 0xc, 0xff, 0xab3, 0xa1f2, 0x800, 0x3, 0x1, 0x4, 0x7fffffff, 0x2, 0x0, 0x80000000, 0x3, 0x3, 0x10000, 0x6, 0x6, 0x4, 0xa2d7038, 0xd, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3, 0x40, 0x8, 0xae4d, 0x3, 0x8, 0xe3, 0x7cc9, 0x8001, 0x800, 0x6, 0x2, 0x0, 0x0, 0x8, 0xff, 0x0, 0xe891, 0xe9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x5, 0x9, 0xffffffdb, 0x6, 0x1, 0x9, 0x34f, 0x3, 0x6, 0x7, 0x986b, 0x40, 0x8, 0xeea, 0x3, 0x9, 0x9, 0x9, 0x7fff, 0x3, 0x86, 0x6, 0x5, 0x532c, 0xfffffffb, 0x0, 0xedba, 0x6, 0x2, 0x8, 0x8001, 0xffff, 0xffff7f6f, 0x6, 0x0, 0x8, 0x4, 0x3, 0x1000, 0x9, 0x5, 0x7, 0x5, 0xfffffffb, 0xfff, 0x5, 0x8, 0x7fe703d2, 0x4, 0x8001, 0x55e, 0x3, 0x7, 0x6, 0xe, 0xe2f6, 0x3, 0xfffffc14, 0x4, 0xfffffff1, 0x2, 0x5, 0x6, 0xc5, 0x0, 0xd, 0x8, 0x5, 0xdcc, 0x300000, 0xffff, 0x10001, 0xfffffffd, 0x5a, 0x10006, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0x0, 0x80, 0x1b6, 0x7, 0xf, 0x81c5, 0xfffffffa, 0xd, 0x9, 0xfffffffd, 0x6, 0x10001, 0x1020000, 0x4, 0x22c5, 0x2, 0x57, 0x0, 0x9aa7, 0x2, 0xd54, 0x1, 0x39e, 0x2, 0x3ff, 0x0, 0x5d02, 0x8, 0x7, 0xff, 0x2dd8, 0x7, 0x3, 0xff, 0x6, 0x3, 0x6, 0x7, 0x713a, 0x9, 0x400, 0x1, 0x1000004e, 0x80, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x2, 0x4, 0x2, 0x8, 0x2, 0x1, 0x4, 0x5, 0xfffffffe, 0x10, 0x8, 0x0, 0xfe3, 0x8, 0xee, 0x2, 0x8, 0x0, 0x400, 0x7, 0xe45, 0x5, 0x2, 0x80, 0x3, 0x398, 0x40, 0x6, 0x2d4, 0x3, 0x7, 0x6, 0x26, 0x200, 0x1bb, 0x1ff, 0x7, 0x800000, 0x502e, 0x3, 0x8, 0x4, 0x7, 0x80000001, 0xce, 0x9, 0x1, 0x9, 0x1000, 0xffff, 0x7, 0x2, 0x2, 0x5, 0x9, 0x10000000, 0xfffffffd, 0xd, 0x6, 0xdf3, 0x1, 0x910, 0x3ff, 0x9, 0x8, 0x4, 0x1ff, 0x7fff, 0x401, 0x6249d0dd, 0x2e01, 0x1, 0x9, 0x5, 0x7fffffff, 0x361, 0xfffffc01, 0x6, 0x337, 0x28, 0x6, 0x1, 0x6fa, 0x8001, 0x400, 0x0, 0x7, 0xffffffff, 0xfffffff7, 0xfffffff9, 0x7a2, 0x0, 0x8, 0x200, 0xa40, 0x4, 0xfff, 0x1, 0x2fa03ad8, 0x3, 0xf, 0x400, 0x6, 0x4b4, 0x0, 0x7e, 0x5, 0x960, 0x8, 0xff, 0x98e, 0xfffffff9, 0x800, 0x2, 0x9, 0x1a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x5a, 0x7, 0x4, 0x0, 0x1, 0x5, 0xffffff40, 0x3, 0x7, 0x7ff, 0xfffffff7, 0x2, 0x4, 0x81, 0xff7d, 0x30, 0x2, 0x0, 0x1, 0x2, 0x6, 0x2, 0x7f, 0x7, 0xfffffffc, 0x0, 0x80000001, 0x0, 0x4, 0x80, 0x3, 0x7ff, 0x1, 0x4, 0x7, 0x80000001, 0x9, 0x3ff, 0x6, 0x2, 0x87e, 0x5, 0x81, 0x7, 0x400, 0x32c, 0x6, 0x7ff, 0x800, 0x2, 0x6, 0x2, 0x1, 0x3, 0x1c000000, 0x7fffffff, 0x5, 0xfff, 0x2, 0xe, 0x81, 0x6c0, 0x400, 0x7, 0x1, 0x2, 0x4, 0x80, 0x3, 0x7, 0x7fffffff, 0xfffffffe, 0x6, 0x5, 0x7, 0x2c, 0x3, 0x4, 0x9, 0x401, 0x32, 0x7, 0xc, 0x5, 0x3, 0x8, 0x7, 0xff, 0x1, 0xc9fd, 0x7000000, 0x1, 0x3, 0x34, 0x2, 0x5, 0x0, 0x1, 0x6, 0x7, 0x0, 0xfdb, 0x237, 0x1, 0x7, 0x9, 0xffffffff, 0xed, 0x1, 0xc5a, 0x80, 0xffff17b8, 0x9, 0x8, 0x0, 0x72, 0xe00000, 0x2, 0xffffffff, 0x2, 0x6, 0x9, 0x18000, 0x4, 0x8, 0x9, 0x0, 0xbe98, 0x10001, 0x9, 0x7f, 0x3, 0x1, 0x383d, 0x7fff, 0xfffffffd, 0x1, 0x3, 0x9, 0xffffff81, 0x100, 0x3, 0x3, 0x4, 0x200, 0xf, 0x8, 0x4, 0x6, 0x6, 0x0, 0x800007, 0x283a364a, 0x6, 0x100, 0x0, 0x3, 0x2, 0x8001, 0x40, 0x9, 0x4, 0xacfe, 0x4, 0x2, 0x5, 0xfffffff8, 0xfffffff8, 0x9, 0x2c7, 0x3, 0x2, 0x94, 0x8, 0xc, 0x9, 0x3ff, 0x3, 0x6, 0xd, 0x69, 0x9b, 0xfff, 0xffff, 0x4, 0x4, 0x3, 0x80000001, 0x2, 0xf48, 0x5, 0x4, 0x0, 0x8001, 0x80000000, 0x8, 0x2, 0x5, 0x4, 0x0, 0xffffffff, 0x100, 0x9e5ffad1, 0x1c000, 0x12, 0x7, 0x5, 0x3, 0xf92, 0x5, 0x1, 0xffff, 0x7, 0x7fffffff, 0x8, 0x6, 0x968, 0x10, 0x3, 0x7, 0x8, 0x30, 0x0, 0x400, 0x2, 0x6, 0x1, 0x3, 0x4, 0x7, 0x6, 0x8, 0x7, 0x3, 0x40000000, 0x9, 0x0, 0x4, 0x84ee0dfd, 0x3, 0x200, 0xd, 0x4, 0x7, 0x0, 0x8, 0xd9, 0xfff, 0xb85d, 0xa, 0x401, 0x7, 0x5, 0x25b3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x4, 0x8, 0xf, {0xd, 0x0, 0x2, 0x4, 0x0, 0x76d9}, {0x2, 0x2, 0x5, 0x5a, 0x2, 0x9}, 0x23a, 0x7, 0xd000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xfffffffff7ffffdc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) open(&(0x7f0000000240)='./file1\x00', 0x400800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.132454641s ago: executing program 2 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x80000001}]}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x17}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 1.042009385s ago: executing program 3 (id=875): pipe(0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 982.977208ms ago: executing program 3 (id=876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x2, &(0x7f00000003c0)=[{0x1, 0x3, 0xb, 0xfffffffe}, {0xc3, 0x4, 0x4, 0x6}]}) rmdir(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x240c0000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r7 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r7, 0x0, 0x0) ioctl$MON_IOCG_STATS(r7, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000000)={0x15, 0x1, 0x70000000}) 510.931208ms ago: executing program 0 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000050) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000600)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x0, 0x81, 0x0, 0x0, 0x4, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000005c0), 0x1}, 0x180443, 0x7, 0x43a3bd76, 0x7, 0x400009, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0x0, 0x4, 0x5, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffd}) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r5, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x289}], 0x51, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x94}}, 0x24004001) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_io_uring_setup(0x45c6, &(0x7f0000000640)={0x0, 0xe357, 0x80, 0x0, 0x2d9}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) 509.917898ms ago: executing program 4 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x3, 0xc3bb) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x4, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) gettid() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 31.471029ms ago: executing program 2 (id=879): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000100000000850018001b000000bdc591480a06704d2d6cb70000000000000095000000000000002574be9cad5fc3a02452599fca04c589da14c080a7c2711404e7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x115e, &(0x7f00000002c0)={@random="fafd63c9700f", @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1120, 0x2c, 0x0, @dev, @mcast2, {[@srh={0x3c, 0x4, 0x4, 0x2, 0x6, 0x60, 0xfff9, [@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}]}, @dstopts={0x32}, @hopopts={0xff, 0x210, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x58, {0x3, 0x14, 0xfc, 0x1, [0x2, 0x2, 0x8, 0x9, 0x93, 0x9, 0x200, 0xffffffffffffffff, 0x2, 0x45]}}, @generic={0xca, 0x1000, "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"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x2c, 0x0, 0x4f, 0x1, 0x0, 0x3, 0x66}, @routing={0xff, 0x0, 0x1, 0x71}, @hopopts={0x0, 0x0, '\x00', [@pad1, @pad1]}, @dstopts={0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x81}]}, @routing={0x9f, 0x4, 0x0, 0x3, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3881}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)={0x5, 0x8d, 0x3d, 0x8001, 0x1, "71feaf337e88b3e57800"}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000fcffffff01000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000800)="c7", 0x1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd4e}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, 0x0) 16.12376ms ago: executing program 3 (id=880): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = socket(0x28, 0x5, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r12 = syz_open_pts(r7, 0x0) r13 = dup3(r12, r5, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=881): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000040ffbe05ff000000000500000000000000000000000000003d"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0x67, 0x40, 0xd, 0x8, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x1, 0x6}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'bridge_slave_0\x00'}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd=r3, 0x89, 0x6, 0x9, 0x9, 0x1, {0x1}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) kernel console output (not intermixed with test programs): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.405294][ T5593] loop1: detected capacity change from 0 to 512 [ 107.412705][ T5589] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 107.426140][ T5591] bridge0: left promiscuous mode [ 107.433211][ T5593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.489030][ T5593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.498878][ T5597] bridge0: entered promiscuous mode [ 107.511415][ T5597] bridge0: port 3(macsec1) entered blocking state [ 107.517956][ T5597] bridge0: port 3(macsec1) entered disabled state [ 107.526805][ T5597] macsec1: entered allmulticast mode [ 107.532176][ T5597] bridge0: entered allmulticast mode [ 107.551873][ T5599] loop2: detected capacity change from 0 to 512 [ 107.568479][ T5597] macsec1: left allmulticast mode [ 107.573597][ T5597] bridge0: left allmulticast mode [ 107.581382][ T5597] bridge0: left promiscuous mode [ 107.587213][ T5599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.603650][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.617155][ T5601] usb usb1: usbfs: interface 0 claimed by hub while '+}[K' sets config #0 [ 107.680158][ T5603] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.470: EA inode hash validation failed [ 107.694931][ T5603] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.470: corrupted inode contents [ 107.708459][ T5603] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.470: mark_inode_dirty error [ 107.721204][ T5603] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.470: corrupted inode contents [ 107.734464][ T5603] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.470: mark_inode_dirty error [ 107.750363][ T5603] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.470: mark inode dirty (error -117) [ 107.766771][ T5603] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 107.779115][ T5603] EXT4-fs (loop0): 1 orphan inode deleted [ 107.789879][ T5603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.817216][ T5612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.473'. [ 107.827685][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.041481][ T5624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.476'. [ 108.140346][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.328782][ T5635] bridge0: entered promiscuous mode [ 108.345610][ T5635] bridge0: port 3(macsec1) entered blocking state [ 108.352080][ T5635] bridge0: port 3(macsec1) entered disabled state [ 108.457668][ T5635] macsec1: entered allmulticast mode [ 108.463021][ T5635] bridge0: entered allmulticast mode [ 109.289760][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 109.289779][ T29] audit: type=1400 audit(1765452453.947:8644): avc: denied { create } for pid=5630 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.316273][ T29] audit: type=1400 audit(1765452454.057:8645): avc: denied { create } for pid=5630 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.335627][ T29] audit: type=1400 audit(1765452454.187:8646): avc: denied { write } for pid=5630 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.355119][ T5635] macsec1: left allmulticast mode [ 109.360171][ T5635] bridge0: left allmulticast mode [ 109.365717][ T5635] bridge0: left promiscuous mode [ 109.533892][ T5640] lo speed is unknown, defaulting to 1000 [ 109.540250][ T5640] wg1 speed is unknown, defaulting to 1000 [ 109.583285][ T5644] lo speed is unknown, defaulting to 1000 [ 109.591147][ T5644] wg1 speed is unknown, defaulting to 1000 [ 109.613516][ T29] audit: type=1400 audit(1765452454.547:8647): avc: denied { write } for pid=5630 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.633990][ T29] audit: type=1400 audit(1765452454.557:8648): avc: denied { read } for pid=5630 comm="syz.0.479" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.655067][ T29] audit: type=1400 audit(1765452454.557:8649): avc: denied { open } for pid=5630 comm="syz.0.479" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.678282][ T29] audit: type=1400 audit(1765452454.557:8650): avc: denied { create } for pid=5630 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.698156][ T29] audit: type=1400 audit(1765452454.557:8651): avc: denied { bind } for pid=5630 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.717888][ T29] audit: type=1400 audit(1765452454.557:8652): avc: denied { map_create } for pid=5634 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.718369][ T5646] set_capacity_and_notify: 1 callbacks suppressed [ 109.718385][ T5646] loop3: detected capacity change from 0 to 512 [ 109.736959][ T29] audit: type=1400 audit(1765452454.557:8653): avc: denied { bpf } for pid=5634 comm="syz.3.481" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.752494][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.843290][ T5646] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.194657][ T5670] loop1: detected capacity change from 0 to 512 [ 110.237207][ T5670] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.487: EA inode hash validation failed [ 110.265466][ T5670] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.487: corrupted inode contents [ 110.294030][ T5670] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.487: mark_inode_dirty error [ 110.327644][ T5670] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.487: corrupted inode contents [ 110.361652][ T5670] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.487: mark_inode_dirty error [ 110.375225][ T5670] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.487: mark inode dirty (error -117) [ 110.389010][ T5670] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 110.401909][ T5670] EXT4-fs (loop1): 1 orphan inode deleted [ 110.412966][ T5670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.470322][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.481924][ T5674] futex_wake_op: syz.2.488 tries to shift op by 32; fix this program [ 110.588867][ T5685] 9p: Bad value for 'rfdno' [ 110.595611][ T5682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.490'. [ 110.605928][ T5685] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 110.640596][ T5685] team0: Port device dummy0 added [ 111.015287][ T5695] lo speed is unknown, defaulting to 1000 [ 111.021922][ T5695] wg1 speed is unknown, defaulting to 1000 [ 111.573935][ T5699] syzkaller0: entered promiscuous mode [ 111.579602][ T5699] syzkaller0: entered allmulticast mode [ 111.592508][ T5703] random: crng reseeded on system resumption [ 111.594121][ T5702] tipc: Enabled bearer , priority 0 [ 111.640753][ T5712] loop0: detected capacity change from 0 to 736 [ 111.647284][ T5712] iso9660: Unknown parameter 'noc1JzڃNompress' [ 111.664256][ T5712] loop0: detected capacity change from 0 to 1024 [ 111.675010][ T5712] EXT4-fs: Ignoring removed orlov option [ 111.683082][ T5712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.710308][ T5712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.724161][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 111.735085][ T5698] tipc: Resetting bearer [ 111.753048][ T5698] tipc: Disabling bearer [ 111.826225][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.494602][ T5748] futex_wake_op: syz.1.508 tries to shift op by 32; fix this program [ 112.512782][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.520293][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.527735][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.535146][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.542624][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.550099][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.557511][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.564950][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.572439][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.579886][ T3492] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.626193][ T3492] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 112.946799][ T5762] lo speed is unknown, defaulting to 1000 [ 112.953565][ T5762] wg1 speed is unknown, defaulting to 1000 [ 113.186188][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 113.261599][ T5767] syzkaller0: entered promiscuous mode [ 113.267160][ T5767] syzkaller0: entered allmulticast mode [ 113.362843][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 113.399642][ T5767] tipc: Enabled bearer , priority 0 [ 113.440831][ T5770] team0 (unregistering): Port device team_slave_0 removed [ 113.453070][ T5767] random: crng reseeded on system resumption [ 113.463683][ T5770] team0 (unregistering): Port device team_slave_1 removed [ 113.544008][ T3608] tipc: Resetting bearer [ 113.714123][ T5766] tipc: Resetting bearer [ 113.732273][ T5766] tipc: Disabling bearer [ 114.323403][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 114.323417][ T29] audit: type=1400 audit(1765452459.437:9268): avc: denied { connect } for pid=5792 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.384753][ T5802] 9p: Bad value for 'rfdno' [ 114.443487][ T5801] loop1: detected capacity change from 0 to 512 [ 114.451604][ T29] audit: type=1400 audit(1765452459.557:9269): avc: denied { create } for pid=5794 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.479806][ T29] audit: type=1400 audit(1765452459.597:9270): avc: denied { setopt } for pid=5794 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.500545][ T5802] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 114.509360][ T5801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.527645][ T29] audit: type=1400 audit(1765452459.617:9271): avc: denied { setopt } for pid=5794 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.532142][ T5798] bridge0: entered promiscuous mode [ 114.553568][ T29] audit: type=1400 audit(1765452459.667:9272): avc: denied { mount } for pid=5797 comm="syz.1.522" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.575900][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.584931][ T29] audit: type=1400 audit(1765452459.697:9273): avc: denied { setopt } for pid=5794 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.606420][ T5798] bridge0: port 3(macsec0) entered blocking state [ 114.612993][ T5798] bridge0: port 3(macsec0) entered disabled state [ 114.630515][ T5808] loop2: detected capacity change from 0 to 512 [ 114.643300][ T29] audit: type=1400 audit(1765452459.757:9274): avc: denied { write } for pid=5794 comm="syz.4.521" path="socket:[12763]" dev="sockfs" ino=12763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.643503][ T5803] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 114.676689][ T5809] netlink: 'syz.0.524': attribute type 39 has an invalid length. [ 114.684710][ T5798] macsec0: entered allmulticast mode [ 114.690120][ T5798] bridge0: entered allmulticast mode [ 114.692866][ T5808] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 114.695966][ T29] audit: type=1400 audit(1765452459.807:9275): avc: denied { mounton } for pid=5806 comm="syz.2.523" path="/111/file1" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.709900][ T5798] macsec0: left allmulticast mode [ 114.731218][ T5798] bridge0: left allmulticast mode [ 114.741514][ T29] audit: type=1400 audit(1765452459.847:9276): avc: denied { ioctl } for pid=5807 comm="syz.0.524" path="socket:[12766]" dev="sockfs" ino=12766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.758164][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.766262][ T29] audit: type=1326 audit(1765452459.847:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 114.780834][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.806086][ T5798] bridge0: left promiscuous mode [ 114.831541][ T5803] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.847042][ T5803] team0: Port device dummy0 removed [ 114.854652][ T5803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.958837][ T5815] bridge0: entered promiscuous mode [ 114.960477][ T5815] bridge0: port 3(macsec0) entered blocking state [ 114.960520][ T5815] bridge0: port 3(macsec0) entered disabled state [ 114.960594][ T5815] macsec0: entered allmulticast mode [ 114.960610][ T5815] bridge0: entered allmulticast mode [ 114.961850][ T5815] macsec0: left allmulticast mode [ 114.961867][ T5815] bridge0: left allmulticast mode [ 114.972011][ T5815] bridge0: left promiscuous mode [ 115.015276][ T5819] loop1: detected capacity change from 0 to 512 [ 115.023488][ T5819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.024079][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.046589][ T5818] loop3: detected capacity change from 0 to 512 [ 115.084235][ T5818] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.526: EA inode hash validation failed [ 115.085815][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 115.085865][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 115.085876][ T5818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.526: corrupted inode contents [ 115.086876][ T5818] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.526: mark_inode_dirty error [ 115.087905][ T5818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.526: corrupted inode contents [ 115.088747][ T5818] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.526: mark_inode_dirty error [ 115.103829][ T5823] loop0: detected capacity change from 0 to 128 [ 115.112041][ T5818] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.526: mark inode dirty (error -117) [ 115.148880][ T5823] bio_check_eod: 20 callbacks suppressed [ 115.148896][ T5823] syz.0.525: attempt to access beyond end of device [ 115.148896][ T5823] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 115.190495][ T5818] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 115.215855][ T5818] EXT4-fs (loop3): 1 orphan inode deleted [ 115.223908][ T5823] syz.0.525: attempt to access beyond end of device [ 115.223908][ T5823] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 115.233177][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.237650][ T5823] buffer_io_error: 9 callbacks suppressed [ 115.237664][ T5823] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 115.237961][ T5823] syz.0.525: attempt to access beyond end of device [ 115.237961][ T5823] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 115.277607][ T5823] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 115.287274][ T5823] syz.0.525: attempt to access beyond end of device [ 115.287274][ T5823] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 115.301519][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.312629][ T5823] syz.0.525: attempt to access beyond end of device [ 115.312629][ T5823] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 115.326261][ T5823] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 115.335188][ T5823] syz.0.525: attempt to access beyond end of device [ 115.335188][ T5823] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 115.348794][ T5823] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 115.360700][ T5823] syz.0.525: attempt to access beyond end of device [ 115.360700][ T5823] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 115.472414][ T5823] syz.0.525: attempt to access beyond end of device [ 115.472414][ T5823] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 115.486116][ T5823] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 115.501671][ T5823] syz.0.525: attempt to access beyond end of device [ 115.501671][ T5823] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 115.515332][ T5823] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 115.525769][ T5823] syz.0.525: attempt to access beyond end of device [ 115.525769][ T5823] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 115.540850][ T5823] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 115.551236][ T5823] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 115.616112][ T5839] lo speed is unknown, defaulting to 1000 [ 115.622873][ T5839] wg1 speed is unknown, defaulting to 1000 [ 115.747902][ T5823] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 115.758183][ T5823] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 116.108746][ T5845] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 116.242945][ T5844] syzkaller0: entered promiscuous mode [ 116.248454][ T5844] syzkaller0: entered allmulticast mode [ 116.289162][ T5844] tipc: Enabled bearer , priority 0 [ 116.303419][ T5844] random: crng reseeded on system resumption [ 116.347651][ T5843] tipc: Resetting bearer [ 116.388103][ T5843] tipc: Disabling bearer [ 116.404167][ T5857] bridge0: port 3(batadv1) entered blocking state [ 116.410692][ T5857] bridge0: port 3(batadv1) entered disabled state [ 116.417659][ T5857] batadv1: entered allmulticast mode [ 116.424427][ T5857] batadv1: entered promiscuous mode [ 116.433826][ T5857] loop4: detected capacity change from 0 to 128 [ 116.462736][ T5857] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 116.714833][ T5868] bridge0: entered promiscuous mode [ 116.736178][ T5868] bridge0: port 4(macsec1) entered blocking state [ 116.742669][ T5868] bridge0: port 4(macsec1) entered disabled state [ 116.759649][ T5868] macsec1: entered allmulticast mode [ 116.764970][ T5868] bridge0: entered allmulticast mode [ 116.775025][ T5874] loop4: detected capacity change from 0 to 512 [ 116.790311][ T5868] macsec1: left allmulticast mode [ 116.795372][ T5868] bridge0: left allmulticast mode [ 116.820468][ T5874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.833586][ T5868] bridge0: left promiscuous mode [ 116.850683][ T5876] batadv_slave_1: entered promiscuous mode [ 116.881986][ T5872] loop1: detected capacity change from 0 to 2048 [ 116.893834][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.909671][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 116.918910][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 116.971774][ T3302] Alternate GPT is invalid, using primary GPT. [ 116.978221][ T3302] loop1: p2 p3 p7 [ 117.016516][ T5872] Alternate GPT is invalid, using primary GPT. [ 117.022992][ T5872] loop1: p2 p3 p7 [ 117.027395][ T5881] bridge0: entered promiscuous mode [ 117.040940][ T5881] bridge0: port 4(macsec1) entered blocking state [ 117.047481][ T5881] bridge0: port 4(macsec1) entered disabled state [ 117.055651][ T5881] macsec1: entered allmulticast mode [ 117.061096][ T5881] bridge0: entered allmulticast mode [ 117.070749][ T5882] loop4: detected capacity change from 0 to 512 [ 117.091611][ T5882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.104422][ T5881] macsec1: left allmulticast mode [ 117.109520][ T5881] bridge0: left allmulticast mode [ 117.117590][ T5881] bridge0: left promiscuous mode [ 117.127971][ T5882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.174186][ T5885] loop2: detected capacity change from 0 to 2048 [ 117.230237][ T5885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 117.321670][ T5885] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.362147][ T5885] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 338 with error 28 [ 117.374560][ T5885] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.374560][ T5885] [ 117.384440][ T5885] EXT4-fs (loop2): Total free blocks count 0 [ 117.390451][ T5885] EXT4-fs (loop2): Free/Dirty block details [ 117.396354][ T5885] EXT4-fs (loop2): free_blocks=2415919104 [ 117.402123][ T5885] EXT4-fs (loop2): dirty_blocks=352 [ 117.407453][ T5885] EXT4-fs (loop2): Block reservation details [ 117.413492][ T5885] EXT4-fs (loop2): i_reserved_data_blocks=22 [ 117.473138][ T5885] netlink: 144 bytes leftover after parsing attributes in process `syz.2.544'. [ 117.527082][ T5899] lo speed is unknown, defaulting to 1000 [ 117.533079][ T5899] wg1 speed is unknown, defaulting to 1000 [ 117.624726][ T5875] batadv_slave_1: left promiscuous mode [ 117.698648][ T3608] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 338 with error 28 [ 117.927073][ T5905] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 118.414110][ T5914] syzkaller0: entered promiscuous mode [ 118.419781][ T5914] syzkaller0: entered allmulticast mode [ 118.533955][ T5920] random: crng reseeded on system resumption [ 118.560231][ T5916] tipc: Enabled bearer , priority 0 [ 118.656865][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 118.656999][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 118.676524][ T5923] loop2: detected capacity change from 0 to 128 [ 118.779904][ T5913] tipc: Resetting bearer [ 118.798588][ T5913] tipc: Disabling bearer [ 118.885693][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.552'. [ 119.030416][ T5927] serio: Serial port ptm1 [ 119.097067][ T5938] lo speed is unknown, defaulting to 1000 [ 119.103621][ T5938] wg1 speed is unknown, defaulting to 1000 [ 119.274237][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.283018][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.304615][ T5942] Cannot find del_set index 3 as target [ 119.332440][ T3737] hid_parser_main: 8 callbacks suppressed [ 119.332454][ T3737] hid-generic 0000:86010001:0006.0003: unknown main item tag 0x0 [ 119.379885][ T3737] hid-generic 0000:86010001:0006.0003: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 119.511089][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 119.511105][ T29] audit: type=1400 audit(1765452464.630:9832): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 119.682975][ T29] audit: type=1400 audit(1765452464.730:9833): avc: denied { write } for pid=5940 comm="syz.3.554" name="hidraw0" dev="devtmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.874511][ T29] audit: type=1326 audit(1765452464.990:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 119.897909][ T29] audit: type=1326 audit(1765452464.990:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 119.974081][ T29] audit: type=1326 audit(1765452464.990:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 119.997439][ T29] audit: type=1326 audit(1765452464.990:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 120.020818][ T29] audit: type=1326 audit(1765452464.990:9838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 120.044188][ T29] audit: type=1326 audit(1765452464.990:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 120.044242][ T29] audit: type=1326 audit(1765452464.990:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 120.044278][ T29] audit: type=1326 audit(1765452464.990:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5951 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 120.195703][ T5960] loop2: detected capacity change from 0 to 128 [ 120.299111][ T5969] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 120.306914][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.565'. [ 120.333576][ T5967] syzkaller0: entered promiscuous mode [ 120.339306][ T5967] syzkaller0: entered allmulticast mode [ 120.358131][ T5969] batman_adv: batadv0: Adding interface: veth1_vlan [ 120.364834][ T5969] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.399978][ T5969] batman_adv: batadv0: Interface activated: veth1_vlan [ 120.407780][ T5972] tipc: Enabled bearer , priority 0 [ 120.428896][ T5967] random: crng reseeded on system resumption [ 120.579805][ T5965] tipc: Resetting bearer [ 120.598345][ T5965] tipc: Disabling bearer [ 120.706353][ T5982] lo speed is unknown, defaulting to 1000 [ 120.712808][ T5982] wg1 speed is unknown, defaulting to 1000 [ 121.227376][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.569'. [ 121.494749][ T6003] lo speed is unknown, defaulting to 1000 [ 121.500909][ T6003] wg1 speed is unknown, defaulting to 1000 [ 121.599314][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.622768][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.664012][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 121.700126][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 121.754512][ T6011] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 121.801792][ T6011] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.106383][ T6023] Cannot find del_set index 3 as target [ 122.172998][ T10] hid-generic 0000:86010001:0006.0004: unknown main item tag 0x0 [ 122.199646][ T10] hid-generic 0000:86010001:0006.0004: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 122.354392][ T6025] loop1: detected capacity change from 0 to 1024 [ 122.369648][ T6025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.383636][ T6025] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 122.394648][ T6025] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 122.411880][ T6025] JBD2: no valid journal superblock found [ 122.417651][ T6025] EXT4-fs (loop1): Could not load journal inode [ 122.478107][ T6031] loop2: detected capacity change from 0 to 1764 [ 123.538489][ T6061] netlink: 60 bytes leftover after parsing attributes in process `syz.4.585'. [ 123.629885][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 123.662952][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 123.730888][ T6065] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 123.763914][ T6067] bridge0: port 1(macsec1) entered blocking state [ 123.770388][ T6067] bridge0: port 1(macsec1) entered disabled state [ 123.798489][ T6067] macsec1: entered allmulticast mode [ 123.803823][ T6067] bridge0: entered allmulticast mode [ 123.813804][ T6067] macsec1: left allmulticast mode [ 123.813821][ T6067] bridge0: left allmulticast mode [ 123.817306][ T6070] loop0: detected capacity change from 0 to 512 [ 123.840399][ T6070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.841279][ T6070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.927562][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 123.947384][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'. [ 123.984955][ T6076] loop0: detected capacity change from 0 to 164 [ 123.995616][ T6069] loop4: detected capacity change from 0 to 128 [ 124.012543][ T6076] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.036168][ T6069] bio_check_eod: 50 callbacks suppressed [ 124.036240][ T6069] syz.4.588: attempt to access beyond end of device [ 124.036240][ T6069] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 124.040667][ T6076] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.056472][ T6069] syz.4.588: attempt to access beyond end of device [ 124.056472][ T6069] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 124.077005][ T6069] buffer_io_error: 28 callbacks suppressed [ 124.077020][ T6069] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 124.123852][ T6076] rock: directory entry would overflow storage [ 124.123864][ T6076] rock: sig=0x4f50, size=4, remaining=3 [ 124.123881][ T6076] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 124.124088][ T6080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.124222][ T6080] Symlink component flag not implemented [ 124.124230][ T6080] Symlink component flag not implemented [ 124.124621][ T6080] Symlink component flag not implemented (7) [ 124.124630][ T6080] Symlink component flag not implemented (116) [ 124.125282][ T6080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.125389][ T6080] rock: directory entry would overflow storage [ 124.125395][ T6080] rock: sig=0x4f50, size=4, remaining=3 [ 124.125407][ T6080] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 124.155673][ T6069] syz.4.588: attempt to access beyond end of device [ 124.155673][ T6069] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 124.155701][ T6069] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 124.155956][ T6069] syz.4.588: attempt to access beyond end of device [ 124.155956][ T6069] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 124.156278][ T6069] syz.4.588: attempt to access beyond end of device [ 124.156278][ T6069] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 124.156302][ T6069] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 124.156771][ T6069] syz.4.588: attempt to access beyond end of device [ 124.156771][ T6069] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 124.156792][ T6069] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 124.157850][ T6069] syz.4.588: attempt to access beyond end of device [ 124.157850][ T6069] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 124.159451][ T6069] syz.4.588: attempt to access beyond end of device [ 124.159451][ T6069] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 124.174962][ T6084] SELinux: Context ׸X7dQYI{CpUhٻ r: is not valid (left unmapped). [ 124.175200][ T6069] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 124.355629][ T6088] loop2: detected capacity change from 0 to 512 [ 124.355932][ T6088] EXT4-fs: Ignoring removed bh option [ 124.356145][ T6069] syz.4.588: attempt to access beyond end of device [ 124.356145][ T6069] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 124.356166][ T6069] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 124.356916][ T6069] syz.4.588: attempt to access beyond end of device [ 124.356916][ T6069] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 124.357477][ T6069] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 124.357520][ T6069] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 124.360671][ T6069] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 124.360688][ T6069] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 124.368112][ T6088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.368267][ T6088] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.515356][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.821067][ T29] kauditd_printk_skb: 1094 callbacks suppressed [ 124.821080][ T29] audit: type=1326 audit(1765452469.639:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.3.607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1310def749 code=0x0 [ 124.859548][ T6107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.596'. [ 124.873094][ T29] audit: type=1400 audit(1765452469.685:10937): avc: denied { write } for pid=6110 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.904909][ T29] audit: type=1400 audit(1765452469.704:10938): avc: denied { unmount } for pid=6110 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.926578][ T29] audit: type=1400 audit(1765452469.732:10939): avc: denied { create } for pid=6106 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.002118][ T29] audit: type=1400 audit(1765452469.807:10940): avc: denied { setopt } for pid=6106 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.088526][ T29] audit: type=1400 audit(1765452469.882:10941): avc: denied { execmem } for pid=6119 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 125.161984][ T6122] netlink: 60 bytes leftover after parsing attributes in process `syz.2.600'. [ 125.172866][ T29] audit: type=1326 audit(1765452469.966:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 125.209818][ T29] audit: type=1326 audit(1765452469.985:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 125.233280][ T29] audit: type=1326 audit(1765452469.985:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 125.256738][ T29] audit: type=1326 audit(1765452469.985:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 125.385472][ T6129] lo speed is unknown, defaulting to 1000 [ 125.391605][ T6129] wg1 speed is unknown, defaulting to 1000 [ 125.947069][ T6138] loop3: detected capacity change from 0 to 512 [ 126.027780][ T6138] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.087515][ T6138] EXT4-fs (loop3): mount failed [ 126.147594][ T6128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.602'. [ 126.156599][ T6128] netem: unknown loss type 13 [ 126.161360][ T6128] netem: change failed [ 126.167261][ T6146] siw: device registration error -23 [ 126.186028][ T6146] loop0: detected capacity change from 0 to 512 [ 126.212432][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.213368][ T6146] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.242842][ T6146] EXT4-fs error (device loop0): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.0.608: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 126.243117][ T6146] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #12: comm syz.0.608: directory missing '.' [ 126.324472][ T6160] loop4: detected capacity change from 0 to 2048 [ 126.324959][ T6160] EXT4-fs: Ignoring removed bh option [ 126.345629][ T6160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.349857][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 126.349924][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 126.354077][ T6165] loop3: detected capacity change from 0 to 128 [ 126.457387][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.514810][ T6171] loop4: detected capacity change from 0 to 512 [ 126.522589][ T6171] EXT4-fs: Ignoring removed nobh option [ 126.548746][ T6171] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.558201][ T6171] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 126.571343][ T6171] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.611: corrupted inode contents [ 126.583490][ T6171] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.611: mark_inode_dirty error [ 126.595339][ T6171] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.611: corrupted inode contents [ 126.607728][ T6171] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.611: mark_inode_dirty error [ 126.620517][ T6171] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.611: mark inode dirty (error -117) [ 126.633279][ T6171] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 126.642531][ T6171] EXT4-fs (loop4): 1 orphan inode deleted [ 126.648928][ T6171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.661702][ T6171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.974685][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.008117][ T6182] netlink: 'syz.1.615': attribute type 39 has an invalid length. [ 127.010466][ T6184] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 127.027694][ T6184] veth1_vlan: left promiscuous mode [ 127.034779][ T6184] batman_adv: batadv0: Adding interface: veth1_vlan [ 127.041645][ T6184] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.067726][ T6184] batman_adv: batadv0: Interface activated: veth1_vlan [ 127.246090][ T6197] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 127.298530][ T6198] siw: device registration error -23 [ 127.468194][ T6208] lo speed is unknown, defaulting to 1000 [ 127.474494][ T6208] wg1 speed is unknown, defaulting to 1000 [ 127.863910][ T6213] syzkaller0: entered promiscuous mode [ 127.869463][ T6213] syzkaller0: entered allmulticast mode [ 127.919672][ T6214] tipc: Enabled bearer , priority 0 [ 128.010725][ T6213] random: crng reseeded on system resumption [ 128.217485][ T6212] tipc: Resetting bearer [ 128.262353][ T6212] tipc: Disabling bearer [ 128.276118][ T6218] bridge0: entered promiscuous mode [ 128.310387][ T6218] bridge0: port 3(macsec1) entered blocking state [ 128.316936][ T6218] bridge0: port 3(macsec1) entered disabled state [ 128.338138][ T6222] loop3: detected capacity change from 0 to 512 [ 128.354763][ T6218] macsec1: entered allmulticast mode [ 128.360158][ T6218] bridge0: entered allmulticast mode [ 128.371574][ T6218] macsec1: left allmulticast mode [ 128.376691][ T6218] bridge0: left allmulticast mode [ 128.385775][ T6218] bridge0: left promiscuous mode [ 128.394695][ T6222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.453004][ T6222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.496666][ T6231] loop4: detected capacity change from 0 to 1024 [ 128.578194][ T6242] lo speed is unknown, defaulting to 1000 [ 128.584523][ T6242] wg1 speed is unknown, defaulting to 1000 [ 128.772201][ T6231] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.626: Failed to acquire dquot type 0 [ 128.834400][ T6231] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 128.889694][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.626: corrupted inode contents [ 128.970497][ T6231] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.626: mark_inode_dirty error [ 129.015698][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.626: corrupted inode contents [ 129.065661][ T6231] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.626: mark_inode_dirty error [ 129.143223][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.626: corrupted inode contents [ 129.230597][ T6231] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 129.249122][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.626: corrupted inode contents [ 129.264517][ T6231] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.626: mark_inode_dirty error [ 129.295649][ T6231] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 129.323221][ T6231] EXT4-fs (loop4): 1 truncate cleaned up [ 129.327057][ T6231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.342680][ T6252] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 129.342694][ T6252] __nla_validate_parse: 1 callbacks suppressed [ 129.342757][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.629'. [ 129.343597][ T6252] batman_adv: batadv0: Adding interface: veth1_vlan [ 129.343687][ T6252] batman_adv: batadv0: Interface activated: veth1_vlan [ 129.470778][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 129.492941][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 129.502295][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.684762][ T6261] loop3: detected capacity change from 0 to 128 [ 129.738635][ T6261] bio_check_eod: 50 callbacks suppressed [ 129.738653][ T6261] syz.3.631: attempt to access beyond end of device [ 129.738653][ T6261] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 129.831656][ T6261] syz.3.631: attempt to access beyond end of device [ 129.831656][ T6261] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 129.845290][ T6261] buffer_io_error: 28 callbacks suppressed [ 129.845302][ T6261] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 129.935345][ T6261] syz.3.631: attempt to access beyond end of device [ 129.935345][ T6261] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 129.949030][ T6261] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 130.007787][ T6261] syz.3.631: attempt to access beyond end of device [ 130.007787][ T6261] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 130.057675][ T6261] syz.3.631: attempt to access beyond end of device [ 130.057675][ T6261] loop3: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 130.071285][ T6261] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 130.131270][ T6261] syz.3.631: attempt to access beyond end of device [ 130.131270][ T6261] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 130.144921][ T6261] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 130.183239][ T6261] syz.3.631: attempt to access beyond end of device [ 130.183239][ T6261] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 130.271443][ T6261] syz.3.631: attempt to access beyond end of device [ 130.271443][ T6261] loop3: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 130.285109][ T6261] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 130.321016][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 130.321031][ T29] audit: type=1400 audit(1765452474.774:11283): avc: denied { read } for pid=6267 comm="syz.1.634" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.351495][ T29] audit: type=1400 audit(1765452474.774:11284): avc: denied { open } for pid=6267 comm="syz.1.634" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.370725][ T6261] syz.3.631: attempt to access beyond end of device [ 130.370725][ T6261] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 130.376126][ T29] audit: type=1400 audit(1765452474.774:11285): avc: denied { ioctl } for pid=6267 comm="syz.1.634" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.389710][ T6261] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 130.453374][ T29] audit: type=1326 audit(1765452474.811:11286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.476842][ T29] audit: type=1326 audit(1765452474.811:11287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.500241][ T29] audit: type=1326 audit(1765452474.811:11288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.523754][ T29] audit: type=1326 audit(1765452474.811:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.547253][ T29] audit: type=1326 audit(1765452474.811:11290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.570651][ T29] audit: type=1326 audit(1765452474.811:11291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.594111][ T29] audit: type=1326 audit(1765452474.811:11292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 130.629800][ T6270] loop4: detected capacity change from 0 to 2048 [ 130.690206][ T6270] Alternate GPT is invalid, using primary GPT. [ 130.696613][ T6270] loop4: p2 p3 p7 [ 130.835077][ T6285] lo speed is unknown, defaulting to 1000 [ 130.841556][ T6285] wg1 speed is unknown, defaulting to 1000 [ 131.172717][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.209320][ T6289] 9p: Bad value for 'rfdno' [ 131.279319][ T6290] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 131.306474][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.565408][ T6296] loop4: detected capacity change from 0 to 512 [ 131.757315][ T6299] lo speed is unknown, defaulting to 1000 [ 131.764525][ T6299] wg1 speed is unknown, defaulting to 1000 [ 131.924881][ T6301] lo speed is unknown, defaulting to 1000 [ 131.931256][ T6301] wg1 speed is unknown, defaulting to 1000 [ 132.624023][ T6296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.817360][ T6296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 132.830416][ T6296] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.756139][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 133.779008][ T6309] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 133.848181][ T6317] random: crng reseeded on system resumption [ 133.867863][ T6319] serio: Serial port ttyS3 [ 133.884992][ T6314] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.892580][ T6314] vhci_hcd vhci_hcd.2: invalid port number 96 [ 133.898699][ T6314] vhci_hcd vhci_hcd.2: default hub control req: 0500 vfffa i0060 l0 [ 133.917035][ T6314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.927099][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 133.936065][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.943664][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.952097][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.959504][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.978377][ T6314] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 133.985482][ T6314] batman_adv: batadv0: Removing interface: veth1_vlan [ 134.859826][ T6329] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 134.867859][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.644'. [ 134.922880][ T6329] batman_adv: batadv0: Adding interface: veth1_vlan [ 134.929513][ T6329] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.955361][ T6329] batman_adv: batadv0: Interface activated: veth1_vlan [ 135.038938][ T6344] lo speed is unknown, defaulting to 1000 [ 135.045463][ T6344] wg1 speed is unknown, defaulting to 1000 [ 135.285007][ T6347] bond1 (unregistering): Released all slaves [ 135.772950][ T6355] lo speed is unknown, defaulting to 1000 [ 135.779544][ T6355] wg1 speed is unknown, defaulting to 1000 [ 135.964402][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'. [ 135.979367][ T6353] loop4: detected capacity change from 0 to 512 [ 135.992895][ T6353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.191559][ T6353] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.270183][ T6353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.650: bg 0: block 248: padding at end of block bitmap is not set [ 136.299755][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 136.299847][ T29] audit: type=1400 audit(1765452480.368:11428): avc: denied { read } for pid=6361 comm="syz.1.652" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.321419][ T6353] Quota error (device loop4): write_blk: dquota write failed [ 136.328905][ T29] audit: type=1400 audit(1765452480.368:11429): avc: denied { open } for pid=6361 comm="syz.1.652" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.336304][ T6353] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 136.369469][ T6353] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.650: Failed to acquire dquot type 1 [ 136.397246][ T6364] Cannot find del_set index 3 as target [ 136.445850][ T3424] hid-generic 0000:86010001:0006.0005: unknown main item tag 0x0 [ 136.455001][ T3424] hid-generic 0000:86010001:0006.0005: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 136.500921][ T6353] EXT4-fs (loop4): 1 truncate cleaned up [ 136.510662][ T6353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.534154][ T29] audit: type=1400 audit(1765452480.583:11430): avc: denied { create } for pid=6352 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.553698][ T29] audit: type=1400 audit(1765452480.583:11431): avc: denied { getopt } for pid=6352 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.573281][ T29] audit: type=1400 audit(1765452480.592:11432): avc: denied { create } for pid=6352 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.592787][ T29] audit: type=1400 audit(1765452480.592:11433): avc: denied { ioctl } for pid=6352 comm="syz.4.650" path="socket:[14687]" dev="sockfs" ino=14687 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.685244][ T6373] loop3: detected capacity change from 0 to 2048 [ 136.730151][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 136.730893][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.762233][ T29] audit: type=1400 audit(1765452480.807:11434): avc: denied { append } for pid=6372 comm="syz.3.659" path="/120/file2/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.834112][ T6381] batadv_slave_1: entered promiscuous mode [ 136.858253][ T6382] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.890252][ T6383] lo speed is unknown, defaulting to 1000 [ 136.896759][ T6383] wg1 speed is unknown, defaulting to 1000 [ 137.026528][ T29] audit: type=1326 audit(1765452480.835:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 137.113245][ T6382] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 166 with error 28 [ 137.125692][ T6382] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.125692][ T6382] [ 137.135377][ T6382] EXT4-fs (loop3): Total free blocks count 0 [ 137.141465][ T6382] EXT4-fs (loop3): Free/Dirty block details [ 137.147369][ T6382] EXT4-fs (loop3): free_blocks=2415919104 [ 137.153109][ T6382] EXT4-fs (loop3): dirty_blocks=176 [ 137.158328][ T6382] EXT4-fs (loop3): Block reservation details [ 137.164311][ T6382] EXT4-fs (loop3): i_reserved_data_blocks=11 [ 137.453950][ T6382] netlink: 144 bytes leftover after parsing attributes in process `syz.3.659'. [ 137.687408][ T6380] batadv_slave_1: left promiscuous mode [ 137.750875][ T6391] serio: Serial port ptm0 [ 137.765879][ T6394] loop4: detected capacity change from 0 to 2048 [ 137.801458][ T6373] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 166 with error 28 [ 137.805813][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 137.956011][ T6394] netlink: 'syz.4.662': attribute type 3 has an invalid length. [ 138.078219][ T6402] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.121728][ T6402] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 622 with error 28 [ 138.134136][ T6402] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.134136][ T6402] [ 138.143767][ T6402] EXT4-fs (loop4): Total free blocks count 0 [ 138.149774][ T6402] EXT4-fs (loop4): Free/Dirty block details [ 138.155775][ T6402] EXT4-fs (loop4): free_blocks=2415919104 [ 138.161546][ T6402] EXT4-fs (loop4): dirty_blocks=624 [ 138.166743][ T6402] EXT4-fs (loop4): Block reservation details [ 138.172731][ T6402] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 138.446351][ T6409] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 138.454065][ T6409] netlink: 224 bytes leftover after parsing attributes in process `syz.1.665'. [ 139.103144][ T6432] lo speed is unknown, defaulting to 1000 [ 139.109634][ T6432] wg1 speed is unknown, defaulting to 1000 [ 139.862233][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 140.069585][ T6437] bridge0: entered promiscuous mode [ 140.076421][ T6437] bridge0: port 3(macsec1) entered blocking state [ 140.082921][ T6437] bridge0: port 3(macsec1) entered disabled state [ 140.089997][ T6437] macsec1: entered allmulticast mode [ 140.095566][ T6437] bridge0: entered allmulticast mode [ 140.101437][ T6437] macsec1: left allmulticast mode [ 140.106521][ T6437] bridge0: left allmulticast mode [ 140.112587][ T6437] bridge0: left promiscuous mode [ 140.165376][ T6440] lo speed is unknown, defaulting to 1000 [ 140.201616][ T6440] wg1 speed is unknown, defaulting to 1000 [ 140.244038][ T6453] loop3: detected capacity change from 0 to 512 [ 140.263164][ T6449] batadv_slave_1: entered promiscuous mode [ 140.275016][ T6453] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.672: inode #0: comm syz.3.672: iget: illegal inode # [ 140.385344][ T6453] EXT4-fs (loop3): get orphan inode failed [ 140.424664][ T6453] EXT4-fs (loop3): mount failed [ 141.093656][ T6448] batadv_slave_1: left promiscuous mode [ 141.146999][ T6475] netlink: 176 bytes leftover after parsing attributes in process `syz.1.678'. [ 141.172555][ T6471] siw: device registration error -23 [ 141.201037][ T6455] Cannot find del_set index 3 as target [ 141.263772][ T6475] loop1: detected capacity change from 0 to 2048 [ 141.322006][ T3302] Alternate GPT is invalid, using primary GPT. [ 141.328329][ T3302] loop1: p2 p3 p7 [ 141.350641][ T6475] Alternate GPT is invalid, using primary GPT. [ 141.357036][ T6475] loop1: p2 p3 p7 [ 141.469758][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 141.505780][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 141.541083][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 141.569441][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 141.688671][ T6494] bridge0: port 1(macsec1) entered blocking state [ 141.695233][ T6494] bridge0: port 1(macsec1) entered disabled state [ 141.719173][ T6494] macsec1: entered allmulticast mode [ 141.724578][ T6494] bridge0: entered allmulticast mode [ 141.737488][ T6494] macsec1: left allmulticast mode [ 141.742576][ T6494] bridge0: left allmulticast mode [ 141.838477][ T6506] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 141.840057][ T6504] netlink: 'syz.4.687': attribute type 39 has an invalid length. [ 141.846155][ T6506] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 141.846167][ T6506] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.688'. [ 141.846491][ T6506] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 141.878796][ T6506] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 141.886618][ T6506] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.688'. [ 141.902081][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 141.902094][ T29] audit: type=1400 audit(1765452485.606:11997): avc: denied { ioctl } for pid=6501 comm="syz.1.686" path="socket:[14155]" dev="sockfs" ino=14155 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.972232][ T6511] netlink: 'syz.0.688': attribute type 10 has an invalid length. [ 141.999350][ T6511] macvlan1: entered promiscuous mode [ 142.005020][ T6513] loop1: detected capacity change from 0 to 512 [ 142.011431][ T6511] macvlan1: entered allmulticast mode [ 142.017886][ T6511] veth1_vlan: entered promiscuous mode [ 142.021243][ T29] audit: type=1326 audit(1765452485.718:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.023513][ T6511] veth1_vlan: entered allmulticast mode [ 142.046890][ T29] audit: type=1326 audit(1765452485.718:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.055105][ T6511] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 142.100236][ T29] audit: type=1326 audit(1765452485.784:12000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.100458][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 142.123771][ T29] audit: type=1326 audit(1765452485.784:12001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.133236][ T6513] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.686: inode #0: comm syz.1.686: iget: illegal inode # [ 142.155940][ T29] audit: type=1326 audit(1765452485.793:12002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.155965][ T29] audit: type=1326 audit(1765452485.793:12003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.215836][ T29] audit: type=1326 audit(1765452485.793:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.239213][ T29] audit: type=1326 audit(1765452485.793:12005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.240384][ T6513] EXT4-fs (loop1): get orphan inode failed [ 142.262699][ T29] audit: type=1326 audit(1765452485.793:12006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 142.270730][ T6513] EXT4-fs (loop1): mount failed [ 142.309095][ T6514] net_ratelimit: 96 callbacks suppressed [ 142.309105][ T6514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.320654][ T6509] syz.3.689 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.344281][ T6509] CPU: 0 UID: 0 PID: 6509 Comm: syz.3.689 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.344314][ T6509] Tainted: [W]=WARN [ 142.344320][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.344333][ T6509] Call Trace: [ 142.344338][ T6509] [ 142.344346][ T6509] __dump_stack+0x1d/0x30 [ 142.344431][ T6509] dump_stack_lvl+0xe8/0x140 [ 142.344461][ T6509] dump_stack+0x15/0x1b [ 142.344521][ T6509] dump_header+0x81/0x240 [ 142.344588][ T6509] oom_kill_process+0x295/0x350 [ 142.344631][ T6509] out_of_memory+0x97b/0xb80 [ 142.344709][ T6509] try_charge_memcg+0x610/0xa10 [ 142.344742][ T6509] obj_cgroup_charge_pages+0xa6/0x150 [ 142.344805][ T6509] __memcg_kmem_charge_page+0x9f/0x170 [ 142.344860][ T6509] __alloc_frozen_pages_noprof+0x18f/0x360 [ 142.344982][ T6509] alloc_pages_mpol+0xb3/0x260 [ 142.345042][ T6509] alloc_pages_noprof+0x90/0x130 [ 142.345093][ T6509] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 142.345142][ T6509] __kvmalloc_node_noprof+0x492/0x6b0 [ 142.345169][ T6509] ? ip_set_alloc+0x24/0x30 [ 142.345275][ T6509] ? ip_set_alloc+0x24/0x30 [ 142.345380][ T6509] ip_set_alloc+0x24/0x30 [ 142.345409][ T6509] hash_netiface_create+0x282/0x740 [ 142.345463][ T6509] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.345503][ T6509] ip_set_create+0x3cc/0x970 [ 142.345614][ T6509] ? __nla_parse+0x40/0x60 [ 142.345656][ T6509] nfnetlink_rcv_msg+0x4c6/0x590 [ 142.345772][ T6509] netlink_rcv_skb+0x123/0x220 [ 142.345810][ T6509] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.345882][ T6509] nfnetlink_rcv+0x167/0x16c0 [ 142.345914][ T6509] ? kmem_cache_free+0xe3/0x3a0 [ 142.345940][ T6509] ? __kfree_skb+0x109/0x150 [ 142.345985][ T6509] ? nlmon_xmit+0x4f/0x60 [ 142.346004][ T6509] ? consume_skb+0x49/0x150 [ 142.346110][ T6509] ? nlmon_xmit+0x4f/0x60 [ 142.346135][ T6509] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 142.346175][ T6509] ? __dev_queue_xmit+0x138d/0x1ec0 [ 142.346274][ T6509] ? __dev_queue_xmit+0x148/0x1ec0 [ 142.346309][ T6509] ? ref_tracker_free+0x37d/0x3e0 [ 142.346347][ T6509] ? __netlink_deliver_tap+0x4dc/0x500 [ 142.346392][ T6509] netlink_unicast+0x5c0/0x690 [ 142.346468][ T6509] netlink_sendmsg+0x58b/0x6b0 [ 142.346506][ T6509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.346618][ T6509] __sock_sendmsg+0x145/0x180 [ 142.346645][ T6509] ____sys_sendmsg+0x31e/0x4a0 [ 142.346684][ T6509] ___sys_sendmsg+0x17b/0x1d0 [ 142.346793][ T6509] __x64_sys_sendmsg+0xd4/0x160 [ 142.346857][ T6509] x64_sys_call+0x17ba/0x3000 [ 142.346882][ T6509] do_syscall_64+0xd8/0x2a0 [ 142.346926][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.346954][ T6509] RIP: 0033:0x7f1310def749 [ 142.347013][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.347036][ T6509] RSP: 002b:00007f130f84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.347060][ T6509] RAX: ffffffffffffffda RBX: 00007f1311045fa0 RCX: 00007f1310def749 [ 142.347075][ T6509] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 142.347092][ T6509] RBP: 00007f1310e73f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.347109][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.347120][ T6509] R13: 00007f1311046038 R14: 00007f1311045fa0 R15: 00007ffcdb408798 [ 142.347146][ T6509] [ 142.347155][ T6509] memory: usage 307200kB, limit 307200kB, failcnt 1431 [ 142.682159][ T6509] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 142.690096][ T6509] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 142.697422][ T6509] Memory cgroup stats for /syz3: [ 142.766892][ T6509] cache 0 [ 142.774943][ T6509] rss 61440 [ 142.778152][ T6509] shmem 0 [ 142.781125][ T6509] mapped_file 0 [ 142.784580][ T6509] dirty 0 [ 142.787528][ T6509] writeback 0 [ 142.790835][ T6509] workingset_refault_anon 1233 [ 142.795605][ T6509] workingset_refault_file 1206 [ 142.800389][ T6509] swap 331776 [ 142.803694][ T6509] swapcached 40960 [ 142.807404][ T6509] pgpgin 108094 [ 142.810884][ T6509] pgpgout 108078 [ 142.814450][ T6509] pgfault 116478 [ 142.817990][ T6509] pgmajfault 286 [ 142.821827][ T6509] inactive_anon 0 [ 142.825495][ T6509] active_anon 61440 [ 142.829312][ T6509] inactive_file 0 [ 142.833006][ T6509] active_file 4096 [ 142.836737][ T6509] unevictable 0 [ 142.840210][ T6509] hierarchical_memory_limit 314572800 [ 142.845607][ T6509] hierarchical_memsw_limit 9223372036854771712 [ 142.851758][ T6509] total_cache 0 [ 142.855257][ T6509] total_rss 61440 [ 142.858894][ T6509] total_shmem 0 [ 142.862366][ T6509] total_mapped_file 0 [ 142.866391][ T6509] total_dirty 0 [ 142.869863][ T6509] total_writeback 0 [ 142.873670][ T6509] total_workingset_refault_anon 1233 [ 142.878982][ T6509] total_workingset_refault_file 1206 [ 142.884327][ T6509] total_swap 331776 [ 142.888184][ T6509] total_swapcached 40960 [ 142.892415][ T6509] total_pgpgin 108094 [ 142.896409][ T6509] total_pgpgout 108078 [ 142.900480][ T6509] total_pgfault 116478 [ 142.904547][ T6509] total_pgmajfault 286 [ 142.908642][ T6509] total_inactive_anon 0 [ 142.912786][ T6509] total_active_anon 61440 [ 142.917187][ T6509] total_inactive_file 0 [ 142.921502][ T6509] total_active_file 4096 [ 142.925775][ T6509] total_unevictable 0 [ 142.929783][ T6509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.689,pid=6508,uid=0 [ 142.944423][ T6509] Memory cgroup out of memory: Killed process 6508 (syz.3.689) total-vm:96148kB, anon-rss:1188kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 142.961472][ T6520] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 142.969156][ T6520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.691'. [ 143.103364][ T6527] loop4: detected capacity change from 0 to 512 [ 143.122117][ T6527] EXT4-fs: dax option not supported [ 143.147975][ T6527] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 143.463780][ T6552] bridge0: entered promiscuous mode [ 143.477317][ T6552] bridge0: port 3(macsec1) entered blocking state [ 143.483787][ T6552] bridge0: port 3(macsec1) entered disabled state [ 143.526861][ T6553] loop3: detected capacity change from 0 to 512 [ 143.642405][ T6552] macsec1: entered allmulticast mode [ 143.647791][ T6552] bridge0: entered allmulticast mode [ 143.655596][ T6553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.671328][ T6552] macsec1: left allmulticast mode [ 143.676456][ T6552] bridge0: left allmulticast mode [ 143.683153][ T6553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.693397][ T6552] bridge0: left promiscuous mode [ 143.727844][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.736502][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.216513][ T6554] lo speed is unknown, defaulting to 1000 [ 144.222605][ T6554] wg1 speed is unknown, defaulting to 1000 [ 144.352935][ T6573] loop1: detected capacity change from 0 to 512 [ 144.361544][ T6576] netlink: 'syz.3.703': attribute type 39 has an invalid length. [ 144.384171][ T6573] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.399223][ T6573] EXT4-fs (loop1): mount failed [ 144.684139][ T6574] vhci_hcd vhci_hcd.0: default hub control req: 200a v3e51 i0001 l0 [ 144.935103][ T6582] syz.2.705 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 144.945842][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.2.705 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.945868][ T6582] Tainted: [W]=WARN [ 144.945927][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.945940][ T6582] Call Trace: [ 144.945948][ T6582] [ 144.945957][ T6582] __dump_stack+0x1d/0x30 [ 144.945985][ T6582] dump_stack_lvl+0xe8/0x140 [ 144.946012][ T6582] dump_stack+0x15/0x1b [ 144.946035][ T6582] dump_header+0x81/0x240 [ 144.946116][ T6582] oom_kill_process+0x295/0x350 [ 144.946143][ T6582] out_of_memory+0x97b/0xb80 [ 144.946172][ T6582] try_charge_memcg+0x610/0xa10 [ 144.946202][ T6582] charge_memcg+0x51/0xc0 [ 144.946278][ T6582] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 144.946331][ T6582] __read_swap_cache_async+0x17b/0x2d0 [ 144.946407][ T6582] swap_cluster_readahead+0x262/0x3c0 [ 144.946450][ T6582] swapin_readahead+0xde/0x820 [ 144.946478][ T6582] ? __rcu_read_unlock+0x4f/0x70 [ 144.946496][ T6582] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 144.946516][ T6582] ? __rcu_read_unlock+0x4f/0x70 [ 144.946607][ T6582] ? __rcu_read_unlock+0x4f/0x70 [ 144.946634][ T6582] ? swap_cache_get_folio+0x277/0x280 [ 144.946749][ T6582] do_swap_page+0x2b4/0x21e0 [ 144.946777][ T6582] ? _raw_spin_unlock+0x26/0x50 [ 144.946844][ T6582] ? __schedule+0x85f/0xcd0 [ 144.946868][ T6582] ? __pfx_default_wake_function+0x10/0x10 [ 144.946902][ T6582] handle_mm_fault+0x9d8/0x2c60 [ 144.946985][ T6582] do_user_addr_fault+0x630/0x1080 [ 144.947075][ T6582] exc_page_fault+0x62/0xa0 [ 144.947104][ T6582] asm_exc_page_fault+0x26/0x30 [ 144.947175][ T6582] RIP: 0033:0x7fd3013359ec [ 144.947188][ T6582] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 144.947204][ T6582] RSP: 002b:00007ffeba33afd0 EFLAGS: 00010287 [ 144.947219][ T6582] RAX: 0000000000000000 RBX: 00007fd3016b6090 RCX: 0000000000000000 [ 144.947233][ T6582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555a634808 [ 144.947285][ T6582] RBP: 00007fd3016b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 144.947375][ T6582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000023148 [ 144.947390][ T6582] R13: 00007fd3016b6090 R14: ffffffffffffffff R15: 00007ffeba33b0e0 [ 144.947410][ T6582] [ 144.947415][ T6582] memory: usage 307200kB, limit 307200kB, failcnt 242 [ 145.132201][ T6582] memory+swap: usage 252840kB, limit 9007199254740988kB, failcnt 0 [ 145.189840][ T6582] kmem: usage 219480kB, limit 9007199254740988kB, failcnt 0 [ 145.197152][ T6582] Memory cgroup stats for /syz2: [ 145.198208][ T6582] cache 4096 [ 145.206424][ T6582] rss 4096 [ 145.209481][ T6582] shmem 0 [ 145.212459][ T6582] mapped_file 4096 [ 145.216233][ T6582] dirty 0 [ 145.219177][ T6582] writeback 12288 [ 145.222817][ T6582] workingset_refault_anon 14 [ 145.227441][ T6582] workingset_refault_file 259 [ 145.232108][ T6582] swap 12595200 [ 145.235644][ T6582] swapcached 12288 [ 145.239474][ T6582] pgpgin 124456 [ 145.243004][ T6582] pgpgout 124450 [ 145.246560][ T6582] pgfault 142620 [ 145.250167][ T6582] pgmajfault 18 [ 145.253628][ T6582] inactive_anon 12288 [ 145.257598][ T6582] active_anon 0 [ 145.261091][ T6582] inactive_file 8192 [ 145.264993][ T6582] active_file 0 [ 145.268535][ T6582] unevictable 0 [ 145.272034][ T6582] hierarchical_memory_limit 314572800 [ 145.277416][ T6582] hierarchical_memsw_limit 9223372036854771712 [ 145.283612][ T6582] total_cache 4096 [ 145.287331][ T6582] total_rss 4096 [ 145.290972][ T6582] total_shmem 0 [ 145.294445][ T6582] total_mapped_file 4096 [ 145.298685][ T6582] total_dirty 0 [ 145.302261][ T6582] total_writeback 12288 [ 145.306453][ T6582] total_workingset_refault_anon 14 [ 145.311575][ T6582] total_workingset_refault_file 259 [ 145.316868][ T6582] total_swap 12595200 [ 145.320858][ T6582] total_swapcached 12288 [ 145.325154][ T6582] total_pgpgin 124456 [ 145.327030][ T6602] lo speed is unknown, defaulting to 1000 [ 145.329141][ T6582] total_pgpgout 124450 [ 145.329153][ T6582] total_pgfault 142620 [ 145.335302][ T6602] wg1 speed is unknown, defaulting to 1000 [ 145.338956][ T6582] total_pgmajfault 18 [ 145.352799][ T6582] total_inactive_anon 12288 [ 145.357353][ T6582] total_active_anon 0 [ 145.361331][ T6582] total_inactive_file 8192 [ 145.365775][ T6582] total_active_file 0 [ 145.369762][ T6582] total_unevictable 0 [ 145.373748][ T6582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.311,pid=4927,uid=0 [ 145.388360][ T6582] Memory cgroup out of memory: Killed process 4927 (syz.2.311) total-vm:95884kB, anon-rss:1184kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 145.544298][ T6582] syz.2.705 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 145.555024][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.2.705 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.555078][ T6582] Tainted: [W]=WARN [ 145.555086][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.555099][ T6582] Call Trace: [ 145.555106][ T6582] [ 145.555114][ T6582] __dump_stack+0x1d/0x30 [ 145.555142][ T6582] dump_stack_lvl+0xe8/0x140 [ 145.555167][ T6582] dump_stack+0x15/0x1b [ 145.555194][ T6582] dump_header+0x81/0x240 [ 145.555252][ T6582] oom_kill_process+0x295/0x350 [ 145.555276][ T6582] out_of_memory+0x97b/0xb80 [ 145.555303][ T6582] try_charge_memcg+0x610/0xa10 [ 145.555338][ T6582] charge_memcg+0x51/0xc0 [ 145.555370][ T6582] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 145.555404][ T6582] __read_swap_cache_async+0x17b/0x2d0 [ 145.555484][ T6582] swap_cluster_readahead+0x262/0x3c0 [ 145.555573][ T6582] swapin_readahead+0xde/0x820 [ 145.555648][ T6582] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 145.555673][ T6582] ? __rcu_read_unlock+0x34/0x70 [ 145.555692][ T6582] ? __rcu_read_unlock+0x4f/0x70 [ 145.555829][ T6582] ? swap_cache_get_folio+0x277/0x280 [ 145.555858][ T6582] do_swap_page+0x2b4/0x21e0 [ 145.555914][ T6582] ? css_rstat_updated+0xb7/0x240 [ 145.555989][ T6582] ? __pfx_default_wake_function+0x10/0x10 [ 145.556062][ T6582] handle_mm_fault+0x9d8/0x2c60 [ 145.556103][ T6582] do_user_addr_fault+0x630/0x1080 [ 145.556135][ T6582] exc_page_fault+0x62/0xa0 [ 145.556165][ T6582] asm_exc_page_fault+0x26/0x30 [ 145.556185][ T6582] RIP: 0033:0x7fd3013359ec [ 145.556200][ T6582] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 145.556220][ T6582] RSP: 002b:00007ffeba33afd0 EFLAGS: 00010283 [ 145.556302][ T6582] RAX: 0000000000000000 RBX: 00007fd3016b7080 RCX: 0000000000000000 [ 145.556315][ T6582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555a634808 [ 145.556328][ T6582] RBP: 00007fd3016b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 145.556340][ T6582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000023148 [ 145.556353][ T6582] R13: 00007fd3016b6090 R14: ffffffffffffffff R15: 00007ffeba33b0e0 [ 145.556374][ T6582] [ 145.773281][ T6582] memory: usage 307200kB, limit 307200kB, failcnt 348 [ 145.780135][ T6582] memory+swap: usage 319316kB, limit 9007199254740988kB, failcnt 0 [ 145.788087][ T6582] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 145.795456][ T6582] Memory cgroup stats for /syz2: [ 145.839569][ T6609] tmpfs: Bad value for 'mpol' [ 145.857492][ T6582] cache 4096 [ 145.860802][ T6582] rss 4096 [ 145.863833][ T6582] shmem 0 [ 145.866762][ T6582] mapped_file 4096 [ 145.870526][ T6582] dirty 0 [ 145.873469][ T6582] writeback 4096 [ 145.877007][ T6582] workingset_refault_anon 15 [ 145.881608][ T6582] workingset_refault_file 262 [ 145.886301][ T6582] swap 12406784 [ 145.889765][ T6582] swapcached 4096 [ 145.893388][ T6582] pgpgin 124460 [ 145.896833][ T6582] pgpgout 124456 [ 145.900399][ T6582] pgfault 142626 [ 145.903939][ T6582] pgmajfault 22 [ 145.907393][ T6582] inactive_anon 4096 [ 145.911313][ T6582] active_anon 0 [ 145.914764][ T6582] inactive_file 12288 [ 145.918746][ T6582] active_file 0 [ 145.922223][ T6582] unevictable 0 [ 145.925681][ T6582] hierarchical_memory_limit 314572800 [ 145.931047][ T6582] hierarchical_memsw_limit 9223372036854771712 [ 145.937201][ T6582] total_cache 4096 [ 145.940915][ T6582] total_rss 4096 [ 145.944588][ T6582] total_shmem 0 [ 145.948039][ T6582] total_mapped_file 4096 [ 145.952318][ T6582] total_dirty 0 [ 145.955795][ T6582] total_writeback 4096 [ 145.959912][ T6582] total_workingset_refault_anon 15 [ 145.965093][ T6582] total_workingset_refault_file 262 [ 145.970296][ T6582] total_swap 12406784 [ 145.974325][ T6582] total_swapcached 4096 [ 145.978542][ T6582] total_pgpgin 124460 [ 145.982519][ T6582] total_pgpgout 124456 [ 145.986604][ T6582] total_pgfault 142626 [ 145.990667][ T6582] total_pgmajfault 22 [ 145.994645][ T6582] total_inactive_anon 4096 [ 145.999088][ T6582] total_active_anon 0 [ 146.003127][ T6582] total_inactive_file 12288 [ 146.007694][ T6582] total_active_file 0 [ 146.011679][ T6582] total_unevictable 0 [ 146.015651][ T6582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.173,pid=4315,uid=0 [ 146.030156][ T6582] Memory cgroup out of memory: Killed process 4315 (syz.2.173) total-vm:96148kB, anon-rss:1184kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 146.496685][ T6616] batadv_slave_1: entered promiscuous mode [ 146.563942][ T6583] syz.2.705 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 146.577842][ T6583] CPU: 1 UID: 0 PID: 6583 Comm: syz.2.705 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.577877][ T6583] Tainted: [W]=WARN [ 146.577885][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.577958][ T6583] Call Trace: [ 146.577963][ T6583] [ 146.577969][ T6583] __dump_stack+0x1d/0x30 [ 146.577991][ T6583] dump_stack_lvl+0xe8/0x140 [ 146.578009][ T6583] dump_stack+0x15/0x1b [ 146.578026][ T6583] dump_header+0x81/0x240 [ 146.578075][ T6583] oom_kill_process+0x295/0x350 [ 146.578100][ T6583] out_of_memory+0x97b/0xb80 [ 146.578126][ T6583] try_charge_memcg+0x610/0xa10 [ 146.578156][ T6583] obj_cgroup_charge_pages+0xa6/0x150 [ 146.578227][ T6583] __memcg_kmem_charge_page+0x9f/0x170 [ 146.578253][ T6583] __alloc_frozen_pages_noprof+0x18f/0x360 [ 146.578287][ T6583] alloc_pages_mpol+0xb3/0x260 [ 146.578323][ T6583] alloc_pages_noprof+0x90/0x130 [ 146.578350][ T6583] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 146.578466][ T6583] __kvmalloc_node_noprof+0x492/0x6b0 [ 146.578545][ T6583] ? ip_set_alloc+0x24/0x30 [ 146.578571][ T6583] ? ip_set_alloc+0x24/0x30 [ 146.578687][ T6583] ip_set_alloc+0x24/0x30 [ 146.578772][ T6583] hash_netiface_create+0x282/0x740 [ 146.578861][ T6583] ? __pfx_hash_netiface_create+0x10/0x10 [ 146.578942][ T6583] ip_set_create+0x3cc/0x970 [ 146.578988][ T6583] ? _raw_spin_unlock+0x26/0x50 [ 146.579015][ T6583] ? finish_task_switch+0x7a/0x2a0 [ 146.579089][ T6583] ? __cond_resched+0x4e/0x90 [ 146.579151][ T6583] nfnetlink_rcv_msg+0x4c6/0x590 [ 146.579294][ T6583] netlink_rcv_skb+0x123/0x220 [ 146.579323][ T6583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.579432][ T6583] nfnetlink_rcv+0x167/0x16c0 [ 146.579460][ T6583] ? kmem_cache_free+0xe3/0x3a0 [ 146.579516][ T6583] ? __kfree_skb+0x109/0x150 [ 146.579613][ T6583] ? nlmon_xmit+0x4f/0x60 [ 146.579634][ T6583] ? consume_skb+0x49/0x150 [ 146.579662][ T6583] ? nlmon_xmit+0x4f/0x60 [ 146.579679][ T6583] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 146.579764][ T6583] ? __dev_queue_xmit+0x138d/0x1ec0 [ 146.579799][ T6583] ? __dev_queue_xmit+0x148/0x1ec0 [ 146.579825][ T6583] ? ref_tracker_free+0x37d/0x3e0 [ 146.579858][ T6583] ? __netlink_deliver_tap+0x4dc/0x500 [ 146.579898][ T6583] netlink_unicast+0x5c0/0x690 [ 146.579933][ T6583] netlink_sendmsg+0x58b/0x6b0 [ 146.579974][ T6583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.580071][ T6583] __sock_sendmsg+0x145/0x180 [ 146.580170][ T6583] ____sys_sendmsg+0x31e/0x4a0 [ 146.580199][ T6583] ___sys_sendmsg+0x17b/0x1d0 [ 146.580284][ T6583] __x64_sys_sendmsg+0xd4/0x160 [ 146.580349][ T6583] x64_sys_call+0x17ba/0x3000 [ 146.580384][ T6583] do_syscall_64+0xd8/0x2a0 [ 146.580428][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.580457][ T6583] RIP: 0033:0x7fd30145f749 [ 146.580484][ T6583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.580500][ T6583] RSP: 002b:00007fd2ffebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.580525][ T6583] RAX: ffffffffffffffda RBX: 00007fd3016b5fa0 RCX: 00007fd30145f749 [ 146.580536][ T6583] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 146.580548][ T6583] RBP: 00007fd3014e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 146.580617][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.580629][ T6583] R13: 00007fd3016b6038 R14: 00007fd3016b5fa0 R15: 00007ffeba33ae68 [ 146.580654][ T6583] [ 146.580662][ T6583] memory: usage 307200kB, limit 307200kB, failcnt 736 [ 146.926063][ T6583] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 146.933979][ T6583] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 146.941321][ T6583] Memory cgroup stats for /syz2: [ 146.942089][ T6583] cache 0 [ 146.950059][ T6583] rss 0 [ 146.952906][ T6583] shmem 0 [ 146.955858][ T6583] mapped_file 0 [ 146.959383][ T6583] dirty 0 [ 146.962318][ T6583] writeback 0 [ 146.965698][ T6583] workingset_refault_anon 123 [ 146.970437][ T6583] workingset_refault_file 405 [ 146.975118][ T6583] swap 458752 [ 146.978390][ T6583] swapcached 0 [ 146.981768][ T6583] pgpgin 124736 [ 146.985228][ T6583] pgpgout 124734 [ 146.989042][ T6583] pgfault 142718 [ 146.992709][ T6583] pgmajfault 78 [ 146.996163][ T6583] inactive_anon 0 [ 146.999792][ T6583] active_anon 0 [ 147.003449][ T6583] inactive_file 0 [ 147.007275][ T6583] active_file 8192 [ 147.010982][ T6583] unevictable 0 [ 147.014479][ T6583] hierarchical_memory_limit 314572800 [ 147.019882][ T6583] hierarchical_memsw_limit 9223372036854771712 [ 147.026086][ T6583] total_cache 0 [ 147.029539][ T6583] total_rss 0 [ 147.032811][ T6583] total_shmem 0 [ 147.036297][ T6583] total_mapped_file 0 [ 147.040274][ T6583] total_dirty 0 [ 147.043727][ T6583] total_writeback 0 [ 147.047619][ T6583] total_workingset_refault_anon 123 [ 147.052821][ T6583] total_workingset_refault_file 405 [ 147.055762][ T6623] bridge0: port 1(macsec1) entered blocking state [ 147.058102][ T6583] total_swap 458752 [ 147.064557][ T6623] bridge0: port 1(macsec1) entered disabled state [ 147.068360][ T6583] total_swapcached 0 [ 147.068372][ T6583] total_pgpgin 124736 [ 147.068383][ T6583] total_pgpgout 124734 [ 147.075229][ T6623] macsec1: entered allmulticast mode [ 147.078767][ T6583] total_pgfault 142718 [ 147.082726][ T6623] bridge0: entered allmulticast mode [ 147.086844][ T6583] total_pgmajfault 78 [ 147.105839][ T6583] total_inactive_anon 0 [ 147.110233][ T6583] total_active_anon 0 [ 147.114216][ T6583] total_inactive_file 0 [ 147.118361][ T6583] total_active_file 8192 [ 147.122704][ T6583] total_unevictable 0 [ 147.126826][ T6583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.705,pid=6582,uid=0 [ 147.141306][ T6583] Memory cgroup out of memory: Killed process 6582 (syz.2.705) total-vm:96020kB, anon-rss:1136kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 147.161735][ T6623] macsec1: left allmulticast mode [ 147.166830][ T6623] bridge0: left allmulticast mode [ 147.268635][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 147.268652][ T29] audit: type=1326 audit(1765452490.629:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.327604][ T29] audit: type=1326 audit(1765452490.666:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.351111][ T29] audit: type=1326 audit(1765452490.676:12401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.374609][ T29] audit: type=1326 audit(1765452490.685:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.411702][ T6615] batadv_slave_1: left promiscuous mode [ 147.430696][ T29] audit: type=1326 audit(1765452490.760:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.482734][ T29] audit: type=1326 audit(1765452490.835:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.513480][ T29] audit: type=1326 audit(1765452490.854:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.537082][ T29] audit: type=1326 audit(1765452490.854:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.538453][ T3483] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.560860][ T29] audit: type=1326 audit(1765452490.854:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.591354][ T29] audit: type=1326 audit(1765452490.854:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1310def749 code=0x7ffc0000 [ 147.649548][ T3483] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.655986][ T6634] loop3: detected capacity change from 0 to 2048 [ 147.682055][ T6631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.716'. [ 147.702866][ T6632] serio: Serial port ptm0 [ 147.733271][ T3640] Alternate GPT is invalid, using primary GPT. [ 147.739643][ T3640] loop3: p2 p3 p7 [ 147.750479][ T6634] Alternate GPT is invalid, using primary GPT. [ 147.756740][ T6634] loop3: p2 p3 p7 [ 148.121168][ T6652] bridge0: port 3(batadv1) entered blocking state [ 148.127925][ T6652] bridge0: port 3(batadv1) entered disabled state [ 148.156172][ T6652] batadv1: entered allmulticast mode [ 148.162186][ T6652] batadv1: entered promiscuous mode [ 148.552160][ T6670] loop3: detected capacity change from 0 to 1024 [ 148.565858][ T6670] journal_path: Non-blockdev passed as './file1' [ 148.572305][ T6670] EXT4-fs: error: could not find journal device path [ 148.604049][ T6670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.651215][ T6670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.662189][ T874] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 148.671434][ T874] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 148.728667][ T6670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.780500][ T6670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.846013][ T874] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.857828][ T874] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.878128][ T874] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.904517][ T874] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.922472][ T6688] batadv_slave_1: entered promiscuous mode [ 148.944964][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 148.965634][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 148.988328][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 148.997384][ T6692] loop3: detected capacity change from 0 to 8192 [ 149.012172][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 149.326596][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 149.381127][ T6707] rdma_rxe: rxe_newlink: failed to add lo [ 149.394131][ T6707] netlink: 'syz.0.734': attribute type 16 has an invalid length. [ 149.402133][ T6707] netlink: 'syz.0.734': attribute type 17 has an invalid length. [ 149.492148][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.506335][ T6707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.681537][ T6719] IPv6: Can't replace route, no match found [ 149.735241][ T6721] netlink: 176 bytes leftover after parsing attributes in process `syz.0.740'. [ 149.868469][ T6717] serio: Serial port ptm0 [ 149.886368][ T6687] batadv_slave_1: left promiscuous mode [ 150.606218][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 150.899117][ T6777] lo speed is unknown, defaulting to 1000 [ 150.905566][ T6777] wg1 speed is unknown, defaulting to 1000 [ 152.219190][ T6824] lo speed is unknown, defaulting to 1000 [ 152.225867][ T6824] wg1 speed is unknown, defaulting to 1000 [ 152.821454][ T29] kauditd_printk_skb: 1483 callbacks suppressed [ 152.821469][ T29] audit: type=1400 audit(1765452495.247:13892): avc: denied { shutdown } for pid=6797 comm="syz.0.751" lport=58229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.848599][ T29] audit: type=1400 audit(1765452495.350:13893): avc: denied { setopt } for pid=6797 comm="syz.0.751" lport=58229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.869128][ T29] audit: type=1326 audit(1765452495.499:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 152.892597][ T29] audit: type=1326 audit(1765452495.499:13895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 152.916043][ T29] audit: type=1326 audit(1765452495.612:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 152.939457][ T29] audit: type=1326 audit(1765452495.612:13897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 152.962848][ T29] audit: type=1326 audit(1765452495.612:13898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 152.986235][ T29] audit: type=1326 audit(1765452495.743:13899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 153.009681][ T29] audit: type=1326 audit(1765452495.743:13900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 153.033107][ T29] audit: type=1326 audit(1765452495.743:13901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37940f749 code=0x7ffc0000 [ 153.239530][ T6828] lo speed is unknown, defaulting to 1000 [ 153.460391][ T6828] wg1 speed is unknown, defaulting to 1000 [ 153.737777][ T6841] loop1: detected capacity change from 0 to 512 [ 153.749895][ T6851] lo speed is unknown, defaulting to 1000 [ 153.756045][ T6841] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.756: inode #0: comm syz.1.756: iget: illegal inode # [ 153.785347][ T6851] wg1 speed is unknown, defaulting to 1000 [ 153.951655][ T6841] EXT4-fs (loop1): get orphan inode failed [ 153.957857][ T6841] EXT4-fs (loop1): mount failed [ 154.048644][ T6877] tmpfs: Bad value for 'mpol' [ 154.797822][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.760'. [ 154.942987][ T6887] ipvlan2: entered promiscuous mode [ 155.645283][ T6837] syz.1.756 (6837) used greatest stack depth: 6216 bytes left [ 155.910916][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 155.921804][ T6907] IPv6: Can't replace route, no match found [ 155.961107][ T6908] xt_SECMARK: invalid mode: 2 [ 156.003690][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 156.014559][ T6908] loop4: detected capacity change from 0 to 1024 [ 156.043476][ T6912] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 156.051162][ T6912] netlink: 224 bytes leftover after parsing attributes in process `syz.3.769'. [ 156.103055][ T6918] bridge0: entered promiscuous mode [ 156.108865][ T6918] bridge0: port 1(macsec1) entered blocking state [ 156.115479][ T6918] bridge0: port 1(macsec1) entered disabled state [ 156.129149][ T6918] macsec1: entered allmulticast mode [ 156.134561][ T6918] bridge0: entered allmulticast mode [ 156.140724][ T6918] macsec1: left allmulticast mode [ 156.145821][ T6918] bridge0: left allmulticast mode [ 156.185342][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.203867][ T6918] bridge0: left promiscuous mode [ 156.217841][ T6908] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.283591][ T6931] lo speed is unknown, defaulting to 1000 [ 156.290663][ T6931] lo speed is unknown, defaulting to 1000 [ 156.298218][ T6931] lo speed is unknown, defaulting to 1000 [ 156.326596][ T6932] lo speed is unknown, defaulting to 1000 [ 156.333034][ T6932] wg1 speed is unknown, defaulting to 1000 [ 156.555585][ T6931] infiniband sz1: set active [ 156.560422][ T6931] infiniband sz1: added lo [ 156.565422][ T3428] lo speed is unknown, defaulting to 1000 [ 156.620264][ T6931] RDS/IB: sz1: added [ 156.648745][ T6931] smc: adding ib device sz1 with port count 1 [ 156.663407][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.778538][ T6931] smc: ib device sz1 port 1 has no pnetid [ 156.784910][ T3428] lo speed is unknown, defaulting to 1000 [ 156.791922][ T6931] lo speed is unknown, defaulting to 1000 [ 157.126919][ T6937] lo speed is unknown, defaulting to 1000 [ 157.133586][ T6937] wg1 speed is unknown, defaulting to 1000 [ 157.696268][ T6931] lo speed is unknown, defaulting to 1000 [ 157.718098][ T6942] loop4: detected capacity change from 0 to 1024 [ 158.186862][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 158.186875][ T29] audit: type=1400 audit(1765452500.850:14101): avc: denied { create } for pid=6943 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.225813][ T6937] lo speed is unknown, defaulting to 1000 [ 158.307534][ T6931] lo speed is unknown, defaulting to 1000 [ 158.342313][ T29] audit: type=1400 audit(1765452500.869:14102): avc: denied { setopt } for pid=6943 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.361774][ T29] audit: type=1400 audit(1765452500.869:14103): avc: denied { ioctl } for pid=6943 comm="" path="socket:[16471]" dev="sockfs" ino=16471 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.373150][ T6942] EXT4-fs: Ignoring removed oldalloc option [ 158.385670][ T29] audit: type=1400 audit(1765452500.943:14104): avc: denied { connect } for pid=6943 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.411538][ T6942] EXT4-fs: Ignoring removed bh option [ 158.428160][ T6942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.454777][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'. [ 158.478088][ T29] audit: type=1400 audit(1765452501.112:14105): avc: denied { ioctl } for pid=6939 comm="syz.4.774" path="socket:[16491]" dev="sockfs" ino=16491 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.504604][ T6950] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 158.516176][ T6931] lo speed is unknown, defaulting to 1000 [ 158.523509][ T6940] syzkaller0: entered allmulticast mode [ 158.539586][ T6940] syzkaller0: entered promiscuous mode [ 158.566865][ T29] audit: type=1400 audit(1765452501.177:14106): avc: denied { ioctl } for pid=6948 comm="syz.0.777" path="socket:[16495]" dev="sockfs" ino=16495 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.592180][ T29] audit: type=1400 audit(1765452501.187:14107): avc: denied { add_name } for pid=6939 comm="syz.4.774" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.614202][ T29] audit: type=1400 audit(1765452501.187:14108): avc: denied { create } for pid=6939 comm="syz.4.774" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.635773][ T29] audit: type=1400 audit(1765452501.187:14109): avc: denied { read append open } for pid=6939 comm="syz.4.774" path="/154/file1/cpuacct.usage_percpu" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.660914][ T29] audit: type=1400 audit(1765452501.187:14110): avc: denied { lock } for pid=6939 comm="syz.4.774" path="/154/file1/cpuacct.usage_percpu" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.663828][ T6931] lo speed is unknown, defaulting to 1000 [ 158.726752][ T6931] lo speed is unknown, defaulting to 1000 [ 158.772322][ T6939] syzkaller0: left promiscuous mode [ 158.777604][ T6939] syzkaller0: left allmulticast mode [ 158.802059][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.831766][ T6954] netlink: 24 bytes leftover after parsing attributes in process `wޣ'. [ 159.027879][ T6967] loop4: detected capacity change from 0 to 512 [ 159.065864][ T6962] lo speed is unknown, defaulting to 1000 [ 159.072128][ T6962] wg1 speed is unknown, defaulting to 1000 [ 159.080546][ T6967] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.778: inode #0: comm syz.4.778: iget: illegal inode # [ 159.110040][ T6962] lo speed is unknown, defaulting to 1000 [ 159.127280][ T6967] EXT4-fs (loop4): get orphan inode failed [ 159.146705][ T6967] EXT4-fs (loop4): mount failed [ 159.823845][ T6962] syz.4.778 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.823884][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.4.778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.823920][ T6962] Tainted: [W]=WARN [ 159.823940][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.823961][ T6962] Call Trace: [ 159.824010][ T6962] [ 159.824016][ T6962] __dump_stack+0x1d/0x30 [ 159.824045][ T6962] dump_stack_lvl+0xe8/0x140 [ 159.824073][ T6962] dump_stack+0x15/0x1b [ 159.824145][ T6962] dump_header+0x81/0x240 [ 159.824170][ T6962] oom_kill_process+0x295/0x350 [ 159.824199][ T6962] out_of_memory+0x97b/0xb80 [ 159.824247][ T6962] try_charge_memcg+0x610/0xa10 [ 159.824289][ T6962] charge_memcg+0x51/0xc0 [ 159.824320][ T6962] __mem_cgroup_charge+0x28/0xb0 [ 159.824357][ T6962] shmem_get_folio_gfp+0x470/0xd50 [ 159.824474][ T6962] shmem_fault+0xf6/0x250 [ 159.824503][ T6962] __do_fault+0xbc/0x200 [ 159.824519][ T6962] handle_mm_fault+0xfab/0x2c60 [ 159.824588][ T6962] ? _raw_spin_lock+0x52/0xa0 [ 159.824610][ T6962] ? __pte_offset_map_lock+0x1d9/0x240 [ 159.824639][ T6962] __get_user_pages+0x1024/0x1ed0 [ 159.824681][ T6962] __mm_populate+0x243/0x3a0 [ 159.824810][ T6962] vm_mmap_pgoff+0x232/0x2e0 [ 159.824894][ T6962] ksys_mmap_pgoff+0xc2/0x310 [ 159.824935][ T6962] ? __x64_sys_mmap+0x49/0x70 [ 159.824980][ T6962] x64_sys_call+0x16bb/0x3000 [ 159.825003][ T6962] do_syscall_64+0xd8/0x2a0 [ 159.825044][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.825136][ T6962] RIP: 0033:0x7fd7f774f749 [ 159.825183][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.825205][ T6962] RSP: 002b:00007fd7f6196038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.825228][ T6962] RAX: ffffffffffffffda RBX: 00007fd7f79a6090 RCX: 00007fd7f774f749 [ 159.825243][ T6962] RDX: 0000000000000012 RSI: 0000000000b36000 RDI: 0000200000000000 [ 159.825258][ T6962] RBP: 00007fd7f77d3f91 R08: ffffffffffffffff R09: 000000006a855000 [ 159.825324][ T6962] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 159.825335][ T6962] R13: 00007fd7f79a6128 R14: 00007fd7f79a6090 R15: 00007ffe03182d38 [ 159.825357][ T6962] [ 159.825379][ T6962] memory: usage 307200kB, limit 307200kB, failcnt 1329 [ 159.825405][ T6962] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 159.825421][ T6962] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 159.825436][ T6962] Memory cgroup stats for /syz4: [ 159.829138][ T6962] cache 12288 [ 159.829150][ T6962] rss 0 [ 159.829158][ T6962] shmem 0 [ 159.829165][ T6962] mapped_file 0 [ 159.829173][ T6962] dirty 0 [ 159.829181][ T6962] writeback 0 [ 159.829189][ T6962] workingset_refault_anon 69 [ 159.829198][ T6962] workingset_refault_file 965 [ 159.829207][ T6962] swap 405504 [ 159.829244][ T6962] swapcached 12288 [ 159.829323][ T6962] pgpgin 101788 [ 159.829332][ T6962] pgpgout 101779 [ 159.829340][ T6962] pgfault 117878 [ 159.829349][ T6962] pgmajfault 63 [ 159.829357][ T6962] inactive_anon 8192 [ 159.829434][ T6962] active_anon 4096 [ 159.829467][ T6962] inactive_file 0 [ 159.829507][ T6962] active_file 24576 [ 159.829537][ T6962] unevictable 0 [ 159.829546][ T6962] hierarchical_memory_limit 314572800 [ 159.829556][ T6962] hierarchical_memsw_limit 9223372036854771712 [ 159.829611][ T6962] total_cache 12288 [ 159.829620][ T6962] total_rss 0 [ 159.829628][ T6962] total_shmem 0 [ 159.829637][ T6962] total_mapped_file 0 [ 159.829646][ T6962] total_dirty 0 [ 159.829654][ T6962] total_writeback 0 [ 159.829663][ T6962] total_workingset_refault_anon 69 [ 159.829674][ T6962] total_workingset_refault_file 965 [ 159.829684][ T6962] total_swap 405504 [ 159.829693][ T6962] total_swapcached 12288 [ 159.829703][ T6962] total_pgpgin 101788 [ 159.829712][ T6962] total_pgpgout 101779 [ 159.829721][ T6962] total_pgfault 117878 [ 159.829730][ T6962] total_pgmajfault 63 [ 159.829739][ T6962] total_inactive_anon 8192 [ 159.829804][ T6962] total_active_anon 4096 [ 159.829813][ T6962] total_inactive_file 0 [ 159.829822][ T6962] total_active_file 24576 [ 159.829831][ T6962] total_unevictable 0 [ 159.829841][ T6962] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.778,pid=6957,uid=0 [ 159.829939][ T6962] Memory cgroup out of memory: Killed process 6957 (syz.4.778) total-vm:96152kB, anon-rss:1140kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 159.854916][ T6966] SET target dimension over the limit! [ 159.968094][ T6985] lo speed is unknown, defaulting to 1000 [ 159.968537][ T6985] wg1 speed is unknown, defaulting to 1000 [ 160.107568][ T6985] lo speed is unknown, defaulting to 1000 [ 160.172898][ T6998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6998 comm=syz.4.786 [ 160.194554][ T6996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.203300][ T7023] lo speed is unknown, defaulting to 1000 [ 161.209686][ T7023] wg1 speed is unknown, defaulting to 1000 [ 161.271134][ T7023] lo speed is unknown, defaulting to 1000 [ 161.483753][ T7027] bridge0: entered promiscuous mode [ 161.507584][ T7027] bridge0: port 4(macsec1) entered blocking state [ 161.514150][ T7027] bridge0: port 4(macsec1) entered disabled state [ 161.567729][ T7030] loop4: detected capacity change from 0 to 512 [ 161.585929][ T7027] macsec1: entered allmulticast mode [ 161.591259][ T7027] bridge0: entered allmulticast mode [ 161.612958][ T7030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.642462][ T7027] macsec1: left allmulticast mode [ 161.647515][ T7027] bridge0: left allmulticast mode [ 161.674046][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.694730][ T7027] bridge0: left promiscuous mode [ 162.074139][ T7039] lo speed is unknown, defaulting to 1000 [ 162.080729][ T7039] wg1 speed is unknown, defaulting to 1000 [ 162.134472][ T7039] lo speed is unknown, defaulting to 1000 [ 162.362228][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.370864][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.452613][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 162.527079][ T3005] udevd[3005]: worker [3302] terminated by signal 33 (Unknown signal 33) [ 162.999219][ T7056] lo speed is unknown, defaulting to 1000 [ 163.022286][ T7056] wg1 speed is unknown, defaulting to 1000 [ 163.243110][ T7056] lo speed is unknown, defaulting to 1000 [ 163.436136][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.449232][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.569121][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 163.569138][ T29] audit: type=1326 audit(1765452505.879:14396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 163.664287][ T29] audit: type=1326 audit(1765452505.916:14397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f774f749 code=0x7ffc0000 [ 163.955396][ T29] audit: type=1400 audit(1765452506.234:14398): avc: denied { execute } for pid=7080 comm="syz.0.804" path="/151/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.002402][ T7081] lo speed is unknown, defaulting to 1000 [ 164.008534][ T7081] wg1 speed is unknown, defaulting to 1000 [ 164.022684][ T29] audit: type=1400 audit(1765452506.309:14399): avc: denied { name_bind } for pid=7082 comm="syz.1.805" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 164.064461][ T29] audit: type=1400 audit(1765452506.318:14400): avc: denied { write } for pid=7082 comm="syz.1.805" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.087312][ T29] audit: type=1400 audit(1765452506.337:14401): avc: denied { relabelfrom } for pid=7082 comm="syz.1.805" name="" dev="pipefs" ino=16678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 164.104524][ T1712] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.117070][ T7081] lo speed is unknown, defaulting to 1000 [ 164.436209][ T7098] netlink: 24 bytes leftover after parsing attributes in process `wޣ'. [ 164.528023][ T7102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.562158][ T7103] lo speed is unknown, defaulting to 1000 [ 164.568389][ T7103] wg1 speed is unknown, defaulting to 1000 [ 164.624286][ T7103] lo speed is unknown, defaulting to 1000 [ 164.743323][ T29] audit: type=1400 audit(1765452506.964:14402): avc: denied { write } for pid=7092 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.763978][ T29] audit: type=1400 audit(1765452506.973:14403): avc: denied { open } for pid=7092 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 164.783220][ T29] audit: type=1400 audit(1765452506.973:14404): avc: denied { perfmon } for pid=7092 comm="syz.4.807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.804150][ T29] audit: type=1400 audit(1765452506.973:14405): avc: denied { kernel } for pid=7092 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.349959][ T7112] netlink: 176 bytes leftover after parsing attributes in process `syz.4.814'. [ 165.469983][ T7112] loop4: detected capacity change from 0 to 2048 [ 165.523426][ T7112] Alternate GPT is invalid, using primary GPT. [ 165.529955][ T7112] loop4: p2 p3 p7 [ 165.766284][ T7125] loop3: detected capacity change from 0 to 2048 [ 165.873394][ T7125] Alternate GPT is invalid, using primary GPT. [ 165.879950][ T7125] loop3: p2 p3 p7 [ 166.112456][ T7141] netlink: 24 bytes leftover after parsing attributes in process `wޣ'. [ 166.265944][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.540095][ T7157] loop4: detected capacity change from 0 to 8192 [ 166.686904][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 166.912473][ T7169] tipc: Enabled bearer , priority 0 [ 166.931039][ T7169] syzkaller0: entered promiscuous mode [ 166.936520][ T7169] syzkaller0: entered allmulticast mode [ 167.015867][ T7177] tipc: Resetting bearer [ 167.050074][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 167.161264][ T7185] loop3: detected capacity change from 0 to 512 [ 167.183390][ T7185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.830: bg 0: block 248: padding at end of block bitmap is not set [ 167.197908][ T7185] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.830: Failed to acquire dquot type 1 [ 167.211536][ T7185] EXT4-fs (loop3): 1 truncate cleaned up [ 167.217785][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.233265][ T7185] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.262037][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.271342][ T7190] loop1: detected capacity change from 0 to 2048 [ 167.327614][ T7190] Alternate GPT is invalid, using primary GPT. [ 167.334231][ T7190] loop1: p2 p3 p7 [ 167.572154][ T7211] loop3: detected capacity change from 0 to 1024 [ 167.594418][ T7211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.620649][ T7210] lo speed is unknown, defaulting to 1000 [ 167.626825][ T7210] wg1 speed is unknown, defaulting to 1000 [ 167.668505][ T7210] lo speed is unknown, defaulting to 1000 [ 167.744543][ T7211] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.447200][ T7223] siw: device registration error -23 [ 168.565414][ T7232] loop1: detected capacity change from 0 to 512 [ 168.594035][ T7232] EXT4-fs: Ignoring removed nobh option [ 169.006141][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 169.006153][ T29] audit: type=1326 audit(1765452510.966:15024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.068229][ T29] audit: type=1326 audit(1765452510.994:15025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.099445][ T29] audit: type=1326 audit(1765452511.050:15026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.122920][ T29] audit: type=1326 audit(1765452511.050:15027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd30145f783 code=0x7ffc0000 [ 169.146278][ T29] audit: type=1326 audit(1765452511.050:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd30145f783 code=0x7ffc0000 [ 169.169603][ T29] audit: type=1326 audit(1765452511.050:15029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.193086][ T29] audit: type=1326 audit(1765452511.050:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.216616][ T29] audit: type=1326 audit(1765452511.060:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.240200][ T29] audit: type=1326 audit(1765452511.060:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30145f749 code=0x7ffc0000 [ 169.439763][ T29] audit: type=1400 audit(1765452511.368:15033): avc: denied { create } for pid=7255 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.534226][ T7257] lo speed is unknown, defaulting to 1000 [ 169.540732][ T7257] wg1 speed is unknown, defaulting to 1000 [ 169.599044][ T7257] lo speed is unknown, defaulting to 1000 [ 170.341040][ T7232] netlink: 176 bytes leftover after parsing attributes in process `syz.1.843'. [ 170.477545][ T7264] lo speed is unknown, defaulting to 1000 [ 170.483776][ T7264] wg1 speed is unknown, defaulting to 1000 [ 170.520640][ T7264] lo speed is unknown, defaulting to 1000 [ 170.567768][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.395272][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.414781][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.443556][ T7275] lo speed is unknown, defaulting to 1000 [ 171.449534][ T7275] wg1 speed is unknown, defaulting to 1000 [ 171.449737][ T7272] loop1: detected capacity change from 0 to 2048 [ 171.485316][ T7275] lo speed is unknown, defaulting to 1000 [ 171.561105][ T7272] Alternate GPT is invalid, using primary GPT. [ 171.567452][ T7272] loop1: p2 p3 p7 [ 171.638233][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 171.745580][ T7288] netlink: 48 bytes leftover after parsing attributes in process `syz.4.856'. [ 171.746520][ T7290] siw: device registration error -23 [ 171.913835][ T7301] loop4: detected capacity change from 0 to 512 [ 171.922806][ T7301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 171.929572][ T7301] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.860: bad orphan inode 13 [ 171.940754][ T7301] ext4_test_bit(bit=12, block=18) = 1 [ 171.946170][ T7301] is_bad_inode(inode)=0 [ 171.950321][ T7301] NEXT_ORPHAN(inode)=2130706432 [ 171.955222][ T7301] max_ino=32 [ 171.958454][ T7301] i_nlink=1 [ 171.962456][ T7301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.014339][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.087585][ T7314] pimreg: entered allmulticast mode [ 172.094646][ T7314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=100 sclass=netlink_audit_socket pid=7314 comm=syz.4.865 [ 172.109662][ T7314] pimreg: left allmulticast mode [ 172.393626][ T7338] lo speed is unknown, defaulting to 1000 [ 172.399911][ T7338] wg1 speed is unknown, defaulting to 1000 [ 172.437195][ T7338] lo speed is unknown, defaulting to 1000 [ 172.486486][ T7346] vlan2: entered allmulticast mode [ 172.563876][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 172.584469][ T7364] capability: warning: `syz.3.871' uses deprecated v2 capabilities in a way that may be insecure [ 172.607755][ T7364] Unsupported ieee802154 address type: 0 [ 172.769306][ T7370] sctp: [Deprecated]: syz.2.873 (pid 7370) Use of int in max_burst socket option. [ 172.769306][ T7370] Use struct sctp_assoc_value instead [ 172.991752][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 173.105457][ T7379] lo speed is unknown, defaulting to 1000 [ 173.111968][ T7379] wg1 speed is unknown, defaulting to 1000 [ 173.172381][ T7379] lo speed is unknown, defaulting to 1000 [ 174.025851][ T7387] ================================================================== [ 174.034050][ T7387] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 174.041349][ T7387] [ 174.043671][ T7387] write to 0xffff888104379000 of 8 bytes by task 7385 on cpu 0: [ 174.051297][ T7387] mas_wmb_replace+0x208/0xfa0 [ 174.056075][ T7387] mas_wr_store_entry+0x13e3/0x2750 [ 174.061282][ T7387] mas_store_prealloc+0x760/0xa90 [ 174.066318][ T7387] vma_iter_store_new+0x1c5/0x200 [ 174.071353][ T7387] vma_complete+0x125/0x580 [ 174.076018][ T7387] __split_vma+0x5e3/0x660 [ 174.080438][ T7387] vma_modify+0xbee/0xd50 [ 174.084773][ T7387] vma_modify_flags+0x10c/0x190 [ 174.089632][ T7387] mprotect_fixup+0x30f/0x5e0 [ 174.094312][ T7387] do_mprotect_pkey+0x6d6/0x980 [ 174.099163][ T7387] __x64_sys_mprotect+0x48/0x60 [ 174.104019][ T7387] x64_sys_call+0x2c3b/0x3000 [ 174.108707][ T7387] do_syscall_64+0xd8/0x2a0 [ 174.113319][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.119215][ T7387] [ 174.121553][ T7387] read to 0xffff888104379000 of 8 bytes by task 7387 on cpu 1: [ 174.129089][ T7387] mas_state_walk+0x485/0x650 [ 174.133780][ T7387] mas_walk+0x60/0x150 [ 174.137975][ T7387] lock_vma_under_rcu+0x95/0x1b0 [ 174.142945][ T7387] do_user_addr_fault+0x233/0x1080 [ 174.148075][ T7387] exc_page_fault+0x62/0xa0 [ 174.152590][ T7387] asm_exc_page_fault+0x26/0x30 [ 174.157441][ T7387] [ 174.159758][ T7387] value changed: 0xffff88811bca5141 -> 0xffff888104379000 [ 174.166855][ T7387] [ 174.169178][ T7387] Reported by Kernel Concurrency Sanitizer on: [ 174.175327][ T7387] CPU: 1 UID: 0 PID: 7387 Comm: syz.4.878 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.186528][ T7387] Tainted: [W]=WARN [ 174.190330][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.200389][ T7387] ==================================================================