last executing test programs: 58.212276919s ago: executing program 3 (id=190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 58.157472152s ago: executing program 3 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0xfffffffffffffd15) recvfrom$packet(r2, &(0x7f0000000080)=""/50, 0x32, 0x22060, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000001c0)={'gretap0\x00', r3, 0x10, 0x20, 0x10000004, 0x3, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x67, 0x0, 0x14, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xae}, {@remote, 0x2}, {@loopback, 0x3}, {@private=0xa010101, 0x3800}, {@multicast1, 0x9}]}]}}}}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0xc, 0xc6, 0x7, 0x3}, {0x7, 0x90, 0x13, 0x3}, {0x40a, 0xff, 0x2, 0xaf}, {0x2, 0xf8, 0x6e, 0x10001}, {0x5, 0x38, 0xe, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x80}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200000, 0x106) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x7}, {0x1, 0xa}, {0x8, 0x6}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) 58.062074476s ago: executing program 3 (id=194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 55.945793178s ago: executing program 3 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x40010, 0xffffffffffffffff, 0xec772000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'nr0\x00', 'batadv0\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000002c0)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_clone3(&(0x7f0000000540)={0x4000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f0000000400)=""/212, 0xd4, &(0x7f0000000600)=""/206, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000700)=r3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 55.608978032s ago: executing program 3 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="65f6763f07b4a6af13d253043e19925d61d6d6825f894cb888c492391ccf0f23adea29d4084a160f71070000004043ff000000000000000000"], 0x0}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x8812, &(0x7f0000000080)={[{@resuid={'resuid', 0x3d, 0xee00}}]}, 0x1, 0x4fe, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xfffffffffffffe5e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xfd, 0x2c3, &(0x7f0000000440)="$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") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 55.366155343s ago: executing program 3 (id=227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}], 0x1) 55.365284223s ago: executing program 32 (id=227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}], 0x1) 40.668598262s ago: executing program 2 (id=527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1ff, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x97}, 0x18) r3 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) r4 = open(&(0x7f0000000580)='./file0\x00', 0x418400, 0x22) fcntl$setlease(r4, 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000008000000570400000600000000010000", @ANYRES32=r4, @ANYBLOB="8000"/20, @ANYRES64=r3, @ANYRES64=r1, @ANYBLOB="04000000040000000000000000000000000000c28f9e76013a000000"], 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x88031, 0xffffffffffffffff, 0x1000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) tkill(r5, 0x22) 40.396415674s ago: executing program 2 (id=534): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x74124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', '', [{0x20, 'syz'}, {}, {}, {0x20, '\xfb\xf5\xd1\xb8\xf6\xa8\x0590\xe1g\x90\xaf\xeb\xff\x04JDP\x93lE\x93p&y+@[>\x91\xb1\xb3\xa0\x01\x99\x9b\xca\x9bb\x9e7\f\x00\xe0:l~\xc9\x96,W\xf1W\xd4\x88\xaeR\t\x895\x80\x92=\xfd\xbf=ri5z\x99\xb2\xbf{\xbf}R\x05\xa6\xacdc\xe6\xf3\xb1 \x1a\xbbC-&fT\xe2f\x00\x0f\xc1\x99\x9blG\xaf.!\xd9\xb2\xa2e\xbe\xe4:\xf07\xd9\xb4\xcb\xf2\x99)ge\x0e\x97\x13\xd6\xc2\xc4\x17]\xdf\x83<\xba\xb8\x88\x92o\xf9\x00\xdd\xe2\xa8\xba\xb8\xb4\x7f\fU\xd2}\xc5\xb1\xac\xd0\xc7\x93\xd8s\xb1'}, {0x20, '\\'}, {0x20, 'syz'}]}, 0xb2) request_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\xb0\x8b\xfd\n\xd4\xd7p\x98\x8d\xc9\xb1\x86g\xf7\x83\x93\x9e\xa0R\x82\a\x1a\x7f\x7fvI\x96\x7f\xba e\xd4\xc0\x18r\xe0\x12\xf1p\xa1\xb0\xe2\x8d\xdbX\x98]>\xad\xa6\\\xa9\x9e\xa5\xaa\x9f\xbe\x80L\xc4\"1z\x92\x12\xd0S\x98\x9f\x81 A\xf3\x0f%\xeeAP\xfa\xc8\xf5\x02\xc56\xc5\xe7O\xd2\xcf\xc2i\xdc\xae+.\xb4\xedD\xa0)\xd0\xae\xc2\xf0\x81n\xa6\xca\xf7\xc1rc\xa7\x87\x97\xc9]\x7f\xacu\xb5\xfe\x0e5o\xd9\x9a:8\x9ep\xe0\x82d,N$\xcd\xe4%iE\x1a\xd1v\x17\xa3\x8a8[\xa1s\xd57^\xf1\xd3\xbf\x85\xde\xf7\xb0\xdf\xc0\b\x1c\x80\xbd\xca\x01\xba\xb5\x83\xd5\xd1>\x06\xe05eF\x9a8\xc5]^\x00'/212, 0x0) 40.381321574s ago: executing program 2 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000900800034000000007080004400000000f080001400000000024000580040000007061796c6f6164000800028008000340000040b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = semget$private(0x0, 0x4, 0x6c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) semop(r6, &(0x7f0000000040)=[{0x4, 0x7, 0x1000}, {0x4, 0x7, 0x800}, {0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x1, 0xc, 0x800}], 0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) socket$inet6(0xa, 0x2, 0x0) 40.0171569s ago: executing program 2 (id=540): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5006}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5006}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="af3fab9ef4256c800c00bbbbbbbbbbbbaaaaaaaaaaaa000d020000a03e030000649f5dade572dbcf124e084e24839e88ff59f53973aff1742a5bc9195a979e3e4cc4d5dfba01475dc27c2fe0eb24030d3aaa0fa4"], 0x60) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="af3fab9ef4256c800c00bbbbbbbbbbbbaaaaaaaaaaaa000d020000a03e030000649f5dade572dbcf124e084e24839e88ff59f53973aff1742a5bc9195a979e3e4cc4d5dfba01475dc27c2fe0eb24030d3aaa0fa4"], 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x58}}, 0x4048000) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x58}}, 0x4048000) syz_clone(0x20000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x90d0, 0x9, 0x0, 0x6}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2200850, &(0x7f0000000cc0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@dioread_nolock}, {@mblk_io_submit}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000100)=ANY=[], 0x138) (async) write$UHID_CREATE2(r9, &(0x7f0000000100)=ANY=[], 0x138) write$UHID_DESTROY(r9, 0x0, 0x0) chdir(0x0) (async) chdir(0x0) 39.732557122s ago: executing program 2 (id=545): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x74124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', '', [{0x20, 'syz'}, {}, {}, {0x20, '\xfb\xf5\xd1\xb8\xf6\xa8\x0590\xe1g\x90\xaf\xeb\xff\x04JDP\x93lE\x93p&y+@[>\x91\xb1\xb3\xa0\x01\x99\x9b\xca\x9bb\x9e7\f\x00\xe0:l~\xc9\x96,W\xf1W\xd4\x88\xaeR\t\x895\x80\x92=\xfd\xbf=ri5z\x99\xb2\xbf{\xbf}R\x05\xa6\xacdc\xe6\xf3\xb1 \x1a\xbbC-&fT\xe2f\x00\x0f\xc1\x99\x9blG\xaf.!\xd9\xb2\xa2e\xbe\xe4:\xf07\xd9\xb4\xcb\xf2\x99)ge\x0e\x97\x13\xd6\xc2\xc4\x17]\xdf\x83<\xba\xb8\x88\x92o\xf9\x00\xdd\xe2\xa8\xba\xb8\xb4\x7f\fU\xd2}\xc5\xb1\xac\xd0\xc7\x93\xd8s\xb1'}, {0x20, '\\'}, {0x20, 'syz'}]}, 0xb2) request_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\xb0\x8b\xfd\n\xd4\xd7p\x98\x8d\xc9\xb1\x86g\xf7\x83\x93\x9e\xa0R\x82\a\x1a\x7f\x7fvI\x96\x7f\xba e\xd4\xc0\x18r\xe0\x12\xf1p\xa1\xb0\xe2\x8d\xdbX\x98]>\xad\xa6\\\xa9\x9e\xa5\xaa\x9f\xbe\x80L\xc4\"1z\x92\x12\xd0S\x98\x9f\x81 A\xf3\x0f%\xeeAP\xfa\xc8\xf5\x02\xc56\xc5\xe7O\xd2\xcf\xc2i\xdc\xae+.\xb4\xedD\xa0)\xd0\xae\xc2\xf0\x81n\xa6\xca\xf7\xc1rc\xa7\x87\x97\xc9]\x7f\xacu\xb5\xfe\x0e5o\xd9\x9a:8\x9ep\xe0\x82d,N$\xcd\xe4%iE\x1a\xd1v\x17\xa3\x8a8[\xa1s\xd57^\xf1\xd3\xbf\x85\xde\xf7\xb0\xdf\xc0\b\x1c\x80\xbd\xca\x01\xba\xb5\x83\xd5\xd1>\x06\xe05eF\x9a8\xc5]^\x00'/212, 0x0) 39.441667135s ago: executing program 2 (id=552): getgroups(0x27, &(0x7f0000002540)) 39.441468635s ago: executing program 33 (id=552): getgroups(0x27, &(0x7f0000002540)) 35.718522927s ago: executing program 4 (id=627): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000340)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@bridge_newvlan={0x18, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) 35.674195549s ago: executing program 4 (id=629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x2c, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x8, 0x7}, @timestamp, @window={0x3, 0x0, 0x4}], 0x4) 35.673828469s ago: executing program 4 (id=630): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) 35.281666586s ago: executing program 4 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x40010, 0xffffffffffffffff, 0xec772000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'nr0\x00', 'batadv0\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000002c0)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_clone3(&(0x7f0000000540)={0x4000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x9}, &(0x7f0000000400)=""/212, 0xd4, &(0x7f0000000600)=""/206, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000700)=r3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 35.139065662s ago: executing program 4 (id=636): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sync() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) readahead(0xffffffffffffffff, 0xfffffff7fffffffd, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x8, 0x5, 0x40, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x61, 0x0, 0x7f, 0x18, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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") open(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x725e2c22, 0xd, 0x0, 0x12c19, r3, 0xc, '\x00', r5, r11, 0x3, 0x4, 0x2, 0xc, @void, @value, @value=r12}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x18) 34.568881587s ago: executing program 4 (id=645): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r1, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8812, &(0x7f0000000440), 0x4, 0x4fe, &(0x7f0000000a40)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 34.568335387s ago: executing program 34 (id=645): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r1, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8812, &(0x7f0000000440), 0x4, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoX9/wCspCjQoiioYw/QE0BBfCRmMIiZG4cgG1HZqmM0zTaZFWEtulexNJXOmf4M6FCSsX7tzpzg0uTKoSDTVhMebembZD26H19cfAzOeT3Ln3nHtnvufMcM6Ze2A4AfSsCxGxGhGnIuJhRAw385OI+HjzotuN616/eja18erZVBL1+v1/Jtk1aV60PCeaz0tfczAifvDdiB8nu+PWllfmJsvl0kIzPbJYmR+pLa9cnc01c8YnxiZGb167MX5kdT1f+e36d2bv/vD3v/vSyz+tfvOnabEKPz+dnWutx1FqVD0fhZa8/oi4exzBOqS/+eeHD0/a2j4TERez9j8cfdmnCQB0s3p9OOrDrWkAoNul9/+FSHLF5lxAIXK5YrExh3cuhnLlam3xynB16fF0ZHNYZyKfezRbLo025wrPRD5J02PZ8XZ6fDP9s4iYLZeuRcTZiPjFwEfZ+eJUtTzdyS8+ANDDPt4x/v9noDH+AwBdbrDTBQAATpzxHwB6j/EfAHrP/zH++3UgAHQJ9/8A0HuM/wDQe/Yd/9dOphwAwIn4/r176VbfaP7/19NPlpe+VXhydbpUmytWlqaKU9WF+eJMtTpTLhWn6vX9Xq9crc6PXd9K1pZXHlSqS48XH8xWJmdKD0r5Y64PALC/s+df/CWJiNVbH2VbtKzlYKyG7pY79icA76u+ThcA6Bi/54HedYB7fNMA0OX2WKL3LW3/idBzi7/Ch+ry583/Q68ynQ+969PN/3/7yMsBnDzz/9C76vXEmv8A0GPM8QOH+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FGFbEtyxWwt8NX0MVcsRpyOiDORTx7NlkujEfFJRPx5ID+Qpsc6XWgA4JByf0+a639dHr5U2Hn2VPLfgWwfET/51f1fPp1cXFwYS/P/tZW/+LyZP36qExUAAFrd3p3VGKeb+5Yb+devnk1tbidZxPU7jcVF07gbza1xpj/6s/1g5CNi6N9JM92Qfl/pO4L4q2sR8bnt+j9tiVDI5kAaK5/ujJ/GPn0M8bff/53xc2/Fz2Xn0n0+ey8+u/OFj+LNgS734k6jn2y2vbSJNdtfLi5k+73b/2DWQx3eZv+3sav/y231f3274idZm7+wlX53Sdav/+F7uzLrw41za9H/hf694idb8ZM2/e+lA9bxr1/88sV25+q/jrgce8dvqGTd7MhiZX6ktrxydbYyOVOaKT0eH58Ymxi9ee3G+Eg2R914/ONeMf5x68on7eKvr0UMtYk/uE/9v3bA+v/mzcMffeUd8b/x1b0//3PviJ+OiV8/YPzJodttl+9O40+3qf9+n/+VA8Z/+beV6QNeCgCcgNryytxkuVxa2Ocg/a653zUHOHhzuKc7OI6DWI14D4rh4L066HTPBBy37Ubf6ZIAAAAAAAAAAAAAAADt1JZX5gbieH9O1Ok6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0L3+FwAA//+OKM9p") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 13.603728299s ago: executing program 6 (id=1008): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = fcntl$getown(r5, 0x9) prlimit64(r6, 0xd, 0x0, &(0x7f0000000380)) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8c, 0x38, 0x7fffffff, 0x3e, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x40, 0xff}}) bind$xdp(r7, &(0x7f0000000340)={0x2c, 0x8, r8, 0xb, r0}, 0x10) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) 13.421957086s ago: executing program 6 (id=1011): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x284200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='afs_cell\x00', r4, 0x0, 0xc}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850040000f000000952b67bb704975c79398c2f7c0fa99b37394cdbc4420c226857e167b089a63d018fabd8c94be01b84f535d2de68b2efba297cbc4dc5666339773a57fda277fec1e07428c8e1c57478060f324b7ca61acf66c56fbd21aa93471e8e7aa35d59754a160103a7926bca3640d759d5d5fb8dbb02187159b985c9a765eaaf54c2004c65d9d2686a3a43780bfb2fe431e90c1ff06"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@jqfmt_vfsv1}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000005c0), &(0x7f0000000600)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) io_setup(0x1, &(0x7f00000001c0)) 13.008035584s ago: executing program 6 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f040000000000"], 0x0, 0x28}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x22f6, 0x3a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cab9e07d374e4d719a829662df1cc115a76700cb0cbc0bfa"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x80}, 0x50) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000008080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 13.006123344s ago: executing program 6 (id=1019): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) rename(0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000880)=ANY=[@ANYBLOB="cec98d6695233d2b3c5d", @ANYRESOCT=r0], 0xfe37, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xe}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8080) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req={0x1ff, 0x1ff80000, 0xfffffffe, 0x3}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\b\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) syz_clone(0x20000000, &(0x7f00000008c0)="80221f076138aae573e579f94a7a260b53a2b5c56d7abb878081d3d33b79dde09b5d4f8e6977a75c7ba33b9dba778609ac36898bb4a067aea05851cff327c6e7f930babd63b7bc1a0b9802fce9bd0792ab7b635eaeb57a24b3f956d14d3ae09597287d7e03e92060e46f1ecad5e7dd2c9df156f1d29c71a784b5b1b22c2d43fe779588d15fb108ab89b35a23e2f159b33898651c2c20afb066cef591b1a0a394f8546f509823ee3323b3845de51277904f9835eb87ed5c4e2686b5b3905b9e5de7c10ca62598ea6e3adc6f0362df6ddff14c6a65c75e6525fdc068a4a846cbe8eb060c745d70978809a2947efa6f4429", 0xf0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000009c0)="283e591ef6810555d43a4014aa64ae9f0ab4fa59e19ba121194772c1ed90b7ce09824479e827d4fa211c2a5916eacb7da7cb75da4ddb73dcb3215bf59c76318ad6f9d362e314e27825281810400d3a5b6146c02d8bd372e98f3f3c227851482847d764abfa7b9d40b8b97870791f466eef243809bfc6b0ac0be328dfcb14eb2a7e713635ffd97068078262da0b18dddbe3d85a37b9fc5364ce13cf8b18ed5c41fa173eef46d36188410fa01ed11d0c172978927941f789") 12.86252204s ago: executing program 6 (id=1023): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r2}, 0x18) r4 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r5, 0x0, 0x3}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x850) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3, 0xfff7}}}, 0x24}}, 0x0) 12.446064869s ago: executing program 6 (id=1032): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r2}, 0x18) r4 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000", @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r5, 0x0, 0x3}, 0x18) socket$kcm(0x10, 0x2, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 12.443171819s ago: executing program 35 (id=1032): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r2}, 0x18) r4 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000", @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r5, 0x0, 0x3}, 0x18) socket$kcm(0x10, 0x2, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 2.559935148s ago: executing program 5 (id=1195): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r2}, 0x18) r4 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r5, 0x0, 0x3}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a24000000090aae89000000000000000001000004080005400000003608000540000000203c000000060a010100000000000000000200000008000b400000000208000940000000000900010073797a31000000000c00034000000000000000011c0000000b0a0103000000000000000001000009080003400000004014000000180a0102000000000000000002000004140000e9130a010400000000000000000500000014000000000a00000000000000000000000000075c000000160a03000000000000000000000000020900010073797a30000000000900020073797a32000000000c00054000000000000000030900010073797a31000000000900020073797a32000000000900020073797a3100000000140000001100010000000000000000000500000a"], 0x13c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x850) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3, 0xfff7}}}, 0x24}}, 0x0) 2.031872831s ago: executing program 0 (id=1205): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000800, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x200480, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x2a020400) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x7) ppoll(&(0x7f0000000040)=[{r1, 0x156}], 0x1, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = memfd_secret(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, r5, 0x2e, 0x4608, @void}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0x2}, 0x18) 1.871583778s ago: executing program 0 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x200]}, 0x8, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0xc, &(0x7f0000000e00)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='inet_sock_set_state\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r5, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/73, 0x49, 0x0, &(0x7f0000000340)=""/130, 0x82}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000052642a600b452b44000000f134119c0000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r6, @ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r10], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r12, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r13}, 0x10) r14 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x4}) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000006c0)=0xfffffffe, 0x4) io_uring_register$IORING_REGISTER_CLOCK(r14, 0x23, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000500)={[], [], 0x2c}, 0x1, 0x4d8, &(0x7f0000000900)="$eJzs3MtvG9UaAPBvJs2jz6S91b23D6ihICIKSZMW6IIFIJC6ASHBoixDGqpSt0VNkGhV0RShskT8BcASCYkVG1YgIQRsALGFPUKqUDctLJDR2DOJ3diOnbQJrX8/aexzZs48vjNzxjM+9gTQs0rZSxKxJSJ+iYjhWraxQKn2duPaxek/r12cTqJSeemPpFru+rWL00XRYr7NeWY0jUjfTWJPk/XOnr9waqpcnjmX58fnTr8xPnv+wqMnT0+dmDkxc2byyJHDhyaeeHzysY7iuLTM9Cyu67vfPrt319FXPnh+uhKvfvdptr1b8un1cdSMdLTedkpRikpucexA9fXBVS/932VrRAzm6WTDOm8MHeuLiGx39Vfb/3D0xeLOG47n3lnIfL1OGwjcNtln0/YlY/vy93Th8wu4GyXaOPSo4hM/u/8thrW8/lhvV5/OXmeq8d/Ihx9eqNVNmt3LjtTu2PtazP/fJuOGFpOV4WXWvyUijs3/9WE2RNPvIdpIOi4JALDgy+z655Fm139pw7XNtrwPZSQiDkTEjoj4T0TsjHShzP8i4v9drr90U37p9c9PG7tcZFey678n876tYqhNKeJKFnJbq/H3J6+dLM8czOtkNPoHs/xEm3V89ezP77eaVqq7/suGbP3FtWC+Hb9vGGyc5/jU3NQqQm5w9XIksaFZ/MlCT0BWA7siYvcKlp/V2cmHP9mbpbdtXjp9+fjbuAX9TJWPIx6q7f/5uCn+QlJbU6v+yfGhKM8cHC+OiqW+//HKi/X5/rp0Q/xDncU0tNJgm7h6OWJT0+M/j79oBkV/7Wz367jy63st72mW7v8kjs3Xl8iP/42L1ZYd/wPJy9X0QD7uram5uXMTEQP5iIbxk4tLK/JF+Sz+0f2N8dfui9PsHPf3R/l8eyIiO4jviYh7I2Jfvu33RcT9EbG/TfzfPvPA6+1raIXH/y2QxX+83f6PGEnq++tXkOg79c0Xrdbf2fnvcDU1mo+pP/8NtFhupxu42voDAACAO0Fa7YNO0rG6328XdsamtHx2du5AKd48c7zWVz0S/WnxTddw3fehE/l3w0V+8qb8oYjYXv2l0cZqfmz6bHnrOsUM1Gyua/+1c0Gajo3Vpv3W6kcvwN2jq360+h+dffb5rd8YYE35vyb0Lu0fepf2D71L+4fe1az9X4q4sQ6bAqwxn//Qu7R/6F3aP/Qu7R960tK/xOePW8nOCSv/y395x9HVPDHg9icqwyufPVpPmu9+gX2dFS6eftHxkjsrnES0CaddItL2ZQY639S1T6TLlnlquWrp7+qZGENNamNfnhiMiE6Xc2nNarU4QySeMgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzR/gkAAP//fHDiVg==") 1.768536772s ago: executing program 5 (id=1209): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8, 0x80000) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.767014543s ago: executing program 7 (id=1210): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x284200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8, 0x80000) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.734207144s ago: executing program 5 (id=1211): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x284200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='afs_cell\x00', r4, 0x0, 0xc}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@jqfmt_vfsv1}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500003855f5000000019078ac1e0001ac1414aa03019078030000004500000000000000002f0000ac14140ae0000001040022eb0a1414ac97f80ac92b33f0de93ee9a053b634c88bc44014f0843dc07be9add4dc8749e6fa0e70cde604d24bbcbc14027064726d5a61d229ece7435ae0ab178f9058b0a83edb9e7eda5"], 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000005c0), &(0x7f0000000600)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) io_setup(0x1, &(0x7f00000001c0)) 1.733837764s ago: executing program 7 (id=1212): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x527171d9}, &(0x7f0000000080)=0x10) 1.440584327s ago: executing program 8 (id=1213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x527171d9}, &(0x7f0000000080)=0x10) (fail_nth: 1) 1.432421917s ago: executing program 8 (id=1214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r4 = fcntl$dupfd(r3, 0x0, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x700, 0x1, 0x49, 0xfffffe00, {{0x3f, 0x4, 0x3, 0x35, 0xfc, 0x68, 0x0, 0x5, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x8, [0x3, 0x8, 0x7ff, 0x3ff]}, @end, @timestamp_addr={0x44, 0x4, 0x9a, 0x1, 0x1}, @lsrr={0x83, 0x17, 0x97, [@broadcast, @empty, @local, @local, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xed, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010102, 0x10}, {@private=0xa010100, 0xffffffff}, {@local, 0x1}, {@broadcast, 0xbea}]}, @ssrr={0x89, 0x1b, 0x6b, [@multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @broadcast]}, @ssrr={0x89, 0x23, 0x66, [@empty, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @remote, @multicast1, @multicast2, @remote, @private=0xa010102]}, @cipso={0x86, 0x4d, 0x3, [{0x1, 0x8, "3363dec4fc92"}, {0x0, 0xa, "cff9dcafee2bc59a"}, {0x6, 0x9, "b34a751c0dcadc"}, {0x2, 0x8, "7f86ee8f6338"}, {0x0, 0x11, "c2f3953b6f8f689c98bd992dd41f37"}, {0x6, 0x11, "4ff4a1e359e1b469bac50cf8af95c4"}, {0x0, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4008101) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r7, 0xff, 0x1, &(0x7f0000000000)='O', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r11, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast}}}}}}, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x1, 0x0, 0x0, 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r14], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1.38136496s ago: executing program 5 (id=1216): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r5) 1.123621481s ago: executing program 5 (id=1219): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x8800) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000680)) ioctl$EVIOCGSW(r1, 0x8040451b, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000280), &(0x7f0000000400)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00e01226d5d207d0e202349685622dc52b9a857a62be23162a7fbc7d4b91368a56242496f0e3b2bfa11efdadfa47e084891e881ff31cac05048fc7885536700c2b73d98a648d15360bdc875a66184e9ac745b74cbbaf1d2c2b7d65763b57be296ae4c6ac2e"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r4, @ANYBLOB="00000000835163c49447556400000000850000001b000000b700000000000000951c6e9654a20c6141bad3de738e1eb4242a5ee63e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$inet(0x2, 0x2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x2}, 0x18) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x804) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) 1.083008362s ago: executing program 8 (id=1220): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r2}, 0x18) r4 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r5, 0x0, 0x3}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x850) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3, 0xfff7}}}, 0x24}}, 0x0) 980.502017ms ago: executing program 8 (id=1221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000"], 0xe8}}, 0x0) 942.043559ms ago: executing program 0 (id=1222): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8, 0x80000) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 941.490609ms ago: executing program 1 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 941.016549ms ago: executing program 0 (id=1224): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") socket(0x2000000015, 0x80005, 0x0) socket(0x15, 0x5, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000c00)=0x6, 0x5, 0x3) 939.802479ms ago: executing program 8 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r2) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000400)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2d, 0x71}, 0x0, 0x3, 0x3, 0x7, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) close(r0) 722.166088ms ago: executing program 8 (id=1226): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), 0x0}, 0x20) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 721.367248ms ago: executing program 1 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000900800034000000007080004400000000f080001400000000024000580040000007061796c6f6164000800028008000340000040b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = semget$private(0x0, 0x4, 0x6c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) semop(r6, &(0x7f0000000040)=[{0x4, 0x7, 0x1000}, {0x4, 0x7, 0x800}, {0x2, 0x2}, {0x3, 0x5, 0x1000}, {0x1, 0xc, 0x800}], 0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) socket$inet6(0xa, 0x2, 0x0) 718.741679ms ago: executing program 7 (id=1228): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000ac0)={0x0, 0x0, @status={[0x5, 0xfffffffffffffffa, 0x7, 0x80000000, 0x1, 0x5]}, [0x85bf, 0x282, 0xffffffffffffffff, 0x8, 0x4, 0x3, 0x75, 0x6fa, 0x1, 0x101, 0x4, 0x4cf, 0x6, 0x9, 0x5, 0x9, 0x3, 0x7, 0x9, 0x5, 0x3, 0x5c, 0x1b0, 0x9, 0x0, 0x7, 0x400, 0x6, 0xf, 0x2, 0xffffffffffffffff, 0x45, 0x101, 0x0, 0x87, 0xfffffffffffffffd, 0xff, 0x81, 0x100, 0x1, 0x0, 0x8, 0x5, 0x50000000000000, 0x1, 0x73, 0x7fffffffffffffff, 0x80000000, 0x9, 0x8, 0xb, 0x1d4, 0x6, 0x8, 0x40, 0xfff, 0x2c, 0x3, 0x3, 0x82f, 0x0, 0x1f6e, 0x9, 0x2]}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000340)='fsi_master_read\x00', r10, 0x0, 0x3}, 0x18) r11 = timerfd_create(0x7, 0x0) timerfd_gettime(r11, &(0x7f0000001200)) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3eeb6a22c404648a60f674", @ANYRES16=r8, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r12, @ANYBLOB="08000500e0000002"], 0x3c}}, 0x0) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040030bd7000fbdbdf250300000008000400ac1414bb08000100", @ANYRES32=r6, @ANYBLOB="05000d0025000000080002000100000008000100", @ANYRES32=r3, @ANYBLOB="2b08956f", @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x801) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r15}, 0x10) socket$key(0xf, 0x3, 0x2) 657.892461ms ago: executing program 7 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 657.018981ms ago: executing program 7 (id=1230): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="331926d11a265c5577bb19fce6"], 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 633.383702ms ago: executing program 1 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (fail_nth: 1) 509.980007ms ago: executing program 1 (id=1232): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x83, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00', r2}, 0x18) r4 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_journal_start\x00', r5, 0x0, 0x3}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a24000000090aae89000000000000000001000004080005400000003608000540000000203c000000060a010100000000000000000200000008000b400000000208000940000000000900010073797a31000000000c00034000000000000000011c0000000b0a0103000000000000000001000009080003400000004014000000180a0102000000000000000002000004140000e9130a010400000000000000000500000014000000000a00000000000000000000000000075c000000160a03000000000000000000000000020900010073797a30000000000900020073797a32000000000c00054000000000000000030900010073797a31000000000900020073797a32000000000900020073797a3100000000140000001100010000000000000000000500000a"], 0x13c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x850) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3, 0xfff7}}}, 0x24}}, 0x0) 276.604547ms ago: executing program 1 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000ff030000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 260.766138ms ago: executing program 1 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r7, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 109.765895ms ago: executing program 7 (id=1235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") syz_open_dev$sg(0x0, 0xc1b, 0x20402) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x0, 0x3d, @buffer={0x42, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x74}}, 0x0) 87.250006ms ago: executing program 0 (id=1236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000"], 0xe8}}, 0x0) 34.716338ms ago: executing program 5 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x22f6, 0x3a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cab9e07d374e4d719a829662df1cc115a76700cb0cbc0bfa"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6, 0x3, '\x00', 0x0, r1, 0x3, 0x80}, 0x50) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000008080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 0s ago: executing program 0 (id=1238): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x284200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850040000f000000952b67bb704975c79398c2f7c0fa99b37394cdbc4420c226857e167b089a63d018fabd8c94be01b84f535d2de68b2efba297cbc4dc5666339773a57fda277fec1e07428c8e1c57478060f324b7ca61acf66c56fbd21aa93471e8e7aa35d59754a160103a7926bca3640d759d5d5fb8dbb02187159b985c9a765eaaf54c2004c65d9d2686a3a43780bfb2fe431e90c1ff06"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@jqfmt_vfsv1}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500003855f5000000019078ac1e0001ac1414aa03019078030000004500000000000000002f0000ac14140ae0000001040022eb0a1414ac97f80ac92b33f0de93ee9a053b634c88bc44014f0843dc07be9add4dc8749e6fa0e70cde604d24bbcbc14027064726d5a61d229ece7435ae0ab178f9058b0a83edb9e7eda5"], 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000005c0), &(0x7f0000000600)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) io_setup(0x1, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): f0a6db8f749 [ 74.060906][ T5878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200011 [ 74.060955][ T5878] RBP: 00007f0a6c5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 74.060965][ T5878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 74.060976][ T5878] R13: 00007f0a6dde6128 R14: 00007f0a6dde6090 R15: 00007ffe478c5e48 [ 74.061013][ T5878] [ 74.325019][ T5871] loop6: detected capacity change from 0 to 512 [ 74.339218][ T5883] loop7: detected capacity change from 0 to 512 [ 74.346778][ T5883] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.359157][ T5883] EXT4-fs (loop7): 1 truncate cleaned up [ 74.365428][ T5871] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.773: iget: bad extra_isize 90 (inode size 256) [ 74.382251][ T5883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.389354][ T5891] FAULT_INJECTION: forcing a failure. [ 74.389354][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.407370][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: syz.5.780 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.407405][ T5891] Tainted: [W]=WARN [ 74.407411][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.407421][ T5891] Call Trace: [ 74.407427][ T5891] [ 74.407434][ T5891] __dump_stack+0x1d/0x30 [ 74.407493][ T5891] dump_stack_lvl+0xe8/0x140 [ 74.407511][ T5891] dump_stack+0x15/0x1b [ 74.407562][ T5891] should_fail_ex+0x265/0x280 [ 74.407601][ T5891] should_fail+0xb/0x20 [ 74.407616][ T5891] should_fail_usercopy+0x1a/0x20 [ 74.407636][ T5891] _copy_from_user+0x1c/0xb0 [ 74.407738][ T5891] ___sys_recvmsg+0xaa/0x370 [ 74.407760][ T5891] ? _parse_integer+0x27/0x40 [ 74.407829][ T5891] do_recvmmsg+0x1ef/0x540 [ 74.407855][ T5891] ? get_timespec64+0xc9/0x100 [ 74.407873][ T5891] __x64_sys_recvmmsg+0xfb/0x170 [ 74.408000][ T5891] x64_sys_call+0x2b75/0x3000 [ 74.408020][ T5891] do_syscall_64+0xd8/0x2a0 [ 74.408046][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.408063][ T5891] RIP: 0033:0x7ff142cef749 [ 74.408076][ T5891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.408115][ T5891] RSP: 002b:00007ff141757038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 74.408131][ T5891] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142cef749 [ 74.408142][ T5891] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005 [ 74.408153][ T5891] RBP: 00007ff141757090 R08: 0000200000003700 R09: 0000000000000000 [ 74.408200][ T5891] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 74.408210][ T5891] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 74.408226][ T5891] [ 74.408548][ T5871] EXT4-fs (loop6): Remounting filesystem read-only [ 74.531567][ T5893] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.781'. [ 74.535147][ T5871] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 74.562153][ T5893] net_ratelimit: 53 callbacks suppressed [ 74.562168][ T5893] netlink: zone id is out of range [ 74.567569][ T5871] EXT4-fs (loop6): 1 orphan inode deleted [ 74.575436][ T5893] netlink: zone id is out of range [ 74.583989][ T5871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.597818][ T5893] netlink: zone id is out of range [ 74.652089][ T5893] netlink: zone id is out of range [ 74.655488][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.657233][ T5893] netlink: zone id is out of range [ 74.671978][ T5893] netlink: zone id is out of range [ 74.677094][ T5893] netlink: zone id is out of range [ 74.682343][ T5893] netlink: zone id is out of range [ 74.687437][ T5893] netlink: zone id is out of range [ 74.694063][ T5893] netlink: zone id is out of range [ 74.704015][ T5898] veth2: entered promiscuous mode [ 74.709674][ T5898] veth2: entered allmulticast mode [ 74.741330][ T5175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.759293][ T5904] loop6: detected capacity change from 0 to 164 [ 74.767707][ T5904] syz.6.784: attempt to access beyond end of device [ 74.767707][ T5904] loop6: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 74.782814][ T5904] syz.6.784: attempt to access beyond end of device [ 74.782814][ T5904] loop6: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 74.875782][ T5906] loop7: detected capacity change from 0 to 128 [ 75.011129][ T5924] debugfs: 'ptm1' already exists in 'caif_serial' [ 75.041499][ T5924] loop7: detected capacity change from 0 to 512 [ 75.042423][ T5924] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 75.059753][ T5924] EXT4-fs (loop7): 1 truncate cleaned up [ 75.060149][ T5924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.105587][ T5927] __nla_validate_parse: 2 callbacks suppressed [ 75.105604][ T5927] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.793'. [ 75.105892][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 75.133288][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.229005][ T5937] 9p: Bad value for 'wfdno' [ 75.229655][ T5940] 9p: Bad value for 'wfdno' [ 75.229840][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.796'. [ 75.414961][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'. [ 75.658761][ T5961] debugfs: 'ptm1' already exists in 'caif_serial' [ 75.981230][ T5977] loop6: detected capacity change from 0 to 256 [ 75.987656][ T5977] vfat: Unknown parameter 'ÿÿ' [ 75.996456][ T5977] loop6: detected capacity change from 0 to 1024 [ 76.003241][ T5977] EXT4-fs: dax option not supported [ 76.022798][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.812'. [ 76.044335][ T5982] FAULT_INJECTION: forcing a failure. [ 76.044335][ T5982] name failslab, interval 1, probability 0, space 0, times 0 [ 76.057079][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.7.813 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.057119][ T5982] Tainted: [W]=WARN [ 76.057126][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.057138][ T5982] Call Trace: [ 76.057263][ T5982] [ 76.057270][ T5982] __dump_stack+0x1d/0x30 [ 76.057356][ T5982] dump_stack_lvl+0xe8/0x140 [ 76.057377][ T5982] dump_stack+0x15/0x1b [ 76.057394][ T5982] should_fail_ex+0x265/0x280 [ 76.057413][ T5982] should_failslab+0x8c/0xb0 [ 76.057436][ T5982] kmem_cache_alloc_noprof+0x69/0x4b0 [ 76.057504][ T5982] ? io_submit_one+0xb8/0x1280 [ 76.057529][ T5982] io_submit_one+0xb8/0x1280 [ 76.057557][ T5982] __se_sys_io_submit+0xfb/0x280 [ 76.057611][ T5982] __x64_sys_io_submit+0x43/0x50 [ 76.057632][ T5982] x64_sys_call+0x2e40/0x3000 [ 76.057653][ T5982] do_syscall_64+0xd8/0x2a0 [ 76.057686][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.057707][ T5982] RIP: 0033:0x7fe7bbf2f749 [ 76.057733][ T5982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.057791][ T5982] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 76.057811][ T5982] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 76.057847][ T5982] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fe7bccc2000 [ 76.057859][ T5982] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 76.057869][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.057879][ T5982] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 76.057894][ T5982] [ 76.334124][ T5992] debugfs: 'ptm2' already exists in 'caif_serial' [ 76.351556][ T5992] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.363371][ T5992] EXT4-fs (loop7): 1 truncate cleaned up [ 76.369444][ T5992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.401119][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.415492][ T5995] SELinux: Context system_u:object is not valid (left unmapped). [ 76.565175][ T6011] FAULT_INJECTION: forcing a failure. [ 76.565175][ T6011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.578560][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.7.822 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.578636][ T6011] Tainted: [W]=WARN [ 76.578641][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.578662][ T6011] Call Trace: [ 76.578728][ T6011] [ 76.578744][ T6011] __dump_stack+0x1d/0x30 [ 76.578768][ T6011] dump_stack_lvl+0xe8/0x140 [ 76.578795][ T6011] dump_stack+0x15/0x1b [ 76.578883][ T6011] should_fail_ex+0x265/0x280 [ 76.578903][ T6011] should_fail+0xb/0x20 [ 76.578920][ T6011] should_fail_usercopy+0x1a/0x20 [ 76.579099][ T6011] _copy_to_user+0x20/0xa0 [ 76.579123][ T6011] simple_read_from_buffer+0xb5/0x130 [ 76.579143][ T6011] proc_fail_nth_read+0x10e/0x150 [ 76.579182][ T6011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.579250][ T6011] vfs_read+0x1a8/0x770 [ 76.579266][ T6011] ? __rcu_read_unlock+0x4f/0x70 [ 76.579284][ T6011] ? __fget_files+0x184/0x1c0 [ 76.579316][ T6011] ? mutex_lock+0x58/0x90 [ 76.579339][ T6011] ksys_read+0xda/0x1a0 [ 76.579431][ T6011] __x64_sys_read+0x40/0x50 [ 76.579447][ T6011] x64_sys_call+0x2889/0x3000 [ 76.579469][ T6011] do_syscall_64+0xd8/0x2a0 [ 76.579498][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.579517][ T6011] RIP: 0033:0x7fe7bbf2e15c [ 76.579542][ T6011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.579557][ T6011] RSP: 002b:00007fe7ba976030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.579575][ T6011] RAX: ffffffffffffffda RBX: 00007fe7bc186090 RCX: 00007fe7bbf2e15c [ 76.579587][ T6011] RDX: 000000000000000f RSI: 00007fe7ba9760a0 RDI: 0000000000000003 [ 76.579598][ T6011] RBP: 00007fe7ba976090 R08: 0000000000000000 R09: 0000000000000000 [ 76.579609][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.579620][ T6011] R13: 00007fe7bc186128 R14: 00007fe7bc186090 R15: 00007fffcb208c18 [ 76.579690][ T6011] [ 76.780844][ T3577] Bluetooth: hci0: command 0x1003 tx timeout [ 76.788676][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.846659][ T6014] macsec1: entered promiscuous mode [ 76.851978][ T6014] macsec0: entered promiscuous mode [ 76.857311][ T6014] macsec1: entered allmulticast mode [ 76.862613][ T6014] macsec0: entered allmulticast mode [ 76.867903][ T6014] veth1_macvtap: entered allmulticast mode [ 76.884089][ T6014] macsec0: left allmulticast mode [ 76.889144][ T6014] veth1_macvtap: left allmulticast mode [ 76.894772][ T6014] macsec0: left promiscuous mode [ 76.907088][ T6016] debugfs: 'ptm0' already exists in 'caif_serial' [ 76.915070][ T6020] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.826'. [ 76.930412][ T6018] pim6reg1: entered promiscuous mode [ 76.935862][ T6018] pim6reg1: entered allmulticast mode [ 76.938488][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 76.938501][ T29] audit: type=1326 audit(1765462211.416:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 76.971753][ T29] audit: type=1326 audit(1765462211.426:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 76.995124][ T29] audit: type=1326 audit(1765462211.426:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.018699][ T29] audit: type=1326 audit(1765462211.426:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.042331][ T29] audit: type=1326 audit(1765462211.426:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.065809][ T29] audit: type=1326 audit(1765462211.426:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.089349][ T29] audit: type=1326 audit(1765462211.426:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.113036][ T29] audit: type=1326 audit(1765462211.426:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.136642][ T29] audit: type=1326 audit(1765462211.426:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.160221][ T29] audit: type=1326 audit(1765462211.426:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 77.476036][ T6039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6039 comm=syz.6.829 [ 77.536701][ T6049] syz.7.837: attempt to access beyond end of device [ 77.536701][ T6049] loop7: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 77.575167][ T6049] syz.7.837: attempt to access beyond end of device [ 77.575167][ T6049] loop7: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 77.597587][ T6052] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.835'. [ 78.165562][ T6088] bond0 (unregistering): Released all slaves [ 78.218491][ T6056] set_capacity_and_notify: 2 callbacks suppressed [ 78.218506][ T6056] loop5: detected capacity change from 0 to 512 [ 78.238445][ T6056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.838: iget: bad extra_isize 90 (inode size 256) [ 78.261226][ T6056] EXT4-fs (loop5): Remounting filesystem read-only [ 78.268020][ T6056] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 78.283186][ T6056] EXT4-fs (loop5): 1 orphan inode deleted [ 78.289684][ T6056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.344805][ T6095] FAULT_INJECTION: forcing a failure. [ 78.344805][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 78.357579][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.6.851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.357642][ T6095] Tainted: [W]=WARN [ 78.357647][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.357657][ T6095] Call Trace: [ 78.357664][ T6095] [ 78.357670][ T6095] __dump_stack+0x1d/0x30 [ 78.357692][ T6095] dump_stack_lvl+0xe8/0x140 [ 78.357712][ T6095] dump_stack+0x15/0x1b [ 78.357729][ T6095] should_fail_ex+0x265/0x280 [ 78.357764][ T6095] should_failslab+0x8c/0xb0 [ 78.357783][ T6095] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 78.357837][ T6095] ? __alloc_skb+0x324/0x4d0 [ 78.357861][ T6095] __alloc_skb+0x324/0x4d0 [ 78.357944][ T6095] ? __alloc_skb+0x24d/0x4d0 [ 78.358038][ T6095] netlink_alloc_large_skb+0xbf/0xf0 [ 78.358062][ T6095] netlink_sendmsg+0x3cf/0x6b0 [ 78.358105][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.358139][ T6095] __sock_sendmsg+0x145/0x180 [ 78.358159][ T6095] ____sys_sendmsg+0x31e/0x4a0 [ 78.358190][ T6095] ___sys_sendmsg+0x17b/0x1d0 [ 78.358260][ T6095] __x64_sys_sendmsg+0xd4/0x160 [ 78.358320][ T6095] x64_sys_call+0x17ba/0x3000 [ 78.358340][ T6095] do_syscall_64+0xd8/0x2a0 [ 78.358402][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.358425][ T6095] RIP: 0033:0x7f4edc12f749 [ 78.358439][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.358455][ T6095] RSP: 002b:00007f4edab97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.358485][ T6095] RAX: ffffffffffffffda RBX: 00007f4edc385fa0 RCX: 00007f4edc12f749 [ 78.358496][ T6095] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 78.358506][ T6095] RBP: 00007f4edab97090 R08: 0000000000000000 R09: 0000000000000000 [ 78.358519][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.358650][ T6095] R13: 00007f4edc386038 R14: 00007f4edc385fa0 R15: 00007ffc4fae3c78 [ 78.358668][ T6095] [ 78.560022][ T4205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.760638][ T6071] FAULT_INJECTION: forcing a failure. [ 78.760638][ T6071] name fail_futex, interval 1, probability 0, space 0, times 1 [ 78.762444][ T6108] lo speed is unknown, defaulting to 1000 [ 78.773508][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.0.845 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.773569][ T6071] Tainted: [W]=WARN [ 78.773575][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.773587][ T6071] Call Trace: [ 78.773594][ T6071] [ 78.773601][ T6071] __dump_stack+0x1d/0x30 [ 78.773624][ T6071] dump_stack_lvl+0xe8/0x140 [ 78.773689][ T6071] dump_stack+0x15/0x1b [ 78.773708][ T6071] should_fail_ex+0x265/0x280 [ 78.773730][ T6071] should_fail+0xb/0x20 [ 78.773759][ T6071] get_futex_key+0x130/0xc00 [ 78.773783][ T6071] ? __account_obj_stock+0x2d6/0x350 [ 78.773805][ T6071] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 78.773834][ T6071] futex_wake+0x7d/0x360 [ 78.773890][ T6071] ? __rcu_read_unlock+0x4f/0x70 [ 78.773913][ T6071] do_futex+0x323/0x380 [ 78.773994][ T6071] mm_release+0xb2/0x1e0 [ 78.774050][ T6071] exit_mm_release+0x25/0x30 [ 78.774066][ T6071] exit_mm+0x38/0x180 [ 78.774088][ T6071] do_exit+0x427/0x15d0 [ 78.774113][ T6071] do_group_exit+0xff/0x140 [ 78.774137][ T6071] ? get_signal+0xe50/0xf70 [ 78.774163][ T6071] get_signal+0xe58/0xf70 [ 78.774192][ T6071] arch_do_signal_or_restart+0x96/0x450 [ 78.774222][ T6071] exit_to_user_mode_loop+0x6a/0x740 [ 78.774275][ T6071] ? syscall_exit_work+0x74/0x1f0 [ 78.774297][ T6071] do_syscall_64+0x202/0x2a0 [ 78.774389][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.774409][ T6071] RIP: 0033:0x7f0a6db8f749 [ 78.774424][ T6071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.774442][ T6071] RSP: 002b:00007f0a6c5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 78.774473][ T6071] RAX: fffffffffffffe00 RBX: 00007f0a6dde5fa0 RCX: 00007f0a6db8f749 [ 78.774485][ T6071] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000003 [ 78.774539][ T6071] RBP: 00007f0a6c5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 78.774551][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.774563][ T6071] R13: 00007f0a6dde6038 R14: 00007f0a6dde5fa0 R15: 00007ffe478c5e48 [ 78.774580][ T6071] [ 78.873308][ T6118] FAULT_INJECTION: forcing a failure. [ 78.873308][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.007451][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.0.857 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.007482][ T6118] Tainted: [W]=WARN [ 79.007489][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.007502][ T6118] Call Trace: [ 79.007510][ T6118] [ 79.007517][ T6118] __dump_stack+0x1d/0x30 [ 79.007581][ T6118] dump_stack_lvl+0xe8/0x140 [ 79.007742][ T6118] dump_stack+0x15/0x1b [ 79.007759][ T6118] should_fail_ex+0x265/0x280 [ 79.007779][ T6118] should_fail+0xb/0x20 [ 79.007802][ T6118] should_fail_usercopy+0x1a/0x20 [ 79.007858][ T6118] strncpy_from_user+0x27/0x260 [ 79.007889][ T6118] __se_sys_memfd_create+0x206/0x6b0 [ 79.007968][ T6118] __x64_sys_memfd_create+0x31/0x40 [ 79.008074][ T6118] x64_sys_call+0x28cb/0x3000 [ 79.008094][ T6118] do_syscall_64+0xd8/0x2a0 [ 79.008122][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.008217][ T6118] RIP: 0033:0x7f0a6db8f749 [ 79.008230][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.008245][ T6118] RSP: 002b:00007f0a6c5eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 79.008262][ T6118] RAX: ffffffffffffffda RBX: 000000000000054c RCX: 00007f0a6db8f749 [ 79.008275][ T6118] RDX: 00007f0a6c5eeef0 RSI: 0000000000000000 RDI: 00007f0a6dc14960 [ 79.008345][ T6118] RBP: 0000200000000400 R08: 00007f0a6c5eebb7 R09: 00007f0a6c5eee40 [ 79.008355][ T6118] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000380 [ 79.008422][ T6118] R13: 00007f0a6c5eeef0 R14: 00007f0a6c5eeeb0 R15: 0000200000001cc0 [ 79.008437][ T6118] [ 79.292118][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.7.864'. [ 79.408922][ T6132] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.863'. [ 79.429001][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 79.500488][ T6144] FAULT_INJECTION: forcing a failure. [ 79.500488][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 79.513171][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.7.867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.513207][ T6144] Tainted: [W]=WARN [ 79.513214][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.513291][ T6144] Call Trace: [ 79.513298][ T6144] [ 79.513307][ T6144] __dump_stack+0x1d/0x30 [ 79.513331][ T6144] dump_stack_lvl+0xe8/0x140 [ 79.513428][ T6144] dump_stack+0x15/0x1b [ 79.513445][ T6144] should_fail_ex+0x265/0x280 [ 79.513465][ T6144] should_failslab+0x8c/0xb0 [ 79.513483][ T6144] __kmalloc_noprof+0xb9/0x5a0 [ 79.513506][ T6144] ? do_sys_poll+0x19b/0xbd0 [ 79.513590][ T6144] do_sys_poll+0x19b/0xbd0 [ 79.513615][ T6144] ? selinux_file_open+0x2dc/0x330 [ 79.513695][ T6144] __se_sys_poll+0xdd/0x200 [ 79.513715][ T6144] __x64_sys_poll+0x43/0x50 [ 79.513732][ T6144] x64_sys_call+0x289f/0x3000 [ 79.513812][ T6144] do_syscall_64+0xd8/0x2a0 [ 79.513844][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.513867][ T6144] RIP: 0033:0x7fe7bbf2f749 [ 79.513883][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.513937][ T6144] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 79.513953][ T6144] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 79.513967][ T6144] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 79.513978][ T6144] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 79.514058][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.514069][ T6144] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 79.514083][ T6144] [ 79.515961][ T6149] FAULT_INJECTION: forcing a failure. [ 79.515961][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 79.604274][ T6150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6150 comm=syz.6.866 [ 79.607707][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.5.870 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.607840][ T6149] Tainted: [W]=WARN [ 79.607847][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.607907][ T6149] Call Trace: [ 79.607914][ T6149] [ 79.607923][ T6149] __dump_stack+0x1d/0x30 [ 79.607976][ T6149] dump_stack_lvl+0xe8/0x140 [ 79.607999][ T6149] dump_stack+0x15/0x1b [ 79.608061][ T6149] should_fail_ex+0x265/0x280 [ 79.608083][ T6149] should_failslab+0x8c/0xb0 [ 79.608105][ T6149] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 79.608176][ T6149] ? __alloc_skb+0x324/0x4d0 [ 79.608201][ T6149] __alloc_skb+0x324/0x4d0 [ 79.608223][ T6149] ? __alloc_skb+0x24d/0x4d0 [ 79.608245][ T6149] pfkey_sendmsg+0xd7/0x900 [ 79.608278][ T6149] ? avc_has_perm+0xf7/0x180 [ 79.608298][ T6149] ? selinux_socket_sendmsg+0x175/0x1b0 [ 79.608324][ T6149] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 79.608352][ T6149] __sock_sendmsg+0x145/0x180 [ 79.608372][ T6149] ____sys_sendmsg+0x31e/0x4a0 [ 79.608433][ T6149] ___sys_sendmsg+0x17b/0x1d0 [ 79.608469][ T6149] __x64_sys_sendmsg+0xd4/0x160 [ 79.608499][ T6149] x64_sys_call+0x17ba/0x3000 [ 79.608585][ T6149] do_syscall_64+0xd8/0x2a0 [ 79.608645][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.608667][ T6149] RIP: 0033:0x7ff142cef749 [ 79.608682][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.608700][ T6149] RSP: 002b:00007ff141757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.608793][ T6149] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142cef749 [ 79.608806][ T6149] RDX: 0000000000000082 RSI: 0000200000000400 RDI: 0000000000000003 [ 79.608819][ T6149] RBP: 00007ff141757090 R08: 0000000000000000 R09: 0000000000000000 [ 79.608831][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.608844][ T6149] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 79.608861][ T6149] [ 80.036843][ T6166] loop5: detected capacity change from 0 to 512 [ 80.061005][ T6173] loop7: detected capacity change from 0 to 2048 [ 80.075998][ T6173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 80.122701][ T6166] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.132785][ T6166] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 80.140961][ T6166] EXT4-fs (loop5): orphan cleanup on readonly fs [ 80.148200][ T6166] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.874: Allocating blocks 41-42 which overlap fs metadata [ 80.163379][ T6166] EXT4-fs (loop5): Remounting filesystem read-only [ 80.169999][ T6166] EXT4-fs (loop5): 1 truncate cleaned up [ 80.176113][ T6166] EXT4-fs (loop5): pa ffff888107d59310: logic 1, phys. 41, len 23 [ 80.185467][ T6166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.198006][ T6172] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.220649][ T6166] 9p: Could not find request transport: r [ 80.236642][ T6172] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 510 with error 28 [ 80.236795][ T4205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.249193][ T6172] EXT4-fs (loop7): This should not happen!! Data will be lost [ 80.249193][ T6172] [ 80.267860][ T6172] EXT4-fs (loop7): Total free blocks count 0 [ 80.273927][ T6172] EXT4-fs (loop7): Free/Dirty block details [ 80.279827][ T6172] EXT4-fs (loop7): free_blocks=2415919104 [ 80.285596][ T6172] EXT4-fs (loop7): dirty_blocks=512 [ 80.291300][ T6172] EXT4-fs (loop7): Block reservation details [ 80.297305][ T6172] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 80.372353][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 80.429351][ T6187] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.879'. [ 80.438656][ T6187] net_ratelimit: 37 callbacks suppressed [ 80.438673][ T6187] netlink: zone id is out of range [ 80.449516][ T6187] netlink: zone id is out of range [ 80.461486][ T6187] netlink: zone id is out of range [ 80.474501][ T6187] netlink: zone id is out of range [ 80.486510][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 80.497801][ T5693] tipc: Subscription rejected, illegal request [ 80.508654][ T6199] netlink: 'syz.7.882': attribute type 1 has an invalid length. [ 80.527304][ T6187] netlink: zone id is out of range [ 80.533926][ T6187] netlink: zone id is out of range [ 80.539559][ T6187] netlink: zone id is out of range [ 80.539707][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.884'. [ 80.545249][ T6187] netlink: zone id is out of range [ 80.559104][ T6187] netlink: zone id is out of range [ 80.617586][ T6187] netlink: zone id is out of range [ 80.671048][ T6190] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 80.744204][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.6.888'. [ 80.774904][ T6211] ªªªªªª: renamed from wg2 (while UP) [ 80.782035][ T6211] FAULT_INJECTION: forcing a failure. [ 80.782035][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 80.794799][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.6.888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.794830][ T6211] Tainted: [W]=WARN [ 80.794836][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.794847][ T6211] Call Trace: [ 80.794852][ T6211] [ 80.794858][ T6211] __dump_stack+0x1d/0x30 [ 80.794944][ T6211] dump_stack_lvl+0xe8/0x140 [ 80.794966][ T6211] dump_stack+0x15/0x1b [ 80.794987][ T6211] should_fail_ex+0x265/0x280 [ 80.795008][ T6211] should_failslab+0x8c/0xb0 [ 80.795055][ T6211] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 80.795083][ T6211] ? device_rename+0x82/0x180 [ 80.795111][ T6211] kstrdup+0x3e/0xd0 [ 80.795129][ T6211] device_rename+0x82/0x180 [ 80.795230][ T6211] netif_change_name+0x1d7/0x720 [ 80.795267][ T6211] dev_change_name+0xc0/0x170 [ 80.795297][ T6211] dev_ifsioc+0x302/0xaa0 [ 80.795322][ T6211] ? mutex_lock+0x58/0x90 [ 80.795349][ T6211] dev_ioctl+0x4a7/0x960 [ 80.795380][ T6211] sock_do_ioctl+0x197/0x220 [ 80.795421][ T6211] sock_ioctl+0x41b/0x610 [ 80.795520][ T6211] ? __pfx_sock_ioctl+0x10/0x10 [ 80.795597][ T6211] __se_sys_ioctl+0xce/0x140 [ 80.795707][ T6211] __x64_sys_ioctl+0x43/0x50 [ 80.795732][ T6211] x64_sys_call+0x14b0/0x3000 [ 80.795803][ T6211] do_syscall_64+0xd8/0x2a0 [ 80.795833][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.795855][ T6211] RIP: 0033:0x7f4edc12f749 [ 80.795871][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.795889][ T6211] RSP: 002b:00007f4edab97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.795982][ T6211] RAX: ffffffffffffffda RBX: 00007f4edc385fa0 RCX: 00007f4edc12f749 [ 80.795995][ T6211] RDX: 0000200000000140 RSI: 0000000000008923 RDI: 000000000000000c [ 80.796083][ T6211] RBP: 00007f4edab97090 R08: 0000000000000000 R09: 0000000000000000 [ 80.796096][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.796108][ T6211] R13: 00007f4edc386038 R14: 00007f4edc385fa0 R15: 00007ffc4fae3c78 [ 80.796123][ T6211] [ 81.025523][ T6203] loop7: detected capacity change from 0 to 512 [ 81.038076][ T6203] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.885: iget: bad extra_isize 90 (inode size 256) [ 81.052782][ T6203] EXT4-fs (loop7): Remounting filesystem read-only [ 81.059948][ T6203] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 81.069993][ T6203] EXT4-fs (loop7): 1 orphan inode deleted [ 81.077945][ T6225] wireguard0: entered promiscuous mode [ 81.083481][ T6225] wireguard0: entered allmulticast mode [ 81.089660][ T6203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.158879][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.207435][ T6240] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.897'. [ 81.226638][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 81.244986][ T6245] FAULT_INJECTION: forcing a failure. [ 81.244986][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 81.257736][ T6245] CPU: 1 UID: 0 PID: 6245 Comm: syz.5.899 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.257765][ T6245] Tainted: [W]=WARN [ 81.257771][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.257783][ T6245] Call Trace: [ 81.257790][ T6245] [ 81.257797][ T6245] __dump_stack+0x1d/0x30 [ 81.257892][ T6245] dump_stack_lvl+0xe8/0x140 [ 81.257911][ T6245] dump_stack+0x15/0x1b [ 81.257953][ T6245] should_fail_ex+0x265/0x280 [ 81.257972][ T6245] should_failslab+0x8c/0xb0 [ 81.258047][ T6245] kmem_cache_alloc_noprof+0x69/0x4b0 [ 81.258105][ T6245] ? io_submit_one+0xb8/0x1280 [ 81.258197][ T6245] io_submit_one+0xb8/0x1280 [ 81.258258][ T6245] __se_sys_io_submit+0xfb/0x280 [ 81.258285][ T6245] __x64_sys_io_submit+0x43/0x50 [ 81.258447][ T6245] x64_sys_call+0x2e40/0x3000 [ 81.258467][ T6245] do_syscall_64+0xd8/0x2a0 [ 81.258581][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.258603][ T6245] RIP: 0033:0x7ff142cef749 [ 81.258639][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.258653][ T6245] RSP: 002b:00007ff141757038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 81.258709][ T6245] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142cef749 [ 81.258756][ T6245] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007ff142f1f000 [ 81.258769][ T6245] RBP: 00007ff141757090 R08: 0000000000000000 R09: 0000000000000000 [ 81.258781][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.258794][ T6245] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 81.258812][ T6245] [ 81.429546][ T6246] loop7: detected capacity change from 0 to 128 [ 81.522456][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'. [ 81.833513][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 81.851215][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 81.854978][ T6266] lo speed is unknown, defaulting to 1000 [ 81.876849][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 81.892883][ T6283] netlink: 'syz.5.912': attribute type 27 has an invalid length. [ 81.926880][ T3410] lo speed is unknown, defaulting to 1000 [ 81.972536][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 81.972546][ T29] audit: type=1400 audit(1765462216.456:4326): avc: denied { mount } for pid=6276 comm="syz.1.911" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.003044][ T29] audit: type=1400 audit(1765462216.486:4327): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.240514][ T29] audit: type=1400 audit(1765462216.716:4328): avc: denied { create } for pid=6304 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.277585][ T29] audit: type=1400 audit(1765462216.746:4329): avc: denied { shutdown } for pid=6304 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.328506][ T6312] loop5: detected capacity change from 0 to 512 [ 82.336625][ T29] audit: type=1326 audit(1765462216.816:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff142cef749 code=0x7ffc0000 [ 82.360586][ T6312] FAULT_INJECTION: forcing a failure. [ 82.360586][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 82.365044][ T29] audit: type=1326 audit(1765462216.836:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff142cedf90 code=0x7ffc0000 [ 82.373298][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.5.922 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.373432][ T6312] Tainted: [W]=WARN [ 82.373438][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.373461][ T6312] Call Trace: [ 82.373467][ T6312] [ 82.373475][ T6312] __dump_stack+0x1d/0x30 [ 82.373570][ T6312] dump_stack_lvl+0xe8/0x140 [ 82.373591][ T6312] dump_stack+0x15/0x1b [ 82.373653][ T6312] should_fail_ex+0x265/0x280 [ 82.373675][ T6312] should_failslab+0x8c/0xb0 [ 82.373747][ T6312] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 82.373773][ T6312] ? sidtab_sid2str_get+0xa0/0x130 [ 82.373810][ T6312] kmemdup_noprof+0x2b/0x70 [ 82.373829][ T6312] sidtab_sid2str_get+0xa0/0x130 [ 82.373870][ T6312] security_sid_to_context_core+0x1eb/0x2e0 [ 82.373899][ T6312] security_sid_to_context+0x27/0x40 [ 82.373977][ T6312] selinux_lsmprop_to_secctx+0x67/0xf0 [ 82.374006][ T6312] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 82.374028][ T6312] audit_log_subj_ctx+0xa4/0x3e0 [ 82.374075][ T6312] ? skb_put+0xa9/0xf0 [ 82.374177][ T6312] audit_log_task_context+0x48/0x70 [ 82.374205][ T6312] audit_log_task+0xf4/0x250 [ 82.374236][ T6312] ? kstrtouint+0x76/0xc0 [ 82.374255][ T6312] audit_seccomp+0x61/0x100 [ 82.374295][ T6312] ? __seccomp_filter+0x832/0x1260 [ 82.374322][ T6312] __seccomp_filter+0x843/0x1260 [ 82.374388][ T6312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.374416][ T6312] ? vfs_write+0x7e8/0x960 [ 82.374434][ T6312] ? __rcu_read_unlock+0x4f/0x70 [ 82.374454][ T6312] ? __fget_files+0x184/0x1c0 [ 82.374507][ T6312] __secure_computing+0x82/0x150 [ 82.374534][ T6312] syscall_trace_enter+0xcf/0x1e0 [ 82.374634][ T6312] do_syscall_64+0xb2/0x2a0 [ 82.374666][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.374687][ T6312] RIP: 0033:0x7ff142cef749 [ 82.374701][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.374734][ T6312] RSP: 002b:00007ff141757038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 82.374752][ T6312] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142cef749 [ 82.374764][ T6312] RDX: 00000000000000be RSI: 0000200000000400 RDI: 0000000000000003 [ 82.374777][ T6312] RBP: 00007ff141757090 R08: 0000000000000000 R09: 0000000000000000 [ 82.374811][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.374832][ T6312] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 82.374924][ T6312] [ 82.374933][ T6312] audit: error in audit_log_subj_ctx [ 82.396614][ T29] audit: type=1326 audit(1765462216.836:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff142cee1ff code=0x7ffc0000 [ 82.694787][ T29] audit: type=1326 audit(1765462216.836:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6311 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff142cef749 code=0x7ffc0000 [ 82.715853][ T29] audit: type=1326 audit(1765462216.896:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff142cee15c code=0x7ffc0000 [ 82.728180][ T6323] sctp: [Deprecated]: syz.6.926 (pid 6323) Use of int in max_burst socket option deprecated. [ 82.728180][ T6323] Use struct sctp_assoc_value instead [ 82.765372][ T6323] bridge0: entered promiscuous mode [ 82.801694][ T6334] FAULT_INJECTION: forcing a failure. [ 82.801694][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 82.814329][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.0.928 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.814358][ T6334] Tainted: [W]=WARN [ 82.814364][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.814375][ T6334] Call Trace: [ 82.814381][ T6334] [ 82.814389][ T6334] __dump_stack+0x1d/0x30 [ 82.814448][ T6334] dump_stack_lvl+0xe8/0x140 [ 82.814467][ T6334] dump_stack+0x15/0x1b [ 82.814551][ T6334] should_fail_ex+0x265/0x280 [ 82.814571][ T6334] should_failslab+0x8c/0xb0 [ 82.814590][ T6334] kmem_cache_alloc_noprof+0x69/0x4b0 [ 82.814609][ T6334] ? __send_signal_locked+0x154/0x760 [ 82.814680][ T6334] __send_signal_locked+0x154/0x760 [ 82.814700][ T6334] send_signal_locked+0x34e/0x3c0 [ 82.814720][ T6334] do_notify_parent_cldstop+0x23f/0x2a0 [ 82.814778][ T6334] do_signal_stop+0x4fc/0x5a0 [ 82.814801][ T6334] get_signal+0x71d/0xf70 [ 82.814827][ T6334] arch_do_signal_or_restart+0x96/0x450 [ 82.814930][ T6334] exit_to_user_mode_loop+0x6a/0x740 [ 82.814948][ T6334] ? __se_sys_ioctl+0x13a/0x140 [ 82.815003][ T6334] do_syscall_64+0x202/0x2a0 [ 82.815031][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.815049][ T6334] RIP: 0033:0x7f0a6db8f749 [ 82.815063][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.815120][ T6334] RSP: 002b:00007f0a6c5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.815137][ T6334] RAX: fffffffffffffe00 RBX: 00007f0a6dde6090 RCX: 00007f0a6db8f749 [ 82.815148][ T6334] RDX: 0000200000000000 RSI: 00000000402c542c RDI: 0000000000000003 [ 82.815158][ T6334] RBP: 00007f0a6c5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 82.815168][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.815179][ T6334] R13: 00007f0a6dde6128 R14: 00007f0a6dde6090 R15: 00007ffe478c5e48 [ 82.815234][ T6334] [ 83.111029][ T6338] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.179878][ T6336] loop7: detected capacity change from 0 to 128 [ 83.231060][ T6361] SELinux: failed to load policy [ 83.373938][ T6372] loop7: detected capacity change from 0 to 512 [ 83.374364][ T6372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.462640][ T6372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.462713][ T6372] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.509282][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.531068][ T6376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6376 comm=syz.6.939 [ 83.727033][ T6378] loop7: detected capacity change from 0 to 512 [ 83.739881][ T6378] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.941: iget: bad extra_isize 90 (inode size 256) [ 83.763863][ T6378] EXT4-fs (loop7): Remounting filesystem read-only [ 83.763984][ T6378] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 83.764020][ T6378] EXT4-fs (loop7): 1 orphan inode deleted [ 83.764607][ T6378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.895750][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.450178][ T6404] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 84.563540][ T6433] FAULT_INJECTION: forcing a failure. [ 84.563540][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.576738][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.7.960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.576766][ T6433] Tainted: [W]=WARN [ 84.576771][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.576810][ T6433] Call Trace: [ 84.576815][ T6433] [ 84.576822][ T6433] __dump_stack+0x1d/0x30 [ 84.576842][ T6433] dump_stack_lvl+0xe8/0x140 [ 84.576937][ T6433] dump_stack+0x15/0x1b [ 84.576978][ T6433] should_fail_ex+0x265/0x280 [ 84.576997][ T6433] should_fail+0xb/0x20 [ 84.577018][ T6433] should_fail_usercopy+0x1a/0x20 [ 84.577048][ T6433] _copy_from_iter+0xcf/0xe70 [ 84.577112][ T6433] ? skb_set_owner_w+0x19b/0x200 [ 84.577135][ T6433] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 84.577159][ T6433] skb_copy_datagram_from_iter+0xb1/0x490 [ 84.577187][ T6433] ? skb_put+0xa9/0xf0 [ 84.577212][ T6433] tun_get_user+0xafb/0x2670 [ 84.577283][ T6433] ? ref_tracker_alloc+0x1f2/0x2f0 [ 84.577304][ T6433] ? selinux_file_permission+0x1e2/0x320 [ 84.577330][ T6433] tun_chr_write_iter+0x15e/0x210 [ 84.577354][ T6433] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 84.577486][ T6433] vfs_write+0x52a/0x960 [ 84.577507][ T6433] ksys_write+0xda/0x1a0 [ 84.577551][ T6433] __x64_sys_write+0x40/0x50 [ 84.577571][ T6433] x64_sys_call+0x2847/0x3000 [ 84.577600][ T6433] do_syscall_64+0xd8/0x2a0 [ 84.577632][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.577690][ T6433] RIP: 0033:0x7fe7bbf2f749 [ 84.577742][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.577760][ T6433] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.577813][ T6433] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 84.577825][ T6433] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 84.577838][ T6433] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 84.577850][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.577862][ T6433] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 84.577944][ T6433] [ 85.050971][ T6454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6454 comm=syz.5.962 [ 85.203305][ T6458] netlink: 'syz.0.970': attribute type 4 has an invalid length. [ 85.338366][ T6456] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 85.473390][ T6466] __nla_validate_parse: 14 callbacks suppressed [ 85.473406][ T6466] netlink: 64 bytes leftover after parsing attributes in process `syz.7.973'. [ 85.569244][ T6466] loop7: detected capacity change from 0 to 512 [ 85.576977][ T6466] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 85.589307][ T6466] EXT4-fs (loop7): 1 truncate cleaned up [ 85.595483][ T6466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.614905][ T6462] loop6: detected capacity change from 0 to 512 [ 85.631510][ T6462] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.972: iget: bad extra_isize 90 (inode size 256) [ 85.675377][ T6462] EXT4-fs (loop6): Remounting filesystem read-only [ 85.690929][ T6462] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 85.730201][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.740843][ T6462] EXT4-fs (loop6): 1 orphan inode deleted [ 85.747042][ T6462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.916241][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.980'. [ 86.063444][ T5175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.179526][ T6491] loop7: detected capacity change from 0 to 512 [ 86.187812][ T6491] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.976: error while reading EA inode 32 err=-116 [ 86.200434][ T6491] EXT4-fs (loop7): Remounting filesystem read-only [ 86.207266][ T6491] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 86.217945][ T6491] EXT4-fs (loop7): 1 orphan inode deleted [ 86.224224][ T6491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.253949][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.331961][ T6494] loop5: detected capacity change from 0 to 128 [ 86.563878][ T6506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.987'. [ 86.629210][ T6516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6516 comm=syz.7.988 [ 86.669336][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.992'. [ 86.803606][ T6520] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.812981][ T6520] net_ratelimit: 93 callbacks suppressed [ 86.812995][ T6520] netlink: zone id is out of range [ 86.823882][ T6520] netlink: zone id is out of range [ 86.860971][ T6520] netlink: zone id is out of range [ 86.879876][ T6520] netlink: zone id is out of range [ 86.890169][ T6520] netlink: zone id is out of range [ 86.906238][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.925415][ T6520] netlink: zone id is out of range [ 86.940726][ T6520] netlink: zone id is out of range [ 86.952569][ T6520] netlink: zone id is out of range [ 86.957710][ T6520] netlink: zone id is out of range [ 86.989117][ T6531] loop5: detected capacity change from 0 to 256 [ 87.000718][ T6520] netlink: zone id is out of range [ 87.009628][ T6531] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.071720][ T6531] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.201655][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 87.201667][ T29] audit: type=1326 audit(1765462221.686:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.235671][ T29] audit: type=1326 audit(1765462221.716:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.259071][ T29] audit: type=1326 audit(1765462221.716:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.282487][ T29] audit: type=1326 audit(1765462221.716:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.305832][ T29] audit: type=1326 audit(1765462221.716:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.329339][ T29] audit: type=1326 audit(1765462221.716:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.352660][ T29] audit: type=1326 audit(1765462221.716:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.377002][ T29] audit: type=1326 audit(1765462221.716:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.400406][ T29] audit: type=1326 audit(1765462221.716:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.423928][ T29] audit: type=1326 audit(1765462221.716:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.6.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4edc12f749 code=0x7ffc0000 [ 87.591306][ T6552] netem: change failed [ 87.630464][ T6558] FAULT_INJECTION: forcing a failure. [ 87.630464][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.643635][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.5.1002 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.643697][ T6558] Tainted: [W]=WARN [ 87.643703][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.643716][ T6558] Call Trace: [ 87.643724][ T6558] [ 87.643733][ T6558] __dump_stack+0x1d/0x30 [ 87.643797][ T6558] dump_stack_lvl+0xe8/0x140 [ 87.643879][ T6558] dump_stack+0x15/0x1b [ 87.643895][ T6558] should_fail_ex+0x265/0x280 [ 87.643982][ T6558] should_fail+0xb/0x20 [ 87.644003][ T6558] should_fail_usercopy+0x1a/0x20 [ 87.644053][ T6558] _copy_from_iter+0x21c/0xe70 [ 87.644079][ T6558] ? __build_skb_around+0x164/0x1c0 [ 87.644105][ T6558] ? __alloc_skb+0x3bb/0x4d0 [ 87.644128][ T6558] skb_copy_datagram_from_iter+0xb1/0x490 [ 87.644237][ T6558] ? __netdev_alloc_frag_align+0xd8/0x130 [ 87.644263][ T6558] tun_get_user+0xafb/0x2670 [ 87.644295][ T6558] ? ref_tracker_alloc+0x1f2/0x2f0 [ 87.644380][ T6558] tun_chr_write_iter+0x15e/0x210 [ 87.644402][ T6558] do_iter_readv_writev+0x4a1/0x540 [ 87.644427][ T6558] vfs_writev+0x2df/0x8b0 [ 87.644457][ T6558] do_writev+0xe7/0x210 [ 87.644569][ T6558] __x64_sys_writev+0x45/0x50 [ 87.644590][ T6558] x64_sys_call+0x1ba5/0x3000 [ 87.644614][ T6558] do_syscall_64+0xd8/0x2a0 [ 87.644647][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.644729][ T6558] RIP: 0033:0x7ff142cef749 [ 87.644745][ T6558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.644829][ T6558] RSP: 002b:00007ff141757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 87.644849][ T6558] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142cef749 [ 87.644861][ T6558] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 87.644873][ T6558] RBP: 00007ff141757090 R08: 0000000000000000 R09: 0000000000000000 [ 87.644885][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.644897][ T6558] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 87.644915][ T6558] [ 87.710593][ T6559] netlink: 'syz.6.1001': attribute type 4 has an invalid length. [ 87.843222][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1006'. [ 87.964197][ T6572] loop6: detected capacity change from 0 to 512 [ 87.964892][ T6572] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.991353][ T6572] EXT4-fs (loop6): 1 truncate cleaned up [ 88.028515][ T6572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.056480][ T5175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.067364][ T6571] loop5: detected capacity change from 0 to 128 [ 88.074181][ T6575] loop7: detected capacity change from 0 to 128 [ 88.238569][ T6586] FAULT_INJECTION: forcing a failure. [ 88.238569][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 88.251751][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.7.1012 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.251787][ T6586] Tainted: [W]=WARN [ 88.251794][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.251804][ T6586] Call Trace: [ 88.251811][ T6586] [ 88.251839][ T6586] __dump_stack+0x1d/0x30 [ 88.251865][ T6586] dump_stack_lvl+0xe8/0x140 [ 88.251921][ T6586] dump_stack+0x15/0x1b [ 88.251937][ T6586] should_fail_ex+0x265/0x280 [ 88.251990][ T6586] should_failslab+0x8c/0xb0 [ 88.252027][ T6586] __kmalloc_noprof+0xb9/0x5a0 [ 88.252062][ T6586] ? nf_tables_newrule+0xcf4/0x1660 [ 88.252172][ T6586] nf_tables_newrule+0xcf4/0x1660 [ 88.252209][ T6586] nfnetlink_rcv+0xbc9/0x16c0 [ 88.252326][ T6586] netlink_unicast+0x5c0/0x690 [ 88.252357][ T6586] netlink_sendmsg+0x58b/0x6b0 [ 88.252387][ T6586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.252453][ T6586] __sock_sendmsg+0x145/0x180 [ 88.252538][ T6586] ____sys_sendmsg+0x31e/0x4a0 [ 88.252613][ T6586] ___sys_sendmsg+0x17b/0x1d0 [ 88.252646][ T6586] __x64_sys_sendmsg+0xd4/0x160 [ 88.252707][ T6586] x64_sys_call+0x17ba/0x3000 [ 88.252729][ T6586] do_syscall_64+0xd8/0x2a0 [ 88.252757][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.252775][ T6586] RIP: 0033:0x7fe7bbf2f749 [ 88.252833][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.252849][ T6586] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.252927][ T6586] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 88.252938][ T6586] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 88.252948][ T6586] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 88.252959][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.252969][ T6586] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 88.253026][ T6586] [ 88.312143][ T6582] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.374150][ T6584] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.1011: iget: bad extra_isize 90 (inode size 256) [ 88.482230][ T6584] EXT4-fs (loop6): Remounting filesystem read-only [ 88.488817][ T6584] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 88.497858][ T6584] EXT4-fs (loop6): 1 orphan inode deleted [ 88.504092][ T6584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.518256][ T6582] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.563852][ T6582] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.578065][ T5175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.595555][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1017'. [ 88.606622][ T6582] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.623069][ T6612] set_capacity_and_notify: 1 callbacks suppressed [ 88.623082][ T6612] loop6: detected capacity change from 0 to 1024 [ 88.650226][ T6612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.672569][ T5693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.701360][ T5693] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.715112][ T5693] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.740266][ T5693] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.745054][ T6621] netlink: 'syz.0.1022': attribute type 4 has an invalid length. [ 88.824858][ T5175] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #15: comm syz-executor: corrupted xattr block 209: invalid header [ 88.824976][ T5175] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 88.908840][ T6364] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.916964][ T6629] FAULT_INJECTION: forcing a failure. [ 88.916964][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 88.916995][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.0.1025 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.917021][ T6629] Tainted: [W]=WARN [ 88.917026][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.917037][ T6629] Call Trace: [ 88.917042][ T6629] [ 88.917048][ T6629] __dump_stack+0x1d/0x30 [ 88.917115][ T6629] dump_stack_lvl+0xe8/0x140 [ 88.917133][ T6629] dump_stack+0x15/0x1b [ 88.917149][ T6629] should_fail_ex+0x265/0x280 [ 88.917172][ T6629] should_failslab+0x8c/0xb0 [ 88.917197][ T6629] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 88.917225][ T6629] ? sidtab_sid2str_get+0xa0/0x130 [ 88.917313][ T6629] kmemdup_noprof+0x2b/0x70 [ 88.917328][ T6629] sidtab_sid2str_get+0xa0/0x130 [ 88.917353][ T6629] security_sid_to_context_core+0x1eb/0x2e0 [ 88.917526][ T6629] security_sid_to_context+0x27/0x40 [ 88.917588][ T6629] selinux_lsmprop_to_secctx+0x67/0xf0 [ 88.917619][ T6629] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 88.917649][ T6629] audit_log_subj_ctx+0xa4/0x3e0 [ 88.917668][ T6629] ? skb_put+0xa9/0xf0 [ 88.917688][ T6629] audit_log_task_context+0x48/0x70 [ 88.917706][ T6629] audit_log_task+0xf4/0x250 [ 88.917778][ T6629] ? kstrtouint+0x76/0xc0 [ 88.917846][ T6629] audit_seccomp+0x61/0x100 [ 88.917992][ T6629] ? __seccomp_filter+0x832/0x1260 [ 88.918014][ T6629] __seccomp_filter+0x843/0x1260 [ 88.918093][ T6629] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.918134][ T6629] ? vfs_write+0x7e8/0x960 [ 88.918155][ T6629] ? __cond_resched+0x4e/0x90 [ 88.918175][ T6629] __secure_computing+0x82/0x150 [ 88.918198][ T6629] syscall_trace_enter+0xcf/0x1e0 [ 88.918280][ T6629] do_syscall_64+0xb2/0x2a0 [ 88.918368][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.918386][ T6629] RIP: 0033:0x7f0a6db8f749 [ 88.918400][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.918468][ T6629] RSP: 002b:00007f0a6c5ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 88.918488][ T6629] RAX: ffffffffffffffda RBX: 00007f0a6dde5fa0 RCX: 00007f0a6db8f749 [ 88.918502][ T6629] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000040 [ 88.918515][ T6629] RBP: 00007f0a6c5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 88.918527][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.918537][ T6629] R13: 00007f0a6dde6038 R14: 00007f0a6dde5fa0 R15: 00007ffe478c5e48 [ 88.918609][ T6629] [ 89.057448][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1029'. [ 89.162789][ T6644] debugfs: 'ptm0' already exists in 'caif_serial' [ 89.176226][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.191173][ T6644] loop7: detected capacity change from 0 to 512 [ 89.192019][ T6644] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 89.193332][ T6644] EXT4-fs (loop7): 1 truncate cleaned up [ 89.193655][ T6644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.204260][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.226348][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.249391][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.316514][ T6652] FAULT_INJECTION: forcing a failure. [ 89.316514][ T6652] name failslab, interval 1, probability 0, space 0, times 0 [ 89.451669][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.7.1035 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.451699][ T6652] Tainted: [W]=WARN [ 89.451843][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.451855][ T6652] Call Trace: [ 89.451863][ T6652] [ 89.451871][ T6652] __dump_stack+0x1d/0x30 [ 89.451895][ T6652] dump_stack_lvl+0xe8/0x140 [ 89.452013][ T6652] dump_stack+0x15/0x1b [ 89.452030][ T6652] should_fail_ex+0x265/0x280 [ 89.452054][ T6652] should_failslab+0x8c/0xb0 [ 89.452179][ T6652] kmem_cache_alloc_noprof+0x69/0x4b0 [ 89.452200][ T6652] ? audit_log_start+0x342/0x720 [ 89.452222][ T6652] audit_log_start+0x342/0x720 [ 89.452291][ T6652] ? kstrtouint+0x76/0xc0 [ 89.452327][ T6652] audit_seccomp+0x48/0x100 [ 89.452427][ T6652] ? __seccomp_filter+0x832/0x1260 [ 89.452453][ T6652] __seccomp_filter+0x843/0x1260 [ 89.452479][ T6652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.452569][ T6652] ? vfs_write+0x7e8/0x960 [ 89.452591][ T6652] ? __cond_resched+0x4e/0x90 [ 89.452615][ T6652] __secure_computing+0x82/0x150 [ 89.452651][ T6652] syscall_trace_enter+0xcf/0x1e0 [ 89.452754][ T6652] do_syscall_64+0xb2/0x2a0 [ 89.452785][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.452811][ T6652] RIP: 0033:0x7fe7bbf2f749 [ 89.452826][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.452843][ T6652] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.452861][ T6652] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 89.452873][ T6652] RDX: 0000000000000004 RSI: 0000000000004c81 RDI: 0000000000000007 [ 89.452885][ T6652] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 89.452896][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.452967][ T6652] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 89.452984][ T6652] [ 89.542478][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.687570][ T6653] lo speed is unknown, defaulting to 1000 [ 89.786033][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1041'. [ 89.806474][ T6674] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 89.894927][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.905214][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.916406][ T31] bond0 (unregistering): Released all slaves [ 89.960955][ T31] hsr_slave_0: left promiscuous mode [ 89.976923][ T31] hsr_slave_1: left promiscuous mode [ 89.991553][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.999048][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.045548][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.052995][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.109087][ T31] veth1_macvtap: left promiscuous mode [ 90.109181][ T31] veth0_macvtap: left promiscuous mode [ 90.109323][ T31] veth1_vlan: left promiscuous mode [ 90.109350][ T31] veth0_vlan: left promiscuous mode [ 90.247536][ T31] team0 (unregistering): Port device team_slave_1 removed [ 90.255622][ T31] team0 (unregistering): Port device team_slave_0 removed [ 90.305732][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 90.374373][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.374490][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.374568][ T6653] bridge_slave_0: entered allmulticast mode [ 90.375161][ T6653] bridge_slave_0: entered promiscuous mode [ 90.416048][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.416213][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.416329][ T6653] bridge_slave_1: entered allmulticast mode [ 90.416837][ T6653] bridge_slave_1: entered promiscuous mode [ 90.477820][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.488686][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.507460][ T6653] team0: Port device team_slave_0 added [ 90.508791][ T6653] team0: Port device team_slave_1 added [ 90.513046][ T5693] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.551966][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.551980][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.552005][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.559854][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.602995][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.607614][ T6724] __nla_validate_parse: 5 callbacks suppressed [ 90.607629][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 90.629008][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.684825][ T6653] hsr_slave_0: entered promiscuous mode [ 90.685443][ T6653] hsr_slave_1: entered promiscuous mode [ 90.685783][ T6653] debugfs: 'hsr0' already exists in 'hsr' [ 90.685795][ T6653] Cannot create hsr debugfs directory [ 90.746355][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 90.761655][ T6728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6728 comm=syz.5.1057 [ 90.867844][ T6653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 90.880122][ T6653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 90.892863][ T6653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 90.903735][ T6746] IPv6: sit1: Disabled Multicast RS [ 90.911772][ T6653] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 90.926854][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.934010][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.941322][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.948360][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.978566][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.983187][ T6744] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.1062'. [ 90.989997][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.995660][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 91.013958][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.029900][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.059098][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.066192][ T5693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.091218][ T6653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.101781][ T6653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.116970][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.124205][ T5693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.135031][ T6766] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 91.166870][ T6772] loop7: detected capacity change from 0 to 2048 [ 91.180687][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.182645][ T6772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.214949][ T6772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.217606][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1070'. [ 91.250738][ T6772] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 5: comm syz.7.1069: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 91.271654][ T6772] EXT4-fs (loop7): Remounting filesystem read-only [ 91.278710][ T6772] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1069'. [ 91.295293][ T6772] hsr_slave_0: left promiscuous mode [ 91.301570][ T6772] hsr_slave_1: left promiscuous mode [ 91.342642][ T6772] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.359057][ T6653] veth0_vlan: entered promiscuous mode [ 91.366184][ T6772] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1069'. [ 91.367262][ T6653] veth1_vlan: entered promiscuous mode [ 91.389413][ T6653] veth0_macvtap: entered promiscuous mode [ 91.395263][ T6772] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.396718][ T6653] veth1_macvtap: entered promiscuous mode [ 91.414289][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.425676][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.436992][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.449013][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.462304][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.474233][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.486410][ T5692] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.519677][ T6807] loop8: detected capacity change from 0 to 512 [ 91.554395][ T6807] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 91.556618][ T6807] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1033: invalid indirect mapped block 4294967295 (level 0) [ 91.556843][ T6807] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1033: invalid indirect mapped block 4294967295 (level 1) [ 91.557153][ T6807] EXT4-fs (loop8): 1 orphan inode deleted [ 91.557169][ T6807] EXT4-fs (loop8): 1 truncate cleaned up [ 91.557662][ T6807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.569883][ T6807] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 91.594377][ T6653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.674552][ T6814] netlink: 131740 bytes leftover after parsing attributes in process `syz.8.1077'. [ 91.689039][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1077'. [ 91.689066][ T6814] bridge_slave_1: left allmulticast mode [ 91.689079][ T6814] bridge_slave_1: left promiscuous mode [ 91.689287][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.704392][ T6814] bridge_slave_0: left allmulticast mode [ 91.722651][ T6814] bridge_slave_0: left promiscuous mode [ 91.728457][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.756868][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1080'. [ 91.875487][ T6834] FAULT_INJECTION: forcing a failure. [ 91.875487][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.875521][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.5.1084 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.875553][ T6834] Tainted: [W]=WARN [ 91.875559][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.875621][ T6834] Call Trace: [ 91.875626][ T6834] [ 91.875633][ T6834] __dump_stack+0x1d/0x30 [ 91.875658][ T6834] dump_stack_lvl+0xe8/0x140 [ 91.875681][ T6834] dump_stack+0x15/0x1b [ 91.875701][ T6834] should_fail_ex+0x265/0x280 [ 91.875723][ T6834] should_fail+0xb/0x20 [ 91.875788][ T6834] should_fail_usercopy+0x1a/0x20 [ 91.875813][ T6834] copy_fpstate_to_sigframe+0x628/0x7d0 [ 91.875839][ T6834] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 91.875868][ T6834] ? kmem_cache_free+0xe3/0x3a0 [ 91.875906][ T6834] ? x86_task_fpu+0x36/0x60 [ 91.875925][ T6834] get_sigframe+0x34d/0x490 [ 91.875972][ T6834] ? get_signal+0xdc7/0xf70 [ 91.876003][ T6834] x64_setup_rt_frame+0xa8/0x580 [ 91.876029][ T6834] arch_do_signal_or_restart+0x24c/0x450 [ 91.876095][ T6834] irqentry_exit+0xfb/0x560 [ 91.876131][ T6834] asm_exc_page_fault+0x26/0x30 [ 91.876221][ T6834] RIP: 0033:0x7ff142bae637 [ 91.876236][ T6834] Code: 00 00 00 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 8b 4c 24 f0 48 8b 54 24 e8 48 8b 74 24 e0 8b 41 40 23 81 00 01 00 00 0f 6f 06 c1 e0 06 48 01 d0 0f 11 00 f3 0f 6f 4e 10 0f 11 48 10 [ 91.876253][ T6834] RSP: 002b:00007ff141757028 EFLAGS: 00010246 [ 91.876268][ T6834] RAX: 0000000000000000 RBX: 00007ff142f45fa0 RCX: 0000200000ff9000 [ 91.876281][ T6834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000ff9000 [ 91.876293][ T6834] RBP: 00007ff141757090 R08: 0000000000000000 R09: 0000000000000000 [ 91.876325][ T6834] R10: 0000200000ff9000 R11: 0000000000000000 R12: 0000000000000001 [ 91.876337][ T6834] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 91.876354][ T6834] [ 92.358984][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 92.358997][ T29] audit: type=1326 audit(1765462226.836:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.411214][ T29] audit: type=1326 audit(1765462226.886:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.434685][ T29] audit: type=1326 audit(1765462226.886:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.458099][ T29] audit: type=1326 audit(1765462226.886:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.481501][ T29] audit: type=1326 audit(1765462226.886:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.504946][ T29] audit: type=1326 audit(1765462226.886:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.528680][ T29] audit: type=1326 audit(1765462226.886:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.532524][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.552344][ T29] audit: type=1326 audit(1765462226.886:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.560397][ T3577] Bluetooth: hci0: command 0x1003 tx timeout [ 92.581959][ T29] audit: type=1326 audit(1765462226.886:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.611523][ T29] audit: type=1326 audit(1765462226.886:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe333a5f749 code=0x7ffc0000 [ 92.706019][ T6852] loop7: detected capacity change from 0 to 128 [ 93.046772][ T6867] loop7: detected capacity change from 0 to 512 [ 93.061340][ T6867] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1096: iget: bad extra_isize 90 (inode size 256) [ 93.061495][ T6867] EXT4-fs (loop7): Remounting filesystem read-only [ 93.061542][ T6867] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 93.061566][ T6867] EXT4-fs (loop7): 1 orphan inode deleted [ 93.061969][ T6867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.172759][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.187558][ T6882] netlink: 'syz.0.1099': attribute type 39 has an invalid length. [ 93.214072][ T6884] loop7: detected capacity change from 0 to 512 [ 93.216303][ T6884] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.1100: EA inode hash validation failed [ 93.233208][ T6884] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.1100: corrupted inode contents [ 93.246762][ T6884] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.1100: mark_inode_dirty error [ 93.261449][ T6884] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.1100: corrupted inode contents [ 93.261638][ T6884] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.1100: mark_inode_dirty error [ 93.261782][ T6884] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.1100: mark inode dirty (error -117) [ 93.261963][ T6884] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 93.307143][ T6884] EXT4-fs (loop7): 1 orphan inode deleted [ 93.313391][ T6884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.339079][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.533831][ T6890] loop7: detected capacity change from 0 to 128 [ 93.745003][ T6902] loop8: detected capacity change from 0 to 512 [ 93.791244][ T6902] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1108: bg 0: block 248: padding at end of block bitmap is not set [ 93.827757][ T6915] netlink: 'syz.7.1113': attribute type 39 has an invalid length. [ 93.856603][ T6902] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.1108: Failed to acquire dquot type 1 [ 93.874837][ T6902] EXT4-fs (loop8): 1 truncate cleaned up [ 93.880976][ T6902] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.881146][ T6902] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.918384][ T6653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.973631][ T6930] ªªªªªª: renamed from wg2 (while UP) [ 93.979217][ T6930] FAULT_INJECTION: forcing a failure. [ 93.979217][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 93.991850][ T6930] CPU: 1 UID: 0 PID: 6930 Comm: syz.7.1117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.991925][ T6930] Tainted: [W]=WARN [ 93.991932][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.991951][ T6930] Call Trace: [ 93.991958][ T6930] [ 93.991967][ T6930] __dump_stack+0x1d/0x30 [ 93.991989][ T6930] dump_stack_lvl+0xe8/0x140 [ 93.992008][ T6930] dump_stack+0x15/0x1b [ 93.992039][ T6930] should_fail_ex+0x265/0x280 [ 93.992059][ T6930] should_failslab+0x8c/0xb0 [ 93.992175][ T6930] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 93.992230][ T6930] ? kstrdup_const+0x3e/0x50 [ 93.992315][ T6930] kstrdup+0x3e/0xd0 [ 93.992333][ T6930] kstrdup_const+0x3e/0x50 [ 93.992349][ T6930] kernfs_rename_ns+0x22c/0x410 [ 93.992377][ T6930] sysfs_rename_link_ns+0xfc/0x120 [ 93.992433][ T6930] device_rename+0xd2/0x180 [ 93.992529][ T6930] netif_change_name+0x1d7/0x720 [ 93.992566][ T6930] dev_change_name+0xc0/0x170 [ 93.992633][ T6930] dev_ifsioc+0x302/0xaa0 [ 93.992664][ T6930] ? mutex_lock+0x58/0x90 [ 93.992724][ T6930] dev_ioctl+0x4a7/0x960 [ 93.992825][ T6930] sock_do_ioctl+0x197/0x220 [ 93.992906][ T6930] sock_ioctl+0x41b/0x610 [ 93.992958][ T6930] ? __pfx_sock_ioctl+0x10/0x10 [ 93.993038][ T6930] __se_sys_ioctl+0xce/0x140 [ 93.993065][ T6930] __x64_sys_ioctl+0x43/0x50 [ 93.993105][ T6930] x64_sys_call+0x14b0/0x3000 [ 93.993182][ T6930] do_syscall_64+0xd8/0x2a0 [ 93.993273][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.993296][ T6930] RIP: 0033:0x7fe7bbf2f749 [ 93.993357][ T6930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.993429][ T6930] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.993450][ T6930] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 93.993463][ T6930] RDX: 0000200000000140 RSI: 0000000000008923 RDI: 0000000000000008 [ 93.993476][ T6930] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 93.993488][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.993502][ T6930] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 93.993519][ T6930] [ 93.997461][ T6931] loop8: detected capacity change from 0 to 128 [ 94.241558][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.241558][ T6931] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 94.258075][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.258075][ T6931] loop8: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 94.272046][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.272046][ T6931] loop8: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 94.285763][ T6931] Buffer I/O error on dev loop8, logical block 75, lost async page write [ 94.304147][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.304147][ T6931] loop8: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 94.317866][ T6931] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 94.420607][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.420607][ T6931] loop8: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 94.421029][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.421029][ T6931] loop8: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 94.447891][ T6931] Buffer I/O error on dev loop8, logical block 87, lost async page write [ 94.486677][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.486677][ T6931] loop8: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 94.486707][ T6931] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 94.486976][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.486976][ T6931] loop8: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 94.487260][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.487260][ T6931] loop8: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 94.487339][ T6931] Buffer I/O error on dev loop8, logical block 91, lost async page write [ 94.487357][ T6931] syz.8.1115: attempt to access beyond end of device [ 94.487357][ T6931] loop8: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 94.487424][ T6931] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 94.487999][ T6931] Buffer I/O error on dev loop8, logical block 103, lost async page write [ 94.488054][ T6931] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 94.491095][ T6931] Buffer I/O error on dev loop8, logical block 119, lost async page write [ 94.491117][ T6931] Buffer I/O error on dev loop8, logical block 120, lost async page write [ 94.579124][ T6948] loop7: detected capacity change from 0 to 128 [ 94.826987][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.827046][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.055444][ T6982] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 95.074876][ T6982] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 95.077989][ T6973] loop8: detected capacity change from 0 to 512 [ 95.096951][ T6973] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.1129: iget: bad extra_isize 90 (inode size 256) [ 95.097153][ T6973] EXT4-fs (loop8): Remounting filesystem read-only [ 95.097196][ T6973] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 95.097218][ T6973] EXT4-fs (loop8): 1 orphan inode deleted [ 95.097660][ T6973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.187928][ T6985] FAULT_INJECTION: forcing a failure. [ 95.187928][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 95.187961][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.5.1132 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.187993][ T6985] Tainted: [W]=WARN [ 95.188001][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.188080][ T6985] Call Trace: [ 95.188086][ T6985] [ 95.188092][ T6985] __dump_stack+0x1d/0x30 [ 95.188177][ T6985] dump_stack_lvl+0xe8/0x140 [ 95.188227][ T6985] dump_stack+0x15/0x1b [ 95.188247][ T6985] should_fail_ex+0x265/0x280 [ 95.188272][ T6985] should_failslab+0x8c/0xb0 [ 95.188295][ T6985] __kmalloc_cache_noprof+0x65/0x4c0 [ 95.188380][ T6985] ? tipc_nametbl_lookup_group+0x451/0x630 [ 95.188429][ T6985] tipc_nametbl_lookup_group+0x451/0x630 [ 95.188457][ T6985] __tipc_sendmsg+0x878/0x1b10 [ 95.188559][ T6985] ? obj_cgroup_charge_account+0x122/0x1a0 [ 95.188587][ T6985] ? __rcu_read_unlock+0x4f/0x70 [ 95.188647][ T6985] ? avc_has_perm_noaudit+0xab/0x130 [ 95.188666][ T6985] ? __rcu_read_unlock+0x4f/0x70 [ 95.188683][ T6985] __tipc_sendstream+0xa1e/0xb20 [ 95.188711][ T6985] ? _raw_spin_lock_bh+0x56/0xb0 [ 95.188734][ T6985] ? _raw_spin_unlock_bh+0x36/0x40 [ 95.188761][ T6985] tipc_send_packet+0x65/0x80 [ 95.188790][ T6985] ? __pfx_tipc_send_packet+0x10/0x10 [ 95.188827][ T6985] __sock_sendmsg+0x145/0x180 [ 95.188865][ T6985] ____sys_sendmsg+0x31e/0x4a0 [ 95.188893][ T6985] ___sys_sendmsg+0x17b/0x1d0 [ 95.188993][ T6985] __x64_sys_sendmsg+0xd4/0x160 [ 95.189049][ T6985] x64_sys_call+0x17ba/0x3000 [ 95.189073][ T6985] do_syscall_64+0xd8/0x2a0 [ 95.189104][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.189124][ T6985] RIP: 0033:0x7ff142cef749 [ 95.189139][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.189182][ T6985] RSP: 002b:00007ff141757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.189200][ T6985] RAX: ffffffffffffffda RBX: 00007ff142f45fa0 RCX: 00007ff142cef749 [ 95.189212][ T6985] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000004 [ 95.189224][ T6985] RBP: 00007ff141757090 R08: 0000000000000000 R09: 0000000000000000 [ 95.189235][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.189247][ T6985] R13: 00007ff142f46038 R14: 00007ff142f45fa0 R15: 00007ffc8736b2d8 [ 95.189289][ T6985] [ 95.216780][ T6653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.560192][ T6991] loop8: detected capacity change from 0 to 128 [ 95.628736][ T7002] __nla_validate_parse: 4 callbacks suppressed [ 95.628750][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 95.646313][ T6992] loop7: detected capacity change from 0 to 128 [ 95.681624][ T6991] loop8: detected capacity change from 0 to 512 [ 95.691891][ T6991] EXT4-fs: Ignoring removed oldalloc option [ 95.700459][ T6991] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 95.716804][ T6991] EXT4-fs (loop8): 1 truncate cleaned up [ 95.723331][ T6991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.782725][ T6991] EXT4-fs warning (device loop8): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 95.794541][ T6991] EXT4-fs warning (device loop8): ext4_group_extend:1891: can't read last block, resize aborted [ 95.876628][ T6653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.901934][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 96.171278][ T7019] loop7: detected capacity change from 0 to 512 [ 96.183290][ T7019] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1143: iget: bad extra_isize 90 (inode size 256) [ 96.183719][ T7019] EXT4-fs (loop7): Remounting filesystem read-only [ 96.183836][ T7019] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 96.213268][ T7019] EXT4-fs (loop7): 1 orphan inode deleted [ 96.213643][ T7019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.276340][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.336632][ T7040] lo speed is unknown, defaulting to 1000 [ 96.406199][ T7044] loop7: detected capacity change from 0 to 512 [ 96.407068][ T7044] EXT4-fs: quotafile must be on filesystem root [ 96.423816][ T7044] netlink: 'syz.7.1149': attribute type 21 has an invalid length. [ 96.423941][ T7044] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1149'. [ 96.423984][ T7044] netlink: 'syz.7.1149': attribute type 4 has an invalid length. [ 96.739923][ T7050] loop7: detected capacity change from 0 to 128 [ 96.791570][ T7063] FAULT_INJECTION: forcing a failure. [ 96.791570][ T7063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.791603][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.1.1154 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.791635][ T7063] Tainted: [W]=WARN [ 96.791687][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.791700][ T7063] Call Trace: [ 96.791705][ T7063] [ 96.791711][ T7063] __dump_stack+0x1d/0x30 [ 96.791731][ T7063] dump_stack_lvl+0xe8/0x140 [ 96.791842][ T7063] dump_stack+0x15/0x1b [ 96.791858][ T7063] should_fail_ex+0x265/0x280 [ 96.791878][ T7063] should_fail+0xb/0x20 [ 96.791974][ T7063] should_fail_usercopy+0x1a/0x20 [ 96.791999][ T7063] _copy_from_user+0x1c/0xb0 [ 96.792022][ T7063] packet_setsockopt+0x76e/0xfd0 [ 96.792039][ T7063] ? __pfx_packet_setsockopt+0x10/0x10 [ 96.792096][ T7063] __sys_setsockopt+0x184/0x200 [ 96.792119][ T7063] __x64_sys_setsockopt+0x64/0x80 [ 96.792154][ T7063] x64_sys_call+0x21d5/0x3000 [ 96.792179][ T7063] do_syscall_64+0xd8/0x2a0 [ 96.792203][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.792222][ T7063] RIP: 0033:0x7fe333a5f749 [ 96.792285][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.792303][ T7063] RSP: 002b:00007fe3324bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.792320][ T7063] RAX: ffffffffffffffda RBX: 00007fe333cb5fa0 RCX: 00007fe333a5f749 [ 96.792331][ T7063] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 96.792343][ T7063] RBP: 00007fe3324bf090 R08: 0000000000000010 R09: 0000000000000000 [ 96.792354][ T7063] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 96.792421][ T7063] R13: 00007fe333cb6038 R14: 00007fe333cb5fa0 R15: 00007ffddc4aa348 [ 96.792435][ T7063] [ 96.880095][ T7073] 9p: Bad value for 'wfdno' [ 96.919507][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 97.107576][ T7091] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.107638][ T7090] FAULT_INJECTION: forcing a failure. [ 97.107638][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.130307][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.0.1162 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.130343][ T7090] Tainted: [W]=WARN [ 97.130351][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.130364][ T7090] Call Trace: [ 97.130371][ T7090] [ 97.130379][ T7090] __dump_stack+0x1d/0x30 [ 97.130404][ T7090] dump_stack_lvl+0xe8/0x140 [ 97.130457][ T7090] dump_stack+0x15/0x1b [ 97.130477][ T7090] should_fail_ex+0x265/0x280 [ 97.130551][ T7090] should_fail+0xb/0x20 [ 97.130568][ T7090] should_fail_usercopy+0x1a/0x20 [ 97.130591][ T7090] _copy_from_user+0x1c/0xb0 [ 97.130618][ T7090] __sys_bpf+0x183/0x7c0 [ 97.130651][ T7090] __x64_sys_bpf+0x41/0x50 [ 97.130715][ T7090] x64_sys_call+0x28e1/0x3000 [ 97.130773][ T7090] do_syscall_64+0xd8/0x2a0 [ 97.130834][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.130854][ T7090] RIP: 0033:0x7f0a6db8f749 [ 97.130868][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.130886][ T7090] RSP: 002b:00007f0a6c5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.130905][ T7090] RAX: ffffffffffffffda RBX: 00007f0a6dde5fa0 RCX: 00007f0a6db8f749 [ 97.130920][ T7090] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 97.130932][ T7090] RBP: 00007f0a6c5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 97.130943][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.130994][ T7090] R13: 00007f0a6dde6038 R14: 00007f0a6dde5fa0 R15: 00007ffe478c5e48 [ 97.131013][ T7090] [ 97.300715][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.324532][ T7091] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 97.357858][ T7091] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1164: bg 0: block 248: padding at end of block bitmap is not set [ 97.372664][ T7091] __quota_error: 177 callbacks suppressed [ 97.372677][ T7091] Quota error (device loop7): write_blk: dquota write failed [ 97.385815][ T7091] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 97.395732][ T7091] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1164: Failed to acquire dquot type 1 [ 97.414659][ T7091] EXT4-fs (loop7): 1 truncate cleaned up [ 97.421554][ T7101] FAULT_INJECTION: forcing a failure. [ 97.421554][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 97.434386][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.0.1167 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.434416][ T7101] Tainted: [W]=WARN [ 97.434423][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.434436][ T7101] Call Trace: [ 97.434443][ T7101] [ 97.434460][ T7101] __dump_stack+0x1d/0x30 [ 97.434485][ T7101] dump_stack_lvl+0xe8/0x140 [ 97.434506][ T7101] dump_stack+0x15/0x1b [ 97.434522][ T7101] should_fail_ex+0x265/0x280 [ 97.434589][ T7101] should_failslab+0x8c/0xb0 [ 97.434630][ T7101] kmem_cache_alloc_noprof+0x69/0x4b0 [ 97.434653][ T7101] ? getname_flags+0x80/0x3b0 [ 97.434680][ T7101] getname_flags+0x80/0x3b0 [ 97.434708][ T7101] user_path_at+0x28/0x130 [ 97.434760][ T7101] __se_sys_mount+0x25b/0x2e0 [ 97.434782][ T7101] ? fput+0x8f/0xc0 [ 97.434811][ T7101] __x64_sys_mount+0x67/0x80 [ 97.434863][ T7101] x64_sys_call+0x2cca/0x3000 [ 97.434889][ T7101] do_syscall_64+0xd8/0x2a0 [ 97.434977][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.434995][ T7101] RIP: 0033:0x7f0a6db8f749 [ 97.435007][ T7101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.435026][ T7101] RSP: 002b:00007f0a6c5ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.435044][ T7101] RAX: ffffffffffffffda RBX: 00007f0a6dde5fa0 RCX: 00007f0a6db8f749 [ 97.435133][ T7101] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 97.435145][ T7101] RBP: 00007f0a6c5ef090 R08: 0000200000000600 R09: 0000000000000000 [ 97.435158][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.435169][ T7101] R13: 00007f0a6dde6038 R14: 00007f0a6dde5fa0 R15: 00007ffe478c5e48 [ 97.435185][ T7101] [ 97.436218][ T7091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 97.630723][ T7106] 9p: Bad value for 'rfdno' [ 97.636632][ T29] audit: type=1326 audit(1765462232.116:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.660141][ T29] audit: type=1326 audit(1765462232.116:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.683578][ T29] audit: type=1326 audit(1765462232.116:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.707023][ T29] audit: type=1326 audit(1765462232.116:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.730503][ T29] audit: type=1326 audit(1765462232.116:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.753916][ T29] audit: type=1326 audit(1765462232.116:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.771381][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 97.777306][ T29] audit: type=1326 audit(1765462232.116:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.777341][ T29] audit: type=1326 audit(1765462232.116:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.8.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310dbf749 code=0x7ffc0000 [ 97.787859][ T7106] 9p: Bad value for 'rfdno' [ 97.811512][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 97.874477][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.887808][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.895979][ T7122] FAULT_INJECTION: forcing a failure. [ 97.895979][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 97.908782][ T7122] CPU: 0 UID: 0 PID: 7122 Comm: syz.0.1174 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.908888][ T7122] Tainted: [W]=WARN [ 97.908895][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.908940][ T7122] Call Trace: [ 97.908946][ T7122] [ 97.908953][ T7122] __dump_stack+0x1d/0x30 [ 97.908978][ T7122] dump_stack_lvl+0xe8/0x140 [ 97.908997][ T7122] dump_stack+0x15/0x1b [ 97.909015][ T7122] should_fail_ex+0x265/0x280 [ 97.909045][ T7122] should_failslab+0x8c/0xb0 [ 97.909066][ T7122] kmem_cache_alloc_noprof+0x69/0x4b0 [ 97.909088][ T7122] ? getname_flags+0x80/0x3b0 [ 97.909111][ T7122] getname_flags+0x80/0x3b0 [ 97.909145][ T7122] user_path_at+0x28/0x130 [ 97.909170][ T7122] do_faccessat+0x380/0x800 [ 97.909242][ T7122] __x64_sys_faccessat+0x41/0x50 [ 97.909294][ T7122] x64_sys_call+0x88a/0x3000 [ 97.909337][ T7122] do_syscall_64+0xd8/0x2a0 [ 97.909440][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.909461][ T7122] RIP: 0033:0x7f0a6db8f749 [ 97.909475][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.909491][ T7122] RSP: 002b:00007f0a6c5ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 97.909530][ T7122] RAX: ffffffffffffffda RBX: 00007f0a6dde5fa0 RCX: 00007f0a6db8f749 [ 97.909557][ T7122] RDX: 0000000000000005 RSI: 0000200000000000 RDI: ffffffffffffffff [ 97.909593][ T7122] RBP: 00007f0a6c5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 97.909604][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.909615][ T7122] R13: 00007f0a6dde6038 R14: 00007f0a6dde5fa0 R15: 00007ffe478c5e48 [ 97.909642][ T7122] [ 98.095548][ T7124] lo speed is unknown, defaulting to 1000 [ 98.126339][ T7129] netlink: 'syz.0.1177': attribute type 30 has an invalid length. [ 98.567921][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 98.684904][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1186'. [ 98.789556][ T7169] FAULT_INJECTION: forcing a failure. [ 98.789556][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.802658][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.7.1190 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.802687][ T7169] Tainted: [W]=WARN [ 98.802693][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.802705][ T7169] Call Trace: [ 98.802712][ T7169] [ 98.802755][ T7169] __dump_stack+0x1d/0x30 [ 98.802779][ T7169] dump_stack_lvl+0xe8/0x140 [ 98.802798][ T7169] dump_stack+0x15/0x1b [ 98.802819][ T7169] should_fail_ex+0x265/0x280 [ 98.802873][ T7169] should_fail+0xb/0x20 [ 98.802889][ T7169] should_fail_usercopy+0x1a/0x20 [ 98.802943][ T7169] _copy_from_user+0x1c/0xb0 [ 98.802971][ T7169] ___sys_sendmsg+0xc1/0x1d0 [ 98.803035][ T7169] __x64_sys_sendmsg+0xd4/0x160 [ 98.803077][ T7169] x64_sys_call+0x17ba/0x3000 [ 98.803103][ T7169] do_syscall_64+0xd8/0x2a0 [ 98.803130][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.803147][ T7169] RIP: 0033:0x7fe7bbf2f749 [ 98.803160][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.803220][ T7169] RSP: 002b:00007fe7ba997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.803240][ T7169] RAX: ffffffffffffffda RBX: 00007fe7bc185fa0 RCX: 00007fe7bbf2f749 [ 98.803253][ T7169] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 98.803263][ T7169] RBP: 00007fe7ba997090 R08: 0000000000000000 R09: 0000000000000000 [ 98.803273][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.803362][ T7169] R13: 00007fe7bc186038 R14: 00007fe7bc185fa0 R15: 00007fffcb208c18 [ 98.803382][ T7169] [ 99.008674][ T7164] set_capacity_and_notify: 3 callbacks suppressed [ 99.008692][ T7164] loop8: detected capacity change from 0 to 128 [ 99.222991][ T7187] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1198'. [ 99.313563][ T7193] FAULT_INJECTION: forcing a failure. [ 99.313563][ T7193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.326711][ T7193] CPU: 1 UID: 0 PID: 7193 Comm: syz.0.1200 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.326782][ T7193] Tainted: [W]=WARN [ 99.326789][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.326803][ T7193] Call Trace: [ 99.326809][ T7193] [ 99.326817][ T7193] __dump_stack+0x1d/0x30 [ 99.326909][ T7193] dump_stack_lvl+0xe8/0x140 [ 99.326927][ T7193] dump_stack+0x15/0x1b [ 99.326945][ T7193] should_fail_ex+0x265/0x280 [ 99.326987][ T7193] should_fail+0xb/0x20 [ 99.327038][ T7193] should_fail_usercopy+0x1a/0x20 [ 99.327059][ T7193] strncpy_from_user+0x27/0x260 [ 99.327117][ T7193] path_setxattrat+0xeb/0x310 [ 99.327154][ T7193] __x64_sys_fsetxattr+0x6b/0x80 [ 99.327180][ T7193] x64_sys_call+0x23c4/0x3000 [ 99.327247][ T7193] do_syscall_64+0xd8/0x2a0 [ 99.327281][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.327298][ T7193] RIP: 0033:0x7f0a6db8f749 [ 99.327386][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.327405][ T7193] RSP: 002b:00007f0a6c5ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 99.327425][ T7193] RAX: ffffffffffffffda RBX: 00007f0a6dde5fa0 RCX: 00007f0a6db8f749 [ 99.327438][ T7193] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 99.327451][ T7193] RBP: 00007f0a6c5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 99.327462][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.327472][ T7193] R13: 00007f0a6dde6038 R14: 00007f0a6dde5fa0 R15: 00007ffe478c5e48 [ 99.327547][ T7193] [ 99.504015][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 99.520304][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.547512][ T7182] loop7: detected capacity change from 0 to 128 [ 99.565619][ T7204] FAULT_INJECTION: forcing a failure. [ 99.565619][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.578826][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.8.1204 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.578923][ T7204] Tainted: [W]=WARN [ 99.578938][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.578950][ T7204] Call Trace: [ 99.578955][ T7204] [ 99.578962][ T7204] __dump_stack+0x1d/0x30 [ 99.578984][ T7204] dump_stack_lvl+0xe8/0x140 [ 99.579083][ T7204] dump_stack+0x15/0x1b [ 99.579100][ T7204] should_fail_ex+0x265/0x280 [ 99.579121][ T7204] should_fail+0xb/0x20 [ 99.579143][ T7204] should_fail_usercopy+0x1a/0x20 [ 99.579165][ T7204] _copy_from_user+0x1c/0xb0 [ 99.579189][ T7204] __sys_connect+0xd0/0x2b0 [ 99.579289][ T7204] __x64_sys_connect+0x3f/0x50 [ 99.579326][ T7204] x64_sys_call+0x2e09/0x3000 [ 99.579347][ T7204] do_syscall_64+0xd8/0x2a0 [ 99.579430][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.579449][ T7204] RIP: 0033:0x7f2310dbf749 [ 99.579464][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.579479][ T7204] RSP: 002b:00007f230f81f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 99.579497][ T7204] RAX: ffffffffffffffda RBX: 00007f2311015fa0 RCX: 00007f2310dbf749 [ 99.579508][ T7204] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 99.579566][ T7204] RBP: 00007f230f81f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.579577][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.579587][ T7204] R13: 00007f2311016038 R14: 00007f2311015fa0 R15: 00007ffd2776f128 [ 99.579604][ T7204] [ 99.751778][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'. [ 99.955481][ T7214] loop8: detected capacity change from 0 to 128 [ 100.028823][ T7230] FAULT_INJECTION: forcing a failure. [ 100.028823][ T7230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.041969][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.8.1213 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.042037][ T7230] Tainted: [W]=WARN [ 100.042044][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.042057][ T7230] Call Trace: [ 100.042064][ T7230] [ 100.042073][ T7230] __dump_stack+0x1d/0x30 [ 100.042154][ T7230] dump_stack_lvl+0xe8/0x140 [ 100.042177][ T7230] dump_stack+0x15/0x1b [ 100.042197][ T7230] should_fail_ex+0x265/0x280 [ 100.042267][ T7230] should_fail+0xb/0x20 [ 100.042286][ T7230] should_fail_usercopy+0x1a/0x20 [ 100.042309][ T7230] _copy_from_user+0x1c/0xb0 [ 100.042337][ T7230] do_sock_getsockopt+0xf1/0x210 [ 100.042414][ T7230] __x64_sys_getsockopt+0x11e/0x1a0 [ 100.042438][ T7230] x64_sys_call+0x2dc7/0x3000 [ 100.042463][ T7230] do_syscall_64+0xd8/0x2a0 [ 100.042571][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.042591][ T7230] RIP: 0033:0x7f2310dbf749 [ 100.042604][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.042706][ T7230] RSP: 002b:00007f230f81f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 100.042725][ T7230] RAX: ffffffffffffffda RBX: 00007f2311015fa0 RCX: 00007f2310dbf749 [ 100.042781][ T7230] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 100.042793][ T7230] RBP: 00007f230f81f090 R08: 0000200000000080 R09: 0000000000000000 [ 100.042806][ T7230] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 100.042819][ T7230] R13: 00007f2311016038 R14: 00007f2311015fa0 R15: 00007ffd2776f128 [ 100.042837][ T7230] [ 100.241421][ T7235] FAULT_INJECTION: forcing a failure. [ 100.241421][ T7235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.254522][ T7235] CPU: 0 UID: 0 PID: 7235 Comm: syz.1.1215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.254603][ T7235] Tainted: [W]=WARN [ 100.254610][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.254621][ T7235] Call Trace: [ 100.254628][ T7235] [ 100.254634][ T7235] __dump_stack+0x1d/0x30 [ 100.254669][ T7235] dump_stack_lvl+0xe8/0x140 [ 100.254748][ T7235] dump_stack+0x15/0x1b [ 100.254769][ T7235] should_fail_ex+0x265/0x280 [ 100.254790][ T7235] should_fail+0xb/0x20 [ 100.254805][ T7235] should_fail_usercopy+0x1a/0x20 [ 100.254868][ T7235] strncpy_from_user+0x27/0x260 [ 100.254952][ T7235] path_setxattrat+0xeb/0x310 [ 100.255053][ T7235] __x64_sys_fsetxattr+0x6b/0x80 [ 100.255078][ T7235] x64_sys_call+0x23c4/0x3000 [ 100.255100][ T7235] do_syscall_64+0xd8/0x2a0 [ 100.255164][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.255185][ T7235] RIP: 0033:0x7fe333a5f749 [ 100.255197][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.255293][ T7235] RSP: 002b:00007fe3324bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 100.255309][ T7235] RAX: ffffffffffffffda RBX: 00007fe333cb5fa0 RCX: 00007fe333a5f749 [ 100.255320][ T7235] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 100.255330][ T7235] RBP: 00007fe3324bf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.255343][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.255356][ T7235] R13: 00007fe333cb6038 R14: 00007fe333cb5fa0 R15: 00007ffddc4aa348 [ 100.255376][ T7235] [ 100.457816][ T7246] FAULT_INJECTION: forcing a failure. [ 100.457816][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.471022][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.1.1218 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.471104][ T7246] Tainted: [W]=WARN [ 100.471109][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.471120][ T7246] Call Trace: [ 100.471125][ T7246] [ 100.471132][ T7246] __dump_stack+0x1d/0x30 [ 100.471156][ T7246] dump_stack_lvl+0xe8/0x140 [ 100.471241][ T7246] dump_stack+0x15/0x1b [ 100.471259][ T7246] should_fail_ex+0x265/0x280 [ 100.471281][ T7246] should_fail+0xb/0x20 [ 100.471310][ T7246] should_fail_usercopy+0x1a/0x20 [ 100.471332][ T7246] _copy_from_user+0x1c/0xb0 [ 100.471409][ T7246] __sys_connect+0xd0/0x2b0 [ 100.471436][ T7246] __x64_sys_connect+0x3f/0x50 [ 100.471456][ T7246] x64_sys_call+0x2e09/0x3000 [ 100.471490][ T7246] do_syscall_64+0xd8/0x2a0 [ 100.471518][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.471539][ T7246] RIP: 0033:0x7fe333a5f749 [ 100.471553][ T7246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.471570][ T7246] RSP: 002b:00007fe3324bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 100.471657][ T7246] RAX: ffffffffffffffda RBX: 00007fe333cb5fa0 RCX: 00007fe333a5f749 [ 100.471668][ T7246] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005 [ 100.471679][ T7246] RBP: 00007fe3324bf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.471689][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.471699][ T7246] R13: 00007fe333cb6038 R14: 00007fe333cb5fa0 R15: 00007ffddc4aa348 [ 100.471715][ T7246] [ 100.655665][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1220'. [ 100.684094][ T7256] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1221'. [ 100.721526][ T7260] FAULT_INJECTION: forcing a failure. [ 100.721526][ T7260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.734614][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: syz.1.1223 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.734643][ T7260] Tainted: [W]=WARN [ 100.734649][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.734660][ T7260] Call Trace: [ 100.734666][ T7260] [ 100.734673][ T7260] __dump_stack+0x1d/0x30 [ 100.734738][ T7260] dump_stack_lvl+0xe8/0x140 [ 100.734756][ T7260] dump_stack+0x15/0x1b [ 100.734799][ T7260] should_fail_ex+0x265/0x280 [ 100.734821][ T7260] should_fail+0xb/0x20 [ 100.734839][ T7260] should_fail_usercopy+0x1a/0x20 [ 100.734861][ T7260] _copy_from_user+0x1c/0xb0 [ 100.734967][ T7260] __sys_bpf+0x183/0x7c0 [ 100.734990][ T7260] __x64_sys_bpf+0x41/0x50 [ 100.735005][ T7260] x64_sys_call+0x28e1/0x3000 [ 100.735025][ T7260] do_syscall_64+0xd8/0x2a0 [ 100.735088][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.735108][ T7260] RIP: 0033:0x7fe333a5f749 [ 100.735122][ T7260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.735139][ T7260] RSP: 002b:00007fe3324bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.735167][ T7260] RAX: ffffffffffffffda RBX: 00007fe333cb5fa0 RCX: 00007fe333a5f749 [ 100.735252][ T7260] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 100.735336][ T7260] RBP: 00007fe3324bf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.735348][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.735359][ T7260] R13: 00007fe333cb6038 R14: 00007fe333cb5fa0 R15: 00007ffddc4aa348 [ 100.735376][ T7260] [ 101.027086][ T7283] loop7: detected capacity change from 0 to 512 [ 101.044873][ T7283] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.044891][ T7283] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.044911][ T7285] FAULT_INJECTION: forcing a failure. [ 101.044911][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.044939][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.1.1231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.044965][ T7285] Tainted: [W]=WARN [ 101.044971][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.044984][ T7285] Call Trace: [ 101.044990][ T7285] [ 101.045049][ T7285] __dump_stack+0x1d/0x30 [ 101.045073][ T7285] dump_stack_lvl+0xe8/0x140 [ 101.045131][ T7285] dump_stack+0x15/0x1b [ 101.045148][ T7285] should_fail_ex+0x265/0x280 [ 101.045171][ T7285] should_fail+0xb/0x20 [ 101.045190][ T7285] should_fail_usercopy+0x1a/0x20 [ 101.045290][ T7285] _copy_from_user+0x1c/0xb0 [ 101.045319][ T7285] ___sys_sendmsg+0xc1/0x1d0 [ 101.045360][ T7285] __x64_sys_sendmsg+0xd4/0x160 [ 101.045389][ T7285] x64_sys_call+0x17ba/0x3000 [ 101.045417][ T7285] do_syscall_64+0xd8/0x2a0 [ 101.045476][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.045499][ T7285] RIP: 0033:0x7fe333a5f749 [ 101.045515][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.045565][ T7285] RSP: 002b:00007fe3324bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.045585][ T7285] RAX: ffffffffffffffda RBX: 00007fe333cb5fa0 RCX: 00007fe333a5f749 [ 101.045666][ T7285] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 101.045678][ T7285] RBP: 00007fe3324bf090 R08: 0000000000000000 R09: 0000000000000000 [ 101.045767][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.045780][ T7285] R13: 00007fe333cb6038 R14: 00007fe333cb5fa0 R15: 00007ffddc4aa348 [ 101.045796][ T7285] [ 101.058908][ T7283] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1230: Allocating blocks 41-42 which overlap fs metadata [ 101.059098][ T7283] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1230: Allocating blocks 41-42 which overlap fs metadata [ 101.059241][ T7283] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1230: Failed to acquire dquot type 1 [ 101.059387][ T7283] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.059549][ T7283] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1230: corrupted inode contents [ 101.059654][ T7283] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.1230: mark_inode_dirty error [ 101.059856][ T7283] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1230: corrupted inode contents [ 101.059978][ T7283] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.1230: mark_inode_dirty error [ 101.060114][ T7283] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1230: corrupted inode contents [ 101.060261][ T7283] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 101.060376][ T7283] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1230: corrupted inode contents [ 101.060452][ T7283] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.1230: mark_inode_dirty error [ 101.060599][ T7283] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 101.060872][ T7283] EXT4-fs (loop7): 1 truncate cleaned up [ 101.223350][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 101.229149][ T7283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.426745][ T7283] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.551372][ T7305] loop7: detected capacity change from 0 to 1024 [ 101.582353][ T7305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.597667][ T7308] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1236'. [ 101.597657][ T7305] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.597785][ T7305] ================================================================== [ 101.597812][ T7305] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 101.597847][ T7305] [ 101.597854][ T7305] write to 0xffffffff88ec4278 of 11 bytes by task 7308 on cpu 0: [ 101.597873][ T7305] vsnprintf+0x2ce/0x860 [ 101.597897][ T7305] vscnprintf+0x41/0x90 [ 101.597918][ T7305] printk_sprint+0x30/0x2d0 [ 101.597945][ T7305] vprintk_store+0x599/0x860 [ 101.597978][ T7305] vprintk_emit+0x15a/0x610 [ 101.598011][ T7305] vprintk_default+0x26/0x30 [ 101.598038][ T7305] vprintk+0x1d/0x30 [ 101.598057][ T7305] _printk+0x79/0xa0 [ 101.598070][ T7305] __nla_validate_parse+0x1738/0x1d00 [ 101.598094][ T7305] __nla_parse+0x40/0x60 [ 101.598120][ T7305] nfnetlink_rcv+0xb84/0x16c0 [ 101.598144][ T7305] netlink_unicast+0x5c0/0x690 [ 101.598166][ T7305] netlink_sendmsg+0x58b/0x6b0 [ 101.598210][ T7305] __sock_sendmsg+0x145/0x180 [ 101.598231][ T7305] ____sys_sendmsg+0x31e/0x4a0 [ 101.598258][ T7305] ___sys_sendmsg+0x17b/0x1d0 [ 101.598282][ T7305] __x64_sys_sendmsg+0xd4/0x160 [ 101.598312][ T7305] x64_sys_call+0x17ba/0x3000 [ 101.598340][ T7305] do_syscall_64+0xd8/0x2a0 [ 101.598375][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.598399][ T7305] [ 101.598406][ T7305] read to 0xffffffff88ec4278 of 8 bytes by task 7305 on cpu 1: [ 101.598422][ T7305] data_push_tail+0x100/0x470 [ 101.598451][ T7305] data_alloc+0x11b/0x390 [ 101.598476][ T7305] prb_reserve+0x964/0xb60 [ 101.598499][ T7305] vprintk_store+0x56d/0x860 [ 101.598525][ T7305] vprintk_emit+0x15a/0x610 [ 101.598556][ T7305] dev_vprintk_emit+0x242/0x2a0 [ 101.598577][ T7305] dev_printk_emit+0x84/0xb0 [ 101.598599][ T7305] __netdev_printk+0x34b/0x370 [ 101.598629][ T7305] netdev_info+0x9b/0xd0 [ 101.598659][ T7305] nsim_udp_tunnel_unset_port+0x190/0x1b0 [ 101.598683][ T7305] __udp_tunnel_nic_device_sync+0x567/0x9c0 [ 101.598712][ T7305] udp_tunnel_nic_flush+0x21b/0x300 [ 101.598749][ T7305] udp_tunnel_nic_netdevice_event+0x8c0/0xd70 [ 101.598784][ T7305] raw_notifier_call_chain+0x6f/0x1b0 [ 101.598813][ T7305] unregister_netdevice_many_notify+0xea0/0x16d0 [ 101.598844][ T7305] unregister_netdevice_queue+0x1b8/0x1e0 [ 101.598872][ T7305] nsim_destroy+0xfa/0x2f0 [ 101.598892][ T7305] __nsim_dev_port_del+0xcf/0x110 [ 101.598922][ T7305] nsim_dev_reload_destroy+0x1a3/0x2c0 [ 101.598949][ T7305] nsim_dev_reload_down+0x67/0x80 [ 101.598973][ T7305] devlink_reload+0xad/0x580 [ 101.598988][ T7305] devlink_nl_reload_doit+0x503/0x960 [ 101.599006][ T7305] genl_family_rcv_msg_doit+0x143/0x1b0 [ 101.599029][ T7305] genl_rcv_msg+0x422/0x460 [ 101.599048][ T7305] netlink_rcv_skb+0x123/0x220 [ 101.599081][ T7305] genl_rcv+0x28/0x40 [ 101.599102][ T7305] netlink_unicast+0x5c0/0x690 [ 101.599127][ T7305] netlink_sendmsg+0x58b/0x6b0 [ 101.599157][ T7305] __sock_sendmsg+0x145/0x180 [ 101.599184][ T7305] ____sys_sendmsg+0x31e/0x4a0 [ 101.599215][ T7305] ___sys_sendmsg+0x17b/0x1d0 [ 101.599239][ T7305] __x64_sys_sendmsg+0xd4/0x160 [ 101.599267][ T7305] x64_sys_call+0x17ba/0x3000 [ 101.599291][ T7305] do_syscall_64+0xd8/0x2a0 [ 101.599318][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.599337][ T7305] [ 101.599340][ T7305] value changed: 0x00000000ffffe917 -> 0x3a6b6e696c74656e [ 101.599351][ T7305] [ 101.599355][ T7305] Reported by Kernel Concurrency Sanitizer on: [ 101.599371][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.7.1235 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.599404][ T7305] Tainted: [W]=WARN [ 101.599412][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.599425][ T7305] ================================================================== [ 101.626306][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1237'. [ 101.673501][ T7305] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.064131][ T7305] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.114297][ T7305] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.177950][ T1657] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.194355][ T1657] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.214041][ T1657] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.230317][ T1657] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.279731][ T5471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.