last executing test programs: 10m45.55077996s ago: executing program 32 (id=127): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x101, 0x200000) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getresuid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000280)={[], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r2}}]}, 0x1, 0x502, &(0x7f0000000b00)="$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") 10m30.595689788s ago: executing program 33 (id=279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x8, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) creat(&(0x7f0000000100)='./file0\x00', 0x100) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75b, &(0x7f0000000d40)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r6, 0x0, 0x90) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) fadvise64(0xffffffffffffffff, 0x8000, 0x4101, 0x3) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x82301, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m25.624026507s ago: executing program 34 (id=324): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000050000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2ab, &(0x7f0000000540)="$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") r4 = open(&(0x7f0000000080)='./file0\x00', 0x145342, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x8, &(0x7f0000000500)={[{@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@adaptive_mode}, {@alloc_mode_def}, {@checkpoint_enable}, {@six_active_logs}, {@nodiscard}, {}, {@noacl}, {@adaptive_mode}, {@noinline_xattr}, {@noextent_cache}, {@nouser_xattr}, {@jqfmt_vfsold}, {@fastboot}, {@prjquota={'prjquota', 0x3d, '[+'}}, {@acl}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") 10m17.843076791s ago: executing program 35 (id=391): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f0000000500)=""/224, 0xe0}], 0x6, &(0x7f0000000680)=""/190, 0xbe}, 0xbc71f2426356fede) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}]}, 0x24}}, 0x4000800) 9m0.620549022s ago: executing program 36 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "f281d724"}, @main=@item_4={0x3, 0x0, 0xb, "90171f4e"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000000)="0f88a8", 0x3}], 0x2) 8m51.94519306s ago: executing program 37 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x375, 0x0, r0, 0x76c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x46, &(0x7f0000000780)=""/70, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000008c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r4, r0], &(0x7f00000009c0)=[{0x4, 0x2, 0xe, 0x8}], 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800d1e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") 8m1.911530817s ago: executing program 38 (id=1236): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xaaf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x0, 0x7, 0xa, 0x4, 0xffffffffffffffe0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@lx}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xb, 0x4, 0x81}, 0x10, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0xa000000, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x3, &(0x7f0000000680)=[r4], &(0x7f00000006c0)=[{0x1, 0x2, 0x10}, {0x1, 0x2, 0xa, 0x7}, {0x3, 0x1, 0xb, 0xa}], 0x10, 0x8}, 0x94) (async) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r3, r2, 0x3, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r6, r3, 0x4, r5}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000840)={0xa0000000}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x7fffffff, 0x10, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, {[@rr={0x7, 0xf, 0xa4, [@multicast2, @empty, @multicast2]}, @cipso={0x86, 0x38, 0x1, [{0x3, 0xf, "5cbd580f32f54818fe395a9c83"}, {0x2, 0x8, "16e5d3aa87d7"}, {0x2, 0x3, '/'}, {0x6, 0x3, 'o'}, {0x7, 0xd, "a2b9350e2d7efd8ddc00fe"}, {0x5, 0x8, "a703e8aa5424"}]}, @timestamp={0x44, 0x24, 0x1d, 0x0, 0xe, [0x8, 0x34, 0x6, 0x5, 0xd, 0xfffffff9, 0x7, 0x0]}, @timestamp_addr={0x44, 0x4c, 0xf8, 0x1, 0xd, [{@loopback, 0x8}, {@empty, 0x2}, {@empty, 0x1b6}, {@loopback, 0xcc0}, {@loopback, 0x6}, {@multicast2, 0xff}, {@private=0xa010101, 0xf5cb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010102}]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)=@ipmr_newroute={0xac, 0x18, 0x800, 0x70bd2a, 0x25dfdbfd, {0x80, 0x0, 0x80, 0x9, 0xfc, 0x3, 0xfe, 0x3, 0x2300}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_NH_ID={0x8, 0x1e, 0xe}, @RTA_OIF={0x8, 0x4, r8}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_FLOW={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_ENCAP={0x50, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x4c, 0x2, {0xc, 0x8, 0x4, 0x4, 0x7, 0x8, 0x1, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote, @mcast2]}}}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0xac}, 0x1, 0x0, 0x0, 0x2004000}, 0x10) (async) r9 = epoll_create1(0x0) (async) connect$802154_dgram(r2, &(0x7f0000000b40)={0x24, @long={0x3, 0xfffa, {0xaaaaaaaaaaaa0202}}}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000cc0)={0x1ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x6, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x1, 0x8, 0x3, 0x1, 0xfffffffffffffffe, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x22, &(0x7f0000000c00)=""/34, 0x41100, 0x2, '\x00', r8, @sock_ops, r2, 0x8, &(0x7f0000000c40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xc, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x6, 0x4, 0x9, 0x40000, r1, 0xfffff3ff, '\x00', r8, r2, 0x5, 0x3, 0x1, 0x2}, 0x50) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r2, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{0x1, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x8, 0x16, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x28, '\x00', r8, @fallback, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x0, 0x8, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001180)=[r4, r1, r1, r12, r0, r13, r14], &(0x7f00000011c0)=[{0x4, 0x4, 0x2}, {0x4, 0x5, 0xa, 0xd}, {0x5, 0x2, 0xd, 0x4}, {0x3, 0x5, 0xc, 0x9}], 0x10, 0x1ff}, 0x94) read$FUSE(r2, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_SETINFO(0x7fffffffc0000300, &(0x7f00000012c0)=@nbd={'/dev/nbd', 0x0}, r15, &(0x7f0000003340)={0x63, 0x4, 0x0, 0x6}) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r16 = add_key$user(&(0x7f0000003380), &(0x7f00000033c0)={'syz', 0x0}, &(0x7f0000003400)="5a20c993240359e2f7a4215b770bafd780c85f9a1d170208daa7cbfbb9ff4addba0eabb61a0bc3721b661eeee39b9dca07edbfcc418b668c77fbfcde5fbfec4331311a3f4d6967d8fb95f6ab432904a185a5f3c4122b3edfd464951ea3315d5ccef0bc9df98255177afa1a1fbcae0e69c8685f00ada420cf9a8ad9049d474ca9946728a2099d0ddf3827b20e3588333a38f10c5dca5a78f28f779229bdae64f73c74b7a3a5928bf095415ae7c8453fd4cb60d6076496e88facb44390342cb68cb85c4d4b56f20cfd9b4d767f972744bd20afe21109c39202872d6f29f34edc29a0ddf84dee848516fc7a9cd6c1571e47cdba3876057ef2292053ec5574833a11d464a566225a48974c253450e178a3825338e3517b99da4a07fdf85e8ea455f0ef381dad1883f455d8f1db4f34d26e093b26b7055daa511e939486642ba620a58e91020f284725e347a4a2678787d84d76a6c65ca5f57ddf2656d1c3cf59c8573bd867a49541ea1dc548e4e5173d3b625243ff55e3489de5421ec8afa24ea72e0105a53a9b421ee0e760e1c49c71812504eb77b9bb7f924c231c6fec32156cbb47a18cee67a0861783d85b84c0bf3b675810d8aff66e5ebeec696be25d0a778d80ca5757ef48b2859ff8c069b7d42070dbccd602502ec091b3191e253eba73250e52ccbc78c28fafe8dbd22681f1a806525addf894f3bd2877dd85dbd922470ecc76ee2f8ad9c30981047a433888af920f50b0124b8fd738ced9d8a8c041192d89cff517bf31a90894b71ab225a903c1ca3273da5c0e069d235b06fa0ee244ef2eead5227999d6c3d3ec4c4329c907774460d15a27f408dc22f37eb2e89ece336e4039ea60fed7748348b248cf7e3148209b7384bc974ac4c491439de5621af671fefa1961a7bab84b600dac4b3f18ae1cc1d1e7c501ce95dbe43e408488b4b3571e2ac42223588de219c8b31536b6f1613b659f1aa67f5b7c19f7ffb51d1c095815aed2314c86d8b9078827906c743ff6e0ca04fc10174d0f79fc5eb0037db4d8036fe09f5d0df9b9662853ae72f5ab171aaf9617f1b51f267b0490d4e5e8e47b0afe838a1fe3536ad2c54d2019f6136ea37e52c5726970bec594ae6fee1568ef5d9b0705588d738644596fcf05fe3add6be0feda5233303603e00d0101d3a39ec27f625fe1250218bf31c7512d2912a96660dba16bc2f717c042c0c763dbdbdbeac7f3b56f8b54015644602a8c20226b5191b5843b49df727ca740ec246e20813d488b08b0ed22b69fe1786f536c561c280457c4b2c54e4cd2c539536be4a7401ed1fa2eebe5163a7d4cc5c75cd52a591d7bcfb9a0037fe4b3dd970dde8ef2cac8dffbe104c345a360fe0f3cf0806f4d576b921ace31c8f782b72a76389a76459c1a66471af1ffadf03d98cf3229819f4fbd2b5f32aa301529525a691a2e3d4ca30917369d0838f78200c54f0f4d41f554b9f4f1e8ded0bcd6b4225897a777ddc5fb6d9b78f808687e2e4b83905ff134c55fec35c6ea418ca46a982a432b0c8da92859c16a011b0c082962ffa90826fe7cbb13551d0a9de09d9b0aea993bf6899796ebb4657544fb91037b4976f6ea2c8bfc13838ca85a2edafe05a144b9aaf2616851e62d44de968c2fcceaefe63953f518a59a0e4e107ebd9aef5ab4429b40f24b7df09b76993b9916ee025ae229081179f9ef36c7070ab83034639690436b9308dbce911587c896fbad153e26ae8d3d4d9c922bc987d6e7fde47257e7f26d4771cc39d5877d29052e026a8ee6b6371783e06815b0cce3eb31c12183e580a0ca14df4eb8bf8c4adddd68911f0c8f79b24323bdb6f88551ef81b5e36c19a657a326eb4078c198d744fe458eccd79d57a8caf77eb2c5078265dcdf4f004438f5a4a5ff4942bfa3a7b5f8180b20ee42273c403f4a778928971198fe48e88e8430fcff46333970756fa5ebbb24e1aca99907ea5c5d1dd6330a8f4073695fdee548c893026b10ff2f9e8749ce0b9f7f9715d26043a31a5e7ae2779a30cebd9385fcd2577786bf1066d0af85eb1c84c6ec01a1cdece9b2928d597d5add52dd36be13cf052e697a8ac95e4f185ac084b9fb95fc498c17177087036fd7e7d1845fa8ecd6c9554c7f4e7f27b75f6d37deae031b729e357eff24d350ef3e816e4e3627d50912b1cb4d2bea4a30b1f91ef6ae3f9e1b99cd805137a43f2875ea461f11d65859ad242880fb9ce550febea663db66fdc23540ba7241b81a8e6f747d29421d3a720f11126fb272f8bffeac127981e487b2cf0532f473d5cdf90f6132395d3be6315377dd53af81aa97d6e80e962983d8eaf1f12f11092c4c23c84453cb588a6f947485d455263fb239dbc303c95012aba8b4c8c855518cd4091f741136ac0c413e2b22ada5366b830cda99dad7e39201b8e5ad95915cf0046bba6f84577a4f84988c81515ef78d1f5cf9a45349c8634910e288bb11d4b8a35d54b99f7a2eab5dfd4e2fba5bf60713333cc2d7b8beb29d047b63639b90cc3cc1a7b9217a79eef566ef8fd0f5985f6d66de41dc50773e384f0201e8935536a37a64148faf3a19d3a6f7675f95d8003a3ad58a286dce9e14a5f54050f108d283e33471158d5649ae6f8f6f1641ef6abe4891d90364e07a34bd527727c33b965d29811f2ff8fa22ae9b921dbdf181bdb3aa62a1813ec9d7ed2955112dd6d801702c4db955273c8027fed53269f1a9e1714a6956102a68af323a8cf338995da8a48f182bc4480145b750a8fe0b88f9f841cc212b940079d349817d769936cdcd7c1c0b2281685b148f01fe18e60507cb95ef26de50310113566ef4ea9f2792011d60d06203312f112cdc124e99bb417340ed2c60591f12447dbd40f14919d5d87fae630a806b3dba84f57c02237402607cc2adc43de8667b90c252d9426382f1ddc744301f120e8b0e3e7d6b7b735cb485bbd5259948aacf161c330e7fd01cdc6f1222a70f8716ba75ddfa42c09e712f8ae2516c4fc39171bb4da40e6e3a153f59fcc9ff28398bb683466f1ec553ad85c60f22a015de37983d4869126ff596c1e52895a9c0921521309b4e7d912972bd526febf41d308e3a435d3f90a4aaa9c36fe1bee6805347a322424b9f62ea0c5667a23b2aa4462d88f88655daf37e5dc6f2512e5464f23b5f049df95bc948b77864530519b8abeb34fe80f22e2af03253ef5d337aa9a9bb71a8cbf4c840c566453af924d42c5344dabae1a5dba3ea48157c60613d96052c5382a9dfee967f8458e559483de263fd3e726aa311937f6406cb3631321cb837ea131c44a43839f1a24ed66b987ae876589cf0c6397d502b0012da7574a0c7f308cc644ced6976d8300fabd4fa5fcd3ab4bff0415ede506aaef1319c72e6c8b287d7aadc7503069983a6373da650a078c405864758b11b8950002b23b24f4ff80b3f35b0c9a748f5d1fcbbb3bd168f312ac625db9e6e99fbf5a186e0018173793da9d2cc55d29415670c01bac24a61ce7c6074ba73629e816a80e9c16b239e68dc248aa413cc743c117154f3af932ec9298959ae2631a24a28a5b10d5a41f42c1232d4b35c1fd4d1a49d58b444a41259eeab35be2c629e6d0bd45324e81c2d99fc2a63e0b0639ce38ae29e8bf63e0fd975d500207824644d0175f07cc9a53e788c4071838a179a4bfaf6f21582631dcb8d590706e3ccca3b0e021e396ecaa9faa235ae3f60f4bec46cee3e3acf94b20c71c50d5695063f4f57de73b654669c87bea93bf364d2e0b0e6709ef5da5b4c43424a2a831ed986f7774aea685db95f2b860282f1c3cb0ed00e0cd550bdfbfa1e0e2772432f99c32465e31f62c2452d49a608c1689b3de0c985d8f2f32fc513e4348a4ee13a90e8d46f64d600e3fcd61752c2d0927fc60f244779a389d7495a37a6258e9c13096235213906fdb441a94ff9c5d7d73f4fa3609c9790a52a8ad02f707072655807c99841855c3f3598ecb57b30f6d421176ef4d5ae107ec92e4ab69182803ed32fc063d6db10f3f0e8796fdd12ce5be9c1dcddb1547a0934759172760d329fad7a4aee3b582a6cbe2b1e8e74594dd047a83310760827f265c20f84b483da89e24b3cd441cc507bd0d4c0058e1ba5fbed158b9834b126b098b864dbfa294c4d87e437e77c1da2d011929237575f8ecfbb57ca28464db683e3452fb7c777c9bc6e14f60fe2e8824af085ef02eb73735fada671f33410b819c1907fe10897491f46eca88ebab67465d9f8779bbcdf66c4e4412a6b7aa7a27c5083749a1cd80a28449b506024729d56d927426676dbd557445cfe3332ddedc4144373d3161fa07646d94b9901237891279e040dd8433cc837ec1d31a442401e8a96666816efea6a36c098d875be707ca1679627da1c27930b486bd2d52acfc0861fb1a3f837c0f58c8b0b05826361d44b29a1a4a54bc08fbf824cee8b930c6f11d1850d3aa9177932e5163fe4c92c0f0f925c0baf18648bed7f2ec6b6e05846b9e0ae36db8f3b1e2051628c0d242df056d730f01b6cacd665222f31de6f3225342f5e20905f65729b8693d92b6486254d8c3fd2ed76b629b02dd963fe202251dea29161c8f9c90966ecf5c9d2a7c70c805e183e8a448baef1269c8efe58ac4fc0253cbae5e663849d6a39a1b5650fff35afaefa9d9fc9cef3536b5f6cf9c25a51d346508de81e05f107816417513fb009418d1adbd8873cb326a3d072f316a7563b823997262477581fc18c957a43231b60adb92be7826a3046e5df52184847c6fc9e3c4c69b93b9c6e7e8d0cdb2883022f6faa68d00f004430eba89c13088c5f1b58111418b01997881a8d73e7d34207fd87003e317e3991a1d9ebedf548f53d5a48ee8d2f5637bbaee304a2c7d3482e33508c49a9ea25e0fd2f14e1872e6265e84aa7fe4e0b5951af106a8908dbf15152bed379dd30ad1acf9609e15257ebe85c11f456c7009975ed011a2f4e9bf3269fa8207c6ef5b71ff284297af85860c5e4391267d7911292290e19aca129bee1535d941973b61edc67927fee6ce8f24464677671665b38e3ea624d47ee44b3df40d632c40148ccab62fbb575cf6a0140892295b225f7ce285bb45d87e758efa0ced63f18feea08b8828a3c3437f694a68ffbca91350fc70581a60951ef6e226f0862141821c0fd979ba1b06af9a03cc6750385c9094755da8fc9edcb14a5302a6328315551e0e706b4b9bed0b3065dd86e659ef0289bb5f9297a4eaa5d71ea5dd481230ab4c361802780b82f72875967dfd648c30a9e76b1ec02b177425c798b078cf0f2bfddcbdb9d9e9bfe9678edc3d660f87c91576292310e7bd30d61667e4467c00cba53ed18a3b4b7fa889455d4d4d683afb88d1608827e924ea8e9ae37f5d4547e13aef734c25aec88dec65dee4073edf37fe652a57041bee47591357f843654ec28900c65bc4e616d6a40225671a29f2b8d0aafb9a02ccd5c3cdceb5f58c8add93dd3e9f4c5eab3b634361915dd88bb267b838872f22340a143372c43558a98695b04031a70e013031449c0f5b559f0fd3726b10418ffb901aaa9aa7e5390de5d5145fb7b7d603be0e1bcfb6bad9dc05779c93907c7414f3914d721be862790857393ccfbde09cc67f3a537e6fc11cd8cc4ef5fcffeb58c9458f58a89d68a3f19d30ae3a79d949fc47fcfbb95e419a108a2d87453f62b1183d2d87fea4ad69e29facbe8046c1cfb701b039fc0c633f5ef62f10e9bfca8577fcdd1c38924601f2d99de6d133896601a7c0a4e97829dd3a28a6dffa6442de4f564d017b0ad13edcb", 0x1000, 0xfffffffffffffffd) (async) r17 = add_key$keyring(&(0x7f0000004400), &(0x7f0000004440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r16, r17, 0x0, 0x1) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000004480), 0x0, 0x0) 7m50.735667646s ago: executing program 39 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fallocate(r0, 0x40, 0x2, 0x3) 6m54.108160558s ago: executing program 40 (id=1871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 6m29.51957693s ago: executing program 41 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYRES16=r1], 0x4c}}, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x138, 0x15, 0x200, 0x70bd2c, 0x25dfdbfd, {0x28, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "fecee9d253dad15baa2e90670235e767a83f7574a6d79a203364e2ecac77e2f872d302705b5110555b5aaa2c57e2e6aca69b3544"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "d5624f71d9e3ee26f006a1c91a4ecc86ca253b5fe689f3d2c5564e656b13fbfa87d4bed616d7d049f937da57d431792f7917059f2bdf56b0494947207be4839300813ffeeb4b03c03e1048ec3b62aa6e31e7c7594302379af17c50ddae630f67c9fa5cb12a0ade0066e22530febda0b70d216408b5dee11146887f425dbb183b132349786d740c8e24af9bc9cb56c9535a5dba0f41238a7ae2faf2247b1d37232ef2fc7948126889449548ae9517f899f61efd8fabdd6a047165183591a82a49bebd635c5708591abe8a6817e5e79de7ddb2ea"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "4c45702c407489c1708247804ea7"}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x48044) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffff5, 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 6m25.666916691s ago: executing program 42 (id=2081): pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 6m25.539195214s ago: executing program 43 (id=2083): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.log\x00', 0x8000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pimreg1\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x1000020}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 4m49.575368803s ago: executing program 44 (id=2677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="64430f22408f4978836c5501660f38822d22225b9f66f266360f01df0f79cd8fe948977071b8010000000f01c1b9cb0a0000b805000000ba000000000f30653e0f060f00dd", 0x45}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="64430f22408f4978836c5501660f38822d22225b9f66f266360f01df0f79cd8fe948977071b8010000000f01c1b9cb0a0000b805000000ba000000000f30653e0f060f00dd", 0x45}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a0e000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000440)="66baf80cb8e899b08eef66bafc0ced360f01c3c74424003844fc54c7442402b9000000c7442406000000000f011c240f1fa4ab1cb100000fc72b66baa00066b87d5b66efb9800000c00f3235000400000f303e643e0f238fc4c10573f200b8010000000f01c1", 0x66}], 0x1, 0x2d, 0x0, 0x0) 2m33.052759423s ago: executing program 45 (id=4078): mkdir(0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a059f2b60d7460000010902240001000000000904000005030003000921000033012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000f570000005709a7ea3163fd3bc518194b12"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m32.784179068s ago: executing program 1 (id=4080): mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5318}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000010}, 0x10) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x807bff) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) setuid(0xee01) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd2d, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x800) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0x0, 0x40}}, @a_msdu}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x1) 2m32.496542622s ago: executing program 1 (id=4081): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_getevents(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2m32.392803293s ago: executing program 1 (id=4082): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f00000001c0), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e, r2}, 0x33) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r3, 0x0, 0x80000002}, 0x18) setresuid(0x0, 0x0, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) pwrite64(r0, &(0x7f0000000180)="f7", 0x1, 0x200980) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080)=0x81, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) 2m31.94417674s ago: executing program 1 (id=4084): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001873bbd21bf478c4b671eba78e3d0554c4394e39000001000000000c0000000c00009da8100000000000005e00e0fb1a00060025a0355dbaf28e901e0f90266b4269bb067d74c75f1a9b69b7fd0cef4042835d52f6b5b6d0e2dd4bb4761700f9c1560bc489a41c0b66"], &(0x7f00000031c0)=""/226, 0x2a, 0xe2, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ptrace$poke(0x1, r1, &(0x7f0000000000), 0x100000001) unshare(0x64000600) ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x8981, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000240)) 2m27.825797903s ago: executing program 1 (id=4110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000", @ANYRES16=0x0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500000000000000a6688a52d1c0f9c0e32582f22b02eee3dd6f3e151df9e697aa28d77fe0ce37a21f0aabb1d133d0335cc238914f61e59f4b54b921592472ee9ce5bfaa7296ac43fa591285f7e86d833547a08d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='9p_protocol_dump\x00', 0xfffffffffffffffe) read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18, 0x0, r3, {0xf8}}, 0x18) pipe2$9p(&(0x7f00000002c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m27.817545023s ago: executing program 1 (id=4113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x2}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x87142, 0x1bc) sendfile(r2, r2, 0x0, 0x7a680000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x2, 0x9, 0x2c080, r3, 0x1d3a, '\x00', r6, r2, 0x3, 0x3, 0x7, 0x3, @value=r2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003300)=ANY=[@ANYBLOB="889001d4c91ff5b69d6ed5fef98b818f2f92f4b723df0f21c7cdbf4ebb1874dc4a7f292ccd8a5166d5fba9d37daaa45912560fc3599ef29ed0adf744cd8e46ffe676bc34305bb1609065ee935c75350a3e81593a4ea0527ea5e5f6e141dc1234fa70d1a0953c6b90a63ae20777e0279ebc3a387d747f0a9262ceabcac10787973aa55f806433692ff5d2ef278ee36bfa6f8246ff5ab5159b831b766673640671", @ANYRES32=r7, @ANYRESOCT=r3, @ANYRES16=r5, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB="708cd523d6d94c7ac6db9098cf0d6aed2d5da80b54c54475088336f4939df6f7c1a4a747605d8f4e017340fca9d300033c830834bd1210788fd1f2ce255f705b074358c8feb853b704782dc06d33c4300fa73043bff0922e3755aa436f9c8cb277a67abb53764169bb2f2132100358dbd7cf453d86a84691b09eae2f93d3acb14e0e3935725e49b6fb2c14aa96e2a599", @ANYBLOB="c3acbfac6a3e4d0d8120284bad36c3afae7b0d5dba09c4159e878316237b814cbd32891dfb929abc2b026d79b2cb7adb2d81b2bc03535adc07beed84b04bde1fb4b9bc63d6e2bce27beffd50e59b1532661dd1615d2c7fa88d0a623a412ca4b110a71d75cfeaaa470516b589c964cf38f579dec73437f9", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r12, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc042004}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES8, @ANYBLOB="000326bd7000fedbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r14, 0x5403, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xe, 0x0, "00120dd608f500001e2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r15, 0x5412, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) sendmmsg$unix(r17, &(0x7f0000001f00)=[{{&(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="25b40d3e408d9b615108f17276f53aa64d9b68e45d08b55a4335bc83ea38dd84e3203af5e98cb99063b82a6c4cabeed310de441b7cbe2b4e522b46f2ccd7f4667b7e555890bb025db36a8aeecd0f9668c8126fe20295fcdc8c0b60211ff473fe595bd68353cd320586f8c80719ef4d457d37535d602c5f30ed92563cebc5f2e6983ec12fd49dd24c3cbb806eba7cea7a69091543170835b838740d255905de2c6a7b9636f239445b60d01385dcdc4792930ba365722a42c1f8120041c577717399f0", 0xc2}, {&(0x7f00000006c0)="3c1123d08aeabe11e086a113", 0xc}, {&(0x7f0000000700)="d814999ab46e36375c60fdd28326af9e1a33086cae8419d734e67b50b14dd3c119a762b2c6b23c752e004babc806a85b", 0x30}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000010000007da77034e9e40359ca053a5e7b751f86a1c09119f77700324d746c7a4afe2f383f588146a433d8d50454f8c30bc4a8148e2fa59ea3a763cb7ef6e7", @ANYRES32=r7, @ANYRES32=r15, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r12, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r10], 0x110, 0x20000000}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000e00)="177f540ab649b6bd71a967927389f8b6879d11f6bf6b8a8c0d4ffaf79de04786f2551483fb4cdd4a8a05cfb1601087581cccb1d5f3816d60df794ad83f9046790cb2e4d8661485e9d0156be0bfad6c9da1d76392", 0x54}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r17, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r16, @ANYRES32=r2, @ANYRES32, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="0001000001", @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r16, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r11, @ANYRES32], 0x138, 0x44}}, {{&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000011c0)="b4da8ef173d3b7c05f612806cae7aac906a86f057f9ae1598171aac5236f388a51079b276ca13d0175c0bb498e89daab8687658f028aeb97929dbe", 0x3b}, {&(0x7f0000001200)="06413072836210a046be2af35691c4df9b18b6e960a9e15b0ff541d8e3e9c998d30ea8579ac8285226eab960b97751973e5773a13339c4889f14442e94ef", 0x3e}], 0x2, &(0x7f0000001340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r18, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x24000040}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000014c0)="a19493fde2f1b0ec2de9fd94d305389de6f871c19fed4a416e74fa31101c760f8c100f4c581192169adcb80ad2d2bcc39fe1ab1041cf45e0975c398b22ed4eb2315bea19827245bacb4c3fbd1b60544cf4cb1787a13d5cf21ed9bb006cdf3413ee81685ea7fb407ef0e1e9ab7d911706f50e3ad0b78131167a772c", 0x7b}, {&(0x7f0000001540)="1eba7fc4d820ab72e95475e720ebeee627c780b51fa485317e226dd6185c505b6547c3695f1c71d834351b2c5cfe7ff01eee441b1a8223b87c1e8f1ea40d7265bcc8a81e80a772a72c10e62bae9782540e97063020a3a79a3dd560008854a478e04507058e62789c57f1571cec5f2a3abc0fb1191d1b7ad97d66cf285caa25a7d17329d334bcd8f599375087fdc75817d1278bb52b5ec7de90b451bfc09cb93132da79b82a7506d9ede2846d5b28ec", 0xaf}, {&(0x7f0000001600)="f094e5cc7bb7d640ae757130d4d42769d49e2f11e873339446fdcba650133edcaa07d13a8c6d296ffc1691ba1b0ebfc55827687ae74b19332efad499713a3cd29fd9cad9aaff6c2ae069f0dbcc287b", 0x4f}, {&(0x7f0000001680)="6eaf06a3d7b56d1cd081cb7137220ad11ef8407b84d5dabbb1e802e36750abce92d561640a29497f623f3f424b8ce3cbc66a6938ceaa5cbc4c80d90bf1ad1735f07067405b26df5a0ddfac10f59da28bba5abf8a8334d7bf76428252d7", 0x5d}, {&(0x7f0000001700)="bc75f48521e463af2a44a9d4d78166c8b53a3ae9b4c385781d7d244ebbd34feea0d307e4df306b2a7bedfacdd9a6df17cb377daadf40125b2c6daf81919c19f597ece77351ea62c25465b191a1234910b133b77db066e1cb52fc63ce0707015f8d2d5c61d5fb4f6d56d190489f82bf55a2fe13a100185655285d814d8ee0713e", 0x80}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r11, r8, r16, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r14, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x38, 0x1, 0x1, [r14, 0xffffffffffffffff, r17, r14, r3, 0xffffffffffffffff, 0xffffffffffffffff, r16, 0xffffffffffffffff, r16]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}], 0xd8, 0x800}}, {{&(0x7f0000001a80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b00)="444dc1611f6af44b5f0f8a5b39dffa9e1be1c9678d050aba7a3fd1311eaf550bf8e9eb15ef95307bbaf44eef5ce13daf82ee02f2d6d99b5f486002f07983aeac54dcb064a440b0c7c82efd3f0e48da2d79ac4b4838a0c5de1d47bbf201fba469e505b2b9e84ef9a2629588746dd1", 0x6e}, {&(0x7f0000001b80)="cdaa8934e5bf7fae9566e34be2eb80d4a5e9885384073a9f8cb3158d0e8b8adc50fdf5c39ea5702e96584b88cdef83", 0x2f}, {&(0x7f0000001bc0)="5e51ab704201ce66e5562dc5e0bb6fd45a60cc491ea497ad3204425542c9be34b65c2085c85e051acd82505e9bd9d4426a077a3b1e9f1b48e02e78045e300d36b8b21f835280821f07aa6b6680d823d96b3b6cf8f27e2ef9c7b638aa476de790fef4c9d96c7fac58429e8d0f41f26247a7e6ff77d83110a152a1b6b20b4be2095191359cdda4a3685da26a9e709dd227d8187fbfbfabafd6d8beb1", 0x9b}], 0x3, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r13, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110, 0x8000}}], 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.288384611s ago: executing program 46 (id=4113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x2}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x87142, 0x1bc) sendfile(r2, r2, 0x0, 0x7a680000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x2, 0x9, 0x2c080, r3, 0x1d3a, '\x00', r6, r2, 0x3, 0x3, 0x7, 0x3, @value=r2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003300)=ANY=[@ANYBLOB="889001d4c91ff5b69d6ed5fef98b818f2f92f4b723df0f21c7cdbf4ebb1874dc4a7f292ccd8a5166d5fba9d37daaa45912560fc3599ef29ed0adf744cd8e46ffe676bc34305bb1609065ee935c75350a3e81593a4ea0527ea5e5f6e141dc1234fa70d1a0953c6b90a63ae20777e0279ebc3a387d747f0a9262ceabcac10787973aa55f806433692ff5d2ef278ee36bfa6f8246ff5ab5159b831b766673640671", @ANYRES32=r7, @ANYRESOCT=r3, @ANYRES16=r5, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB="708cd523d6d94c7ac6db9098cf0d6aed2d5da80b54c54475088336f4939df6f7c1a4a747605d8f4e017340fca9d300033c830834bd1210788fd1f2ce255f705b074358c8feb853b704782dc06d33c4300fa73043bff0922e3755aa436f9c8cb277a67abb53764169bb2f2132100358dbd7cf453d86a84691b09eae2f93d3acb14e0e3935725e49b6fb2c14aa96e2a599", @ANYBLOB="c3acbfac6a3e4d0d8120284bad36c3afae7b0d5dba09c4159e878316237b814cbd32891dfb929abc2b026d79b2cb7adb2d81b2bc03535adc07beed84b04bde1fb4b9bc63d6e2bce27beffd50e59b1532661dd1615d2c7fa88d0a623a412ca4b110a71d75cfeaaa470516b589c964cf38f579dec73437f9", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r12, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc042004}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES8, @ANYBLOB="000326bd7000fedbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r14, 0x5403, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xe, 0x0, "00120dd608f500001e2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r15, 0x5412, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) sendmmsg$unix(r17, &(0x7f0000001f00)=[{{&(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="25b40d3e408d9b615108f17276f53aa64d9b68e45d08b55a4335bc83ea38dd84e3203af5e98cb99063b82a6c4cabeed310de441b7cbe2b4e522b46f2ccd7f4667b7e555890bb025db36a8aeecd0f9668c8126fe20295fcdc8c0b60211ff473fe595bd68353cd320586f8c80719ef4d457d37535d602c5f30ed92563cebc5f2e6983ec12fd49dd24c3cbb806eba7cea7a69091543170835b838740d255905de2c6a7b9636f239445b60d01385dcdc4792930ba365722a42c1f8120041c577717399f0", 0xc2}, {&(0x7f00000006c0)="3c1123d08aeabe11e086a113", 0xc}, {&(0x7f0000000700)="d814999ab46e36375c60fdd28326af9e1a33086cae8419d734e67b50b14dd3c119a762b2c6b23c752e004babc806a85b", 0x30}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000010000007da77034e9e40359ca053a5e7b751f86a1c09119f77700324d746c7a4afe2f383f588146a433d8d50454f8c30bc4a8148e2fa59ea3a763cb7ef6e7", @ANYRES32=r7, @ANYRES32=r15, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r12, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r10], 0x110, 0x20000000}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000e00)="177f540ab649b6bd71a967927389f8b6879d11f6bf6b8a8c0d4ffaf79de04786f2551483fb4cdd4a8a05cfb1601087581cccb1d5f3816d60df794ad83f9046790cb2e4d8661485e9d0156be0bfad6c9da1d76392", 0x54}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r17, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r16, @ANYRES32=r2, @ANYRES32, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="0001000001", @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r16, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r11, @ANYRES32], 0x138, 0x44}}, {{&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000011c0)="b4da8ef173d3b7c05f612806cae7aac906a86f057f9ae1598171aac5236f388a51079b276ca13d0175c0bb498e89daab8687658f028aeb97929dbe", 0x3b}, {&(0x7f0000001200)="06413072836210a046be2af35691c4df9b18b6e960a9e15b0ff541d8e3e9c998d30ea8579ac8285226eab960b97751973e5773a13339c4889f14442e94ef", 0x3e}], 0x2, &(0x7f0000001340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r18, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x24000040}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000014c0)="a19493fde2f1b0ec2de9fd94d305389de6f871c19fed4a416e74fa31101c760f8c100f4c581192169adcb80ad2d2bcc39fe1ab1041cf45e0975c398b22ed4eb2315bea19827245bacb4c3fbd1b60544cf4cb1787a13d5cf21ed9bb006cdf3413ee81685ea7fb407ef0e1e9ab7d911706f50e3ad0b78131167a772c", 0x7b}, {&(0x7f0000001540)="1eba7fc4d820ab72e95475e720ebeee627c780b51fa485317e226dd6185c505b6547c3695f1c71d834351b2c5cfe7ff01eee441b1a8223b87c1e8f1ea40d7265bcc8a81e80a772a72c10e62bae9782540e97063020a3a79a3dd560008854a478e04507058e62789c57f1571cec5f2a3abc0fb1191d1b7ad97d66cf285caa25a7d17329d334bcd8f599375087fdc75817d1278bb52b5ec7de90b451bfc09cb93132da79b82a7506d9ede2846d5b28ec", 0xaf}, {&(0x7f0000001600)="f094e5cc7bb7d640ae757130d4d42769d49e2f11e873339446fdcba650133edcaa07d13a8c6d296ffc1691ba1b0ebfc55827687ae74b19332efad499713a3cd29fd9cad9aaff6c2ae069f0dbcc287b", 0x4f}, {&(0x7f0000001680)="6eaf06a3d7b56d1cd081cb7137220ad11ef8407b84d5dabbb1e802e36750abce92d561640a29497f623f3f424b8ce3cbc66a6938ceaa5cbc4c80d90bf1ad1735f07067405b26df5a0ddfac10f59da28bba5abf8a8334d7bf76428252d7", 0x5d}, {&(0x7f0000001700)="bc75f48521e463af2a44a9d4d78166c8b53a3ae9b4c385781d7d244ebbd34feea0d307e4df306b2a7bedfacdd9a6df17cb377daadf40125b2c6daf81919c19f597ece77351ea62c25465b191a1234910b133b77db066e1cb52fc63ce0707015f8d2d5c61d5fb4f6d56d190489f82bf55a2fe13a100185655285d814d8ee0713e", 0x80}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r11, r8, r16, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r14, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x38, 0x1, 0x1, [r14, 0xffffffffffffffff, r17, r14, r3, 0xffffffffffffffff, 0xffffffffffffffff, r16, 0xffffffffffffffff, r16]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}], 0xd8, 0x800}}, {{&(0x7f0000001a80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b00)="444dc1611f6af44b5f0f8a5b39dffa9e1be1c9678d050aba7a3fd1311eaf550bf8e9eb15ef95307bbaf44eef5ce13daf82ee02f2d6d99b5f486002f07983aeac54dcb064a440b0c7c82efd3f0e48da2d79ac4b4838a0c5de1d47bbf201fba469e505b2b9e84ef9a2629588746dd1", 0x6e}, {&(0x7f0000001b80)="cdaa8934e5bf7fae9566e34be2eb80d4a5e9885384073a9f8cb3158d0e8b8adc50fdf5c39ea5702e96584b88cdef83", 0x2f}, {&(0x7f0000001bc0)="5e51ab704201ce66e5562dc5e0bb6fd45a60cc491ea497ad3204425542c9be34b65c2085c85e051acd82505e9bd9d4426a077a3b1e9f1b48e02e78045e300d36b8b21f835280821f07aa6b6680d823d96b3b6cf8f27e2ef9c7b638aa476de790fef4c9d96c7fac58429e8d0f41f26247a7e6ff77d83110a152a1b6b20b4be2095191359cdda4a3685da26a9e709dd227d8187fbfbfabafd6d8beb1", 0x9b}], 0x3, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r13, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110, 0x8000}}], 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.23944552s ago: executing program 5 (id=4241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x7, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x462b02, 0xd1) ioctl$TCFLSH(r1, 0x540b, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(r0, 0x4, &(0x7f0000000140)={0xfff, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) write$selinux_user(r4, 0x0, 0x27) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 2m7.838312887s ago: executing program 5 (id=4244): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r3, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000010000)={'wlan0\x00', 0x4000}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$packet(r3, &(0x7f0000010040)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 2m7.736617358s ago: executing program 5 (id=4245): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x20008840) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000007f003a110000", @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) setregid(0x0, 0xee01) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000ac0001000300000000000000000029fd71a69d3295d8"], 0x38}, 0x2}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000ac0001000300000000000000000029fd71a69d3295d8"], 0x38}, 0x2}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) eventfd(0xc) (async) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r6) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f00000005c0)=""/67, 0x0, 0xd000}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f00000005c0)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000008c0)=""/247, &(0x7f0000000380)=""/114, &(0x7f00000006c0)=""/77, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000c3fd00"/24], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000c3fd00"/24], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000002c0)={r2, 0xffffffffffffffff, 0x2, 0xdf, &(0x7f00000007c0)="c60cf745e5b050b50880cc098b8dafa92e80f54fa877168e5c1d629519e395f5ae55e97153ea0a9484bb8b286c026d1daa0aa4d9b4345a8fdbc218634a9b41b71ab73d2dd66dad9a8e6ac0408f95615e747500d4196fc49cdc2addd5934103a079aae1f414c6418139fd9a2d3f1951898fc676b17805ebb8a64dfa2d5511b6063a35695100640e019ca8c28991571a61cc670a0c4daa26fde5b8511d914bfb9230bd09d97369737f9a90e6995c7a46d34a7241b9dcd59436c278e1ed7011fb2526696ced7529656c00ccc8d1b22d77e5c8a258e97655831446e00403026086", 0x35, 0x9, 0x4, 0x1, 0x9, 0x1, 0xfbfffffa, 'syz0\x00'}) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) 2m7.557409531s ago: executing program 5 (id=4246): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1ef89537f43af8f9146118f1042f4b93400a07fa404286e66c24ff5e6a10dd523e7726f520e363a2cc9e9a4f02ef01059e027834f7ab42dd7d2b921c33fadb02110e8d7442cad5d4f5bc958a761ca6b8ce315f0d643d40a609acfc9b1ebc09e869f16b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ed}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000008000500000200000fb6d9b1d09c9066284829d5ca0375def77be0e5ea1eb5badf7e73a80aacb3d764cb9a8c0c2e716e2eb40fb89a472e3a479f364f5968c1750d1e235f861d8f7a6e575af075bf06050602f6180de05142a4eaf1adbb5eed672778af7d5100000100000000007974cc86685131a75cb412a20795abb01475f8ee4432d93f414e04468481a7cc58e7064c9f74970f91839d5e84"], 0x34}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES64, @ANYRESHEX=r7, @ANYBLOB="f8509117a0172bf7db792afdc2ec8a133c1f9801998822f8ca1943c44a074ffcc045bdb394b3373811e534a33a81bd514302aac5c1", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=r8, @ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m7.466847752s ago: executing program 5 (id=4247): r0 = socket$netlink(0x10, 0x3, 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 2m7.408571134s ago: executing program 5 (id=4248): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) (async) listen(r7, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5670d8eef2d060415e56a7de2dd877547e88cff53a1b639355ce645cce0a9850d124f1ddadad68b082b130c059010fab68468179a80fffff9a1ffcc315ad11a68b2305780f2c8ca25714c96569b1e9a5c33943b5fc4d7267f266235a6fdda81f798a1beeb3c96b397667fa9019d79388b1aac8be17a49606e898b7be57c588d676361302c92d3a988bd30a237be079b12f8afa40ed627754bf7b37850372a10e210b3812224f378a9b08bc77f280760d70ebe836513b5c6db48de8133ab3f726dff50c7e995f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000000c0)=r0) (async) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000000c0)=r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10001, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000240)={'ip6gretap0\x00', 0x1000}) sendmmsg$unix(r11, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10], 0x18}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 1m52.276696973s ago: executing program 47 (id=4248): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) (async) listen(r7, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5670d8eef2d060415e56a7de2dd877547e88cff53a1b639355ce645cce0a9850d124f1ddadad68b082b130c059010fab68468179a80fffff9a1ffcc315ad11a68b2305780f2c8ca25714c96569b1e9a5c33943b5fc4d7267f266235a6fdda81f798a1beeb3c96b397667fa9019d79388b1aac8be17a49606e898b7be57c588d676361302c92d3a988bd30a237be079b12f8afa40ed627754bf7b37850372a10e210b3812224f378a9b08bc77f280760d70ebe836513b5c6db48de8133ab3f726dff50c7e995f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000000c0)=r0) (async) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000000c0)=r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10001, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000240)={'ip6gretap0\x00', 0x1000}) sendmmsg$unix(r11, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10], 0x18}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 1m15.808462038s ago: executing program 3 (id=4618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}]}}}]}, 0x44}}, 0x4048000) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x4a) waitid(0x2, 0x0, 0x0, 0x4, 0x0) setregid(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 1m15.415526454s ago: executing program 3 (id=4620): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) socket(0x400000000010, 0x2, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000280)) (async, rerun: 32) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000001980)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="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"], 0x1, 0x1520, &(0x7f0000000440)="$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") (async) r7 = creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) ftruncate(r7, 0x400) (async) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538000800000800"], 0x0) (async, rerun: 32) sendmsg(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000334f67e40000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000feffffff00"/28], 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) (async) socket$inet(0x2, 0x1, 0x0) 1m15.395867374s ago: executing program 3 (id=4621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv4_getaddr={0x38, 0x16, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x67, 0x22, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x104}, @IFA_FLAGS={0x8, 0x8, 0x45d}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m15.337597475s ago: executing program 3 (id=4624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r2, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1010821, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]}) 1m15.309123625s ago: executing program 3 (id=4625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) fcntl$setlease(r4, 0x400, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) 1m15.249710536s ago: executing program 3 (id=4627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="2a587de304e0cde6115ecf455b39450ba2debbe3f90730c46106b88237412ba48e457d99dbd9a0d0feada49df4e3d89f04f90492a511e9b6977650658ed6d58b4d72c2f8a2e8872fb413928adcf1fbc11d81f442467a1212a3e691b3f6c7486e9d49e54d531af2649d4eb8581353f8138880ca50468765543e0c83460959747ec90be2031b508e1094c2e63c68aec84cbfdca8369e", 0x95}, {&(0x7f00000006c0)="83fddfd96f788fb9877eaeb4a9b18caacdd22a8eeec854198b93ee0f609d2c76a7fbd181e7f7cfeb7015aeebbd859c18", 0x30}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="58a99e34", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f80)="76a0131008", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc0) dup3(r1, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000e00)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES32=r0], 0x9, 0x261, &(0x7f0000001180)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m15.236378146s ago: executing program 48 (id=4627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="2a587de304e0cde6115ecf455b39450ba2debbe3f90730c46106b88237412ba48e457d99dbd9a0d0feada49df4e3d89f04f90492a511e9b6977650658ed6d58b4d72c2f8a2e8872fb413928adcf1fbc11d81f442467a1212a3e691b3f6c7486e9d49e54d531af2649d4eb8581353f8138880ca50468765543e0c83460959747ec90be2031b508e1094c2e63c68aec84cbfdca8369e", 0x95}, {&(0x7f00000006c0)="83fddfd96f788fb9877eaeb4a9b18caacdd22a8eeec854198b93ee0f609d2c76a7fbd181e7f7cfeb7015aeebbd859c18", 0x30}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="58a99e34", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f80)="76a0131008", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc0) dup3(r1, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000e00)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES32=r0], 0x9, 0x261, &(0x7f0000001180)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m0.218457664s ago: executing program 4 (id=4742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100400000000000000003000000147674472d72"], 0x28}}, 0x0) 1m0.190710715s ago: executing program 4 (id=4743): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYBLOB], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000580)='bpf_lsm_inode_listxattr\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x5, 0x6}, 0x8, 0x10, 0x0, 0x0, r7, r6, 0x0, &(0x7f0000000200)=[r6, r6, r6, 0xffffffffffffffff, r6, r6], 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f00000002c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b6000000850000002d0000009500000000000000deb14a77bc512b1cdccc31558ce33e90c80b6e6265e740a87f68e50f4d9186bdcfb103519546c3e3a2bcfd6d0742a533b8e9a4bba06d505f9737a892a8e44d23fa65a748cc12feb7e6175eed322e1960f4720b0034d28945c79d8e4ae5e812b0a8f559be26420c6528fbee83bee515e36d915da5820f0f250ee7"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000bc0)={'gre0\x00', r5, 0x40, 0x40, 0x4, 0x4, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, {[@noop, @lsrr={0x83, 0x17, 0x26, [@loopback, @local, @multicast2, @remote, @empty]}, @end]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7d18800, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @generic={0x6, 0x7, 0xb, 0x41e0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0xfc, &(0x7f00000001c0)=""/252, 0x41100, 0x48, '\x00', r5, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r3, 0x6, &(0x7f00000003c0), &(0x7f0000000a80)=[{0x4, 0x2, 0x7, 0xc}, {0x1, 0x3, 0xf, 0x1}, {0x5, 0x3, 0x3, 0x8}, {0x1, 0x4, 0x9, 0xc}, {0x4, 0x3, 0x4, 0x8}, {0x3, 0x3, 0xd, 0x1}], 0x10, 0x9ef}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r9}, 0x10) (async) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") 1m0.132691426s ago: executing program 4 (id=4744): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18220100000084f4aed6e2234a526f66ed7e6082d14b04000059ad77251e3c1175ca1e9aa58b1a0ea670d356e11af237be570ea601fb8512a93a3cfcc6ebb03dc3541d4078e0b9ec038d34127458abdd991dcc76061e409a31879a511816f65e16ae676a742b82932a5c507b72dd5b35bf0eddf5f131657fff7b8bc33106f1311bec6c173d723deb747b01da012dc39a3ff2e908269057e46cfb3e8daa652a74e40f586cc93c1c8e28195f19fed47d43322a9f2a008a"], 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYBLOB="5ecfe989b65b19130692f385c958979918b74b950d76b65825695e2287895a945e7d6d221ea55e73fc7e1b8a605cfdfc52d1580d06311d88d2f7540f3fc1032885d797ea1160d8c8527de142bd3108390107d202eea116b1608f623b6465082571a362adae9617932eea2f88d5a7bc30e47d37b3e4992ad900da84e2cf511c10f804f59078b34e886e9f0714a61efbea3d1c476e51f62cec79d5863ea2a29f41190a9365e7cd9d1f49a615ae2f285e06b0e71e9ca93cf8d7fc358649c92e10e9e7d00ed5e7f798318313", @ANYRESDEC=r0], 0x0, 0x7, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYBLOB="5ecfe989b65b19130692f385c958979918b74b950d76b65825695e2287895a945e7d6d221ea55e73fc7e1b8a605cfdfc52d1580d06311d88d2f7540f3fc1032885d797ea1160d8c8527de142bd3108390107d202eea116b1608f623b6465082571a362adae9617932eea2f88d5a7bc30e47d37b3e4992ad900da84e2cf511c10f804f59078b34e886e9f0714a61efbea3d1c476e51f62cec79d5863ea2a29f41190a9365e7cd9d1f49a615ae2f285e06b0e71e9ca93cf8d7fc358649c92e10e9e7d00ed5e7f798318313", @ANYRESDEC=r0], 0x0, 0x7, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_ep_write(r0, 0x81, 0x43, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d45") unshare(0x60600) (async) unshare(0x60600) creat(&(0x7f0000000280)='./bus\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4da, 0x1044, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 56.965081404s ago: executing program 4 (id=4761): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1c, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') 55.828793841s ago: executing program 4 (id=4767): socket(0x10, 0x3, 0x0) inotify_init1(0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) flistxattr(r0, &(0x7f0000000280)=""/238, 0xee) ppoll(&(0x7f00000001c0)=[{r0, 0x4018}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e9e7e505772f1606bf93d1dda3ca5c20010300e62bd81daf"], 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000363f3e320ef170070eca10102030109021b0001000080040904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 54.951547395s ago: executing program 8 (id=4771): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) read(r0, &(0x7f0000000080)=""/190, 0xbe) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200840, 0x0) r1 = gettid() r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x1) mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0xaca3699ccb20ca) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x1bf97000) r3 = socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000200)=""/91, 0x5b}], 0x1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x6, 0x100000, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0xb0, [@local, @empty, @local, @private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}, @lsrr={0x83, 0x23, 0x8, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @local, @empty, @loopback]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x15, &(0x7f0000000b80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0x6, 0x2, 0x4, 0x0, 0xfffffffffffffff0}, @generic={0x7, 0x7, 0x5, 0xff81, 0x7}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], &(0x7f0000000c40)='GPL\x00', 0x9, 0x1000, &(0x7f0000000c80)=""/4096, 0x40f00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001cc0)={0x5, 0x4, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001d00)=[0x1, 0xffffffffffffffff], &(0x7f0000001d40)=[{0x5, 0x4, 0x7, 0x2}, {0x0, 0x5, 0x2, 0x6}], 0x10, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5d00}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @generic={0x6, 0xe, 0x8, 0x0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x3, 0x4a, &(0x7f00000006c0)=""/74, 0x41000, 0x0, '\x00', r6, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0xc, 0x1}, 0x10, r8, r9, 0x0, &(0x7f0000001e40), 0x0, 0x10, 0x5}, 0x94) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000001f80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000002040)=0x0) mount$tmpfs(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000), 0x89800, &(0x7f0000002080)={[{@inode64}, {@grpquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x26dadfe695b04eb5, 0x33, 0x67, 0x67, 0x36, 0x39, 0x37, 0x38]}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x7}}, {@inode32}, {@grpquota}, {@inode64}], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x2, 0x34, 0x66, 0x63, 0x36, 0x62, 0x31, 0x65], 0x2d, [0x33, 0x37, 0x34, 0x34], 0x2d, [0x65, 0x30, 0x65, 0x32], 0x2d, [0x36, 0x35, 0x37, 0x62], 0x2d, [0x63, 0x34, 0x54, 0x37, 0x61, 0x37, 0x63, 0x36]}}}, {@euid_eq={'euid', 0x3d, r12}}, {@appraise_type}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x6}}]}) write$P9_RVERSION(r11, &(0x7f00000021c0)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002200), 0x8040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r13, 0x40505412, &(0x7f0000002240)={0x0, 0x3, 0xf, 0x0, 0xe}) io_setup(0x100, &(0x7f00000022c0)) sendmsg$nl_generic(r3, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x68, 0x35, 0x300, 0x70bd2a, 0x25dfdbfd, {0x11}, [@generic="577a0c69671e8876cae8aec6ddbdd175f9ff2399fbe3e7467a2f9dddffe7fb9dd9970636c2aab2daf134173e43944b2038c58fcda358fa8d2dffb809e2f6bfed10ec00e8c57b84bc453c96f5784e11afc50d3d"]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc0080) recvmmsg(r11, &(0x7f0000006240)=[{{&(0x7f0000002440)=@phonet, 0x80, &(0x7f0000002880)=[{&(0x7f00000024c0)=""/84, 0x54}, {&(0x7f0000002540)=""/160, 0xa0}, {&(0x7f0000002600)=""/165, 0xa5}, {&(0x7f00000026c0)=""/117, 0x75}, {&(0x7f0000002740)=""/50, 0x32}, {&(0x7f0000002780)=""/140, 0x8c}, {&(0x7f0000002840)=""/56, 0x38}], 0x7, &(0x7f0000002900)}, 0x1}, {{&(0x7f0000002940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f00000029c0)=""/241, 0xf1}, {&(0x7f0000002ac0)=""/109, 0x6d}, {&(0x7f0000002b40)=""/162, 0xa2}, {&(0x7f0000002c00)=""/92, 0x5c}], 0x4}, 0x8}, {{&(0x7f0000002cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/48, 0x30}], 0x1, &(0x7f0000002dc0)=""/80, 0x50}, 0x3}, {{&(0x7f0000002e40)=@rc={0x1f, @none}, 0x80, &(0x7f0000006100)=[{&(0x7f0000002ec0)=""/31, 0x1f}, {&(0x7f0000002f00)=""/195, 0xc3}, {&(0x7f0000003000)=""/51, 0x33}, {&(0x7f0000003040)=""/30, 0x1e}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/26, 0x1a}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/50, 0x32}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x9, &(0x7f00000061c0)=""/106, 0x6a}, 0x6}], 0x4, 0x10101, 0x0) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006340)='/sys/power/mem_sleep', 0x111c02, 0x118) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000006500)={r14, r7, 0x25, 0x6, @val=@kprobe_multi=@syms={0x0, 0x5, &(0x7f00000064c0)=[&(0x7f0000006380)='}&.!)\x00', &(0x7f00000063c0)='\x00', &(0x7f0000006400)='tmpfs\x00', &(0x7f0000006440)='tmpfs\x00', &(0x7f0000006480)='permit_directio'], 0x0, 0x1e4}}, 0x30) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006540), 0x400) syz_clone(0x2010000, &(0x7f0000006580)="4a216dcc5ea94fbf36d0bcf8eb31e4170cea71fb7325a76314320e7b1cddb386f232686ece686b191b28f716a5d64424fd3dc9f4be008eeb3f955f14f2ca1b31711be89f17b00f317e1845023e0c397939899bc210111c8c8f373a40fb65cc1fe71adf0ea44a8200e20f501f9692aa2ca8f40996f1cdb657b9775608a7d5df28d04c327fd022c1ad53badd088d10ff21dc2302f32ca0ff86b1b3e9367e7266e72bc253ef1e2b8480ca0d9f88157861c68d6828d7c29f228c6ba66e743fc7002ebffacab3aae004815b1c8d9a73633c98442b489d7cfa23fc57d80870d2adee", 0xdf, &(0x7f0000006680), &(0x7f00000066c0), &(0x7f0000006700)="19d1cc1777ce5b5709da4ef25c87effc346fe5d977a223a97772484240d0daa55aa13a797b6eb49c232c74583c88c347cc60f7e17b95f87a381ba35d2fcf5f81e49ee6193d117981468d40d23f46f56c0e6889111eb09e115ad70218b1af5c01d7da1b708dd11c95a6408911185b01aa9155327c331bbb92e49bb444e7dcf518094353878d9e8708705ee92770c85718383a12caafd31d9fdaa9e1f14b98a0ccb2cd01e652d8a2ca866861fa7965d892ee03a52f4634012472e4d32662a5764bfb9b8264660adaa2d3a824a873f70b") connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000006800)={0x1f, 0xd3f8, @any, 0x3, 0x2}, 0xe) 54.880980906s ago: executing program 4 (id=4772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) 54.880749646s ago: executing program 49 (id=4772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) 53.747438233s ago: executing program 8 (id=4778): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r3, &(0x7f0000000540)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x1000004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='ata_eh_link_autopsy\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r7}, 0x18) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) 53.371209398s ago: executing program 8 (id=4782): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200640101000c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010"], 0x80}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r3], 0x0) 50.306098245s ago: executing program 8 (id=4796): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2021040, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = timerfd_create(0x1, 0x800) timerfd_gettime(r7, &(0x7f00000000c0)) 50.224821296s ago: executing program 8 (id=4797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000807dbcbe18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x71) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 50.224078246s ago: executing program 8 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4008040) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x54, 0x8b, 0xfb, 0xffffffff, 0x15, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x3, 0x80000000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x50) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_clone3(0x0, 0x0) inotify_init() r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) faccessat2(r6, 0x0, 0x2, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0xb9d, 0xfffffffe, 0x2008, 0xffffffffffffffff, 0x8, '\x00', r2, r6, 0x5, 0x1, 0x1, 0x8}, 0x50) 50.208340987s ago: executing program 50 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4008040) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x54, 0x8b, 0xfb, 0xffffffff, 0x15, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x3, 0x80000000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x50) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_clone3(0x0, 0x0) inotify_init() r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) faccessat2(r6, 0x0, 0x2, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0xb9d, 0xfffffffe, 0x2008, 0xffffffffffffffff, 0x8, '\x00', r2, r6, 0x5, 0x1, 0x1, 0x8}, 0x50) 8.199383665s ago: executing program 2 (id=5143): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r1}, {@void, @max}}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {0xfff7, 0xf7, 0x8944, 0xfc2}, 0x3a, [0xfc, 0xa, 0x10, 0x6, 0x1, 0x6e2f, 0x8664, 0x8, 0x5, 0x800, 0x4, 0x1, 0x9b, 0x8, 0x55, 0x5, 0x9, 0xfd, 0x8, 0x400, 0xb61b, 0x7, 0x8, 0x5, 0x3, 0x8000, 0x8, 0x7, 0x80000000, 0x7, 0x6, 0x9, 0x0, 0x5, 0xde, 0x2, 0x4ba, 0xae75, 0xfffffffb, 0x3, 0xfffff800, 0xfffffffa, 0xffff0001, 0x4, 0x40, 0x8000fe, 0xff, 0x6, 0x4, 0x80000000, 0x400, 0x10, 0xff5, 0xa00000, 0x7, 0x0, 0x4, 0x1648, 0x9, 0x1, 0x2, 0xfffffffc, 0x8, 0xf62], [0xc3, 0x9, 0x8a, 0x0, 0x9, 0x80000000, 0x0, 0x6, 0x5, 0x18a3, 0x7, 0x0, 0x8001, 0x81, 0x101, 0xfffffffc, 0x2, 0x3ff, 0x5, 0x1, 0x6, 0x9, 0x4, 0x8, 0x4, 0x1, 0x3fb, 0x8, 0x7, 0x800, 0x2, 0x91, 0x80, 0x7, 0x8, 0x8, 0x7, 0x40800000, 0x8, 0x80000000, 0x8001, 0x6b, 0x0, 0x8, 0x7, 0x8bd2, 0x2, 0x8, 0xff, 0x0, 0x4, 0x1732, 0x200000, 0x75, 0x10, 0x0, 0x1, 0x1ff, 0x3, 0xffffff01, 0x1, 0x2, 0x4, 0x5], [0x8, 0x9, 0xffff, 0x80000001, 0x4, 0xf, 0x10001, 0xc9, 0x8, 0x7, 0x0, 0x5, 0xeb, 0x8, 0xd, 0xa, 0x2, 0x8, 0x5, 0x7, 0x49, 0x7fffffff, 0x8, 0x7ff, 0x596, 0x3, 0x4, 0x80000000, 0x5, 0x5, 0xa, 0x3, 0xc, 0x4, 0x1000, 0x5025, 0x2, 0x0, 0x8, 0x8, 0x2, 0x5, 0x0, 0x80, 0x0, 0x6, 0x0, 0x1ff, 0x81, 0x2, 0x2, 0x2, 0x7fffffff, 0x1, 0xffff, 0x5, 0x5, 0x3, 0x9, 0x7ff, 0x2, 0x7, 0x5, 0x3fc8], [0x397, 0x7, 0x0, 0x508, 0x19, 0x0, 0x9ee, 0xffff, 0x3, 0x8, 0x5, 0xffff00, 0xfffffff2, 0x3, 0xb, 0x1, 0x9b50, 0x7, 0x3, 0x28, 0xd, 0x8, 0xfffffffe, 0x5, 0xf, 0xf, 0x3, 0x200, 0xe603, 0x2, 0x9, 0x5, 0x8001, 0x2, 0x40, 0x556, 0x101, 0x1, 0xa, 0x81, 0x104, 0xb5, 0x2, 0xd7c, 0x3, 0x1, 0x1, 0xfe, 0x400, 0x0, 0x1, 0x1, 0x1511, 0x4, 0x2, 0x21, 0xffff0000, 0x6, 0x9, 0x4, 0x3, 0x7, 0x0, 0x9]}, 0x45c) fallocate(r2, 0x0, 0x0, 0x8000c62) 6.54220573s ago: executing program 2 (id=5156): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001fff0400"/20, @ANYRES32=0x0, @ANYRES8=r0], 0x40}}, 0x0) 6.248223525s ago: executing program 6 (id=5160): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpgid(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r1, 0x8) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000440)) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000edff00000000e7ff0000850000000f0000001801f3808fcb012500000000000000007b1bf8ff00000000bfa100000000000007010000f8ffffffb7a85209c4d81edb835b36199e1eb7ef9302000008000000b703000000800000850000000600000095cb6d4b6b2740346545ebf9e54e6f0841255c7c71bb748015f85add16e361c110f04bfcbda7800aa8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000680)='bpf_lsm_socket_connect\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="5cf296be3c8d7326485fbd6b4e9d60453c03bbd536eb5f2e9d2b0bef14193c86aac3c3268111dc43f59f504cef815e8d2e339449324dc88b39d2", @ANYRESHEX=0x0, @ANYRES32=r11, @ANYBLOB="b6d33e2bb0d842d7fa4ad02992d5abf6d86caefb01a0d45cf82586317bdd32d9a26b74190df4480e45dc003227d31d2d3b12c7dddd42db23f9066de0e55221058d4ee1d0c05e67423c5121acc4d68d3d30d247d0f5d9d6aee3464b37671f47c5119c2741f03648dcdd332806b6a8c20430ea5e856375c7bd35f1ed76c5a7b0033cdc0538ea1395a186011b4ef8674aeb24fe6bf288fd534b2d1e98944f9e23b2d22542cc5cc2e79cbbd4f266b5b33e734aa6838e07688a4bc11297155d069ee2583f28a7007e09aed1986c167799f5f973260162e10285bf55cdf28b3c3337d60fdcd41c83cda9756c8bbb4e4f40", @ANYRES8=r8, @ANYRESDEC=r6, @ANYBLOB="8509ee79e5f21a264dc79c7827708c5d963368076e0c2803250af2c387d463064c70d7ea00f3ab007e3c24423305d518da90016a3037cd9b01b63aee293934d5dec5823962c9e880c5b1403723330a621ef763105d699ebdca57d32c956c1d341bd14e28e714921ee08765e4fd97f7bd671d96aa44af711d6be7791b8b9a8ecca2679227ca9880cde54a52082f"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r12}, 0x10) setitimer(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000740)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x471, &(0x7f0000000200)="$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") 6.247672885s ago: executing program 2 (id=5161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000", @ANYBLOB="4cd687c6cf", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r2], 0x48) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005ef26cd109522c9b5dc7625818d5c72c7ff3f5d521e1e2c0998b4ddf8d01c83be29cbc6c3a5323b672bf487164d02565245d92bd2113d025fc792c7ab87ff59d36f261978d15a42ecc43c7574e0cbe0a46505924d1d5801b38c0df4e213f374ef89bf14255928de4380a08836a09e6a22d0e00"/147, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) close(r4) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b9) fcntl$setlease(r8, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x7, 0xe, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x0, 0xb0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0xdc, 0x0, 0x0, 0x70bd28, 0x34ff}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x76bd, @rand_addr=' \x01\x00', 0x9}}]}, 0x70}}, 0x0) 4.870974596s ago: executing program 2 (id=5170): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0422c20000000000010902240001120000000904000001030001000921001006012207000905810300000d0300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a\x00\x00'], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) 4.782144647s ago: executing program 6 (id=5171): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x0, 0x0, 0x8001}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f0000002780)="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", 0x2c3}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r6, 0x1, 0x0, @void}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) write(r2, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb0, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0xc9, {0x9, 0x21, 0x8, 0xb9, 0x1, {0x22, 0xd69}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0xf9, 0x6}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0x7, 0x6, 0x20}, 0x170, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/525], 0x5, [{0x37, &(0x7f0000000140)=@string={0x37, 0x3, "e00e3ed46e2d35eef4bd43c29a19a2684d099912266024bab9bd558ab00f567f17a619a5298b7b8b7153f271814a3199c72a902487"}}, {0xdc, &(0x7f0000000480)=@string={0xdc, 0x3, "f2a02817d854307d42d7049e96a446b36524d7c345f56d3c4636cff5e99daa825cde93e2b7d4f9b755e7a5c6ea403087751bf080ef6e32ec5519a54fae00ba8e432837f7eddb50e1043453a41954fb39767fc1481b2593b2b66575bf73c2b76b50a1affe0dbc7474416fb57d5c40cf4839297b4910cb9173c1eb1bdc11fe38583ec65d715649ff5616ec0533390d9554889a14f44e737aa23a56fbe0b9dbd88cb78df8e7919d96880f8659986afb9e28316e189532389e1dc411dce873b0e1f439e34dd3eaf18530b54594c02f6cd9cdbc23e8b17d027a6f3b99"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0xa1, &(0x7f00000005c0)=@string={0xa1, 0x3, "e1e6c96483ef2a48ccba3e375fd54e990a8d292611509cdeff404c8bccac887650bd9d8e5702ee6f002529cb0a8d834f3859162d948e49d170d42a997a5903df144207fe5486be0b8aea6ab29dee88a29d6ebbc1681d508f6c2e8867219d1d78c99fb8a3b3b46933c18d33b02960b7bc8a0400c71f9cc266736d0a03b68a5fa1e1157b68f354d73efdff831f1024c8a2a54b7a2e6ef06deb9c8c0254c5c008"}}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) io_getevents(r1, 0x3, 0x0, &(0x7f00000000c0), 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-\x00') syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18448, &(0x7f0000000780)=ANY=[@ANYBLOB="a6c035f46167dbf28ca43785bc0c92db9e29819cd1ceddfe6ccf7bda9b48864423d5b2e74f5b43d7a3ba5d00a4846bb66c7d662ad03650c9c761a19c4f2939ca16394450c652f81be915dd81e8053809dffbb184274dd47156296273d92133338c806404cffbc553df37ce610a0211cb4217131d29df0fb4da9f9bc006f5b2f84524b0a50fccc69654dd800b16beb1f2016456522f4bb32c437486ab69da4749ec59558b7fbffec4d2e7b9f6d2f93b74f7ca8e8ce57b01a38ae0eddb0abfeeaadf665873764edee3e6c281866fb2f55347e66f0b6019726b6d0b920e5e07e833949082a1390e566b837e648aa7f91743bfa5e84300"/254], 0x4, 0x5507, &(0x7f0000008540)="$eJzs3MtrY1UYAPCTPqbzciziwt1cGIQWJqHpY9Bd1Rl8YIcy6sKVpkkaMpPkliZNa1cuXIoL/xMZwZVL/wYXrgUX4kJxJyj3nlttdQShaVKnvx/cfvd8OfnuOSFt+W5DA3BhzSe//lwKN8KVEMJ0COF6CPl5qThy6zG8EEK4GUKYOnaUivyfiUshhKshhBtZ8VizVDz0+e3hrbWf3vrl62/nZq598dV3k9s1MGkvhhC6O/F8vxtj2orxYZGvDdt57K4Oixgf6D4qxmmM+82tvMJ+7WhefP5KK85Pd/b6Wdzu1OpZbLW38/xOL16wP2wd1cmf8LC2m48bza08tvtpHluHse7BYfzZdtgfxDqNot5HefkwGBzFmG8eNON+dh7lsd4bFPlYN200D7I4LGJxuVBPO418HVuneKHPubfbvb2DZNjc7bfTXrJWqb5Uqd4pV3fTRnPQXC3Xuo07q8lCq5NNKw+ate56K01bnWalnnYXk4VWvV6uVpOFu82tdq2XVKuVlcpSeW2xOLudvH7/vaTTSBay+Gq7tzdod/rJdrqbxGcsJsuVlZcXk1vV5J2NzWTzwb17G5vvfnD3/fuvbLz5WjHpH8tKFpaXlpfL1aXycnXx/O0/+zV8Jvv/pFj0CPcPp1Ka9AIA/n/0/8AknF3/v/sghFqeP8v+P+j/R0L/f7H3D6ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLC+n338Rn4yH8fXivwzReq5YlwKIUyFEH5/gulw6UTN6aLO7L/Mn/3bGr4phbxCdo254rgaQlgvjt+ePetXAQAAAJ5ex/rwrGU/ugXAxRBv2kxd/3BE9UrZW2r+xxFVm8q+PD+iYvn7eyYcjKha/o1zeUTF4i23mVFV+0+mT4TLx0IphqmxLgcAABiLk53AeLsQAAAAxunTSS+AySiFvz4DUHyAfy6G4g+CV06MAAAAgHPsh8dPzpfGvRAAAABg7PL+3///AwAAgKfblx/f/GzSawAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDnTu4TRyIwgD8bPACu1ot2ga2lb1BGSkhxxwjCkgTlEBaSAPUQG4pIYIIj4NCRKJIHmwFfZ9khrHgZwbBYd5IAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcOkeq9X8/vbfXduc7a6dPLMBAAAATtlUq3n9ZJr6v5r7v5tbf5t+ERFlRJxauw/ix1HmoMmpPnh99W4MDxF1wv4zRs31MyL+N9fzn3N/CwAAAHC51ovlLK3W08O07wHRpVS0KYurTHlFRFTTp0xp5T5vkims/n0P4yZTWl3AGmcKSyW3Ya60L6n/7oeq3fhNU6Sm/Pz92eYOAAB0aHDUdLsKAQAAoEvXfQ+AfhTxupV52AocpabZ3psc9QAAAIBvqOh7AAAAAMDZ1et/5/8BAADAZUvn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBOm2o1Xy+Ws7Y52107eWYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3f/k/MTXOJHOvjaXnkWTt1Ng6NfbOjaM/jK9fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/s7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5qDLUXIxZvk3IvoUURQ4q3/Q88t9FJvPeyhgmflzY9kmgRcjc5sks8H3rzvDsO875uBkO+82QUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDJ9dydO46ZfxJ1y373Ht1Zif39XH93ZfLAYW4yTJpM+HF6uf0gG7SUCAADA8ZFW9X0I4WG2tRT7Tj+v/7PqmFjzf/dsEVf1/O66v+qr2j+2X3959OL2QP1inHjSy6uT8Zm9qXT/v1nOt+f+9ohufuXzZy9pfkM6H2y8MM3y65l8c/fue708PNFEtgDAv3G66sug+n8o9qM2EwPg2OjWCu+q/k/77eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITpRni6ipMQwmJ3J47uP761sl9/Z/PBYtUu3L69WT9nPEUWQri8OhmfaXAu8+76jZtXlyeT8VrzwSshhLZGf6ec/tWPZjg4hFauz7wFWYv360BBp7zZ85LP4Qha/KMEAMCRlJUt1vUPs62luC9ZCOHP75+s/1+vxWHG+v/Rxxfu1ceq1/+jxmY4/4br1z4fXr9x883Va8tXxlfGn751dvT26NzF8+cvDvNnJUNPTAAAADiYXtnq9X9nYe/6/6laHGas/7/4dvRVfaxU/b+vnUW/tjMBAAA43p5/9Y/fk332J71e+HJ5fX1tVGy3P58tti2k+o+dKFu9/k8X2s4KAAAAaMJ0I3li/f9SLQ4zrv8/88NLP9XPmYYQTpbr/6dXPptcam46c+0///Jw9WXrNW8WAAAAUDhZtvr6f5a//9/ZfuUhlpNvvFbE5c8AzlT/p+9//WN9rPr7/+eam+Jc6gyK65H3gxC6g7YzAgAA4Ch7qmyx2P8t21r65OdTH/a8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQtL8CAAD//++6N+A=") 3.886361501s ago: executing program 9 (id=5177): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000100000000000000ffffffffffffffffb30000000000950000000000001a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setresuid(0x0, 0x0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdir(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000001600)=""/4096, &(0x7f0000000000)=0x1000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000240), 0x1, 0xba9, &(0x7f00000017c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.709892983s ago: executing program 9 (id=5181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000400)={0x1, 0x1, {0x0, 0x1a, 0x11, 0xf, 0x2, 0x4f5c, 0x2, 0x5e}}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa1080a, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32, @ANYRESOCT=r0], 0x21, 0x150d, &(0x7f00000034c0)="$eJzs3AvUTdX6MPDnmXMuXpJ2ksvLfOaz2OnFJElySZJLkiRHktwSkiRJksr9loQk5J7kHpJbSO73W+5JcqQ3SUJCkvkN5zinOud8X//z/5//MMb3Pr8x1tjz2Ws/c8+5nne8a821x97fdhxctX61SnWZGf5H8K8P3QAgBQD6AcA1ABABQKkcpXJc2p9FY7f/2ZuI/6wHp13pEYgrSeqfsUn9Mzapf8Ym9c/YpP4Zm9Q/Y5P6Z2xSfyEysm3T814rW8bd5P5/Ribn//+PpBcb8+WGYtd3+jdSpP4Zm9Q/Y5P6Z2xS/4wp0+VHqX/GJvXP2KT+GZvUX4iM7L9/7/jfzTUAcOXvd8v2++1K//0JIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMgYzoVfGQD4W/tKj0sIIYQQQgghhBD/OSHzlR6BEEIIIYQQQggh/vchKNBgIIJMkBlSIAtkhasgG1wN2eEaSMC1kAOug5xwPeSC3JAH8kIq5IP8YIHAAUMMBaAgJOEGKAQ3QhoUhiJQFDwUg+JwE5SAm6Ek3AKl4FYoDbdBGSgL5aA83A4V4A6oCHdCJbgLKkMVqArV4G6oDvdADbgXasJ9UAvuh9rwANSBP0FdeBDqwUNQHx6GBvAINIRG0BiaQNP/Vv6L8BK8DF2gK3SD7tADekIv6A19oC/0g1egP6RcPjaDYDC8DkPgDRgKb8IwGA4j4C0YCaNgNIyBsTAOxsPbMAHegYnwLkyCyTAFpsI0mA4z4D2YCbNgNrwPc+ADmAvzYD4sgIXwISyCxbAEPoKl8DEsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yDT2A77ICdsAt2wx7YC5/CPvgM9sPncAC++Dfzz/5DficEBFSo0KDBTJgJUzAFs2JWzIbZMDtmxwQmMAfmwJyYE3NhrhvzYB5MxVTMj/mRkJCRsQAWwCQmsRAWwjRMwyJYBD16LI7FsQTejCWxJJbCUlgaS2MZLItlsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHqyBNbAm1sRaWAtrY21Mz1cH62JdrIf1sD7WxwbYABtiQ2yMjbEpNsVm2AybY3NsiS2xFbbC1tga22AbbIttsR22w/bYHjtgB+yIHbETvoAv4Iv4Ir6ML2NXrKy6Yw/sgb2wF/bBvtgXX8H++Cq+iq/hQByEg/F1fB3fwKF4BofhcByBI7CCGoWjcQyyGofjcTxOwAk4ESfiJJyMk3EqTsPpOANn4EychbPwfZyDH+AHOA/n4QJciAtxES7GJbgEl+JZXIbLcQWuxFW4GlfhWlyHa3EDbsQNuBk341bcip/gJ7gDd+Au3IV70ADgp/gZfoYD8QAewIN4EA/hITyMhzEd0/EIHsGjeBSP4TE8jsfxBJ7EU3gST+NpPINn8Ryew/N4Hi/gc6lf19tTeP1AUJcYZVQmlUmlqBSVVWVV2VQ2lV1lVwmVUDlUDpVT5VS5VC6VR+VRqSpV5Vc/KVKkWMWqgCqgkiqpCqlCKk2lqSKqiPLKq+KquCqhSqiSqqQqpW5VpdVtqowqq1r48qq8qqBa+orqTlVJVVKVVRVVVVVT1VR1VV3VUDVUTVVT1VK1VG31gKqjumMffFBdqkx9NQgbqMHYUDVSjVUT9QY+qpqpodhctVAt1eNqOA7D1qqZb6OeUm3VaGynnlFj8FnVQY3Djup51Um9oDqrF9VLqrnvorqqSdhd9VBTsZfqrfqovmomVlGXKlZVvaYGqkFqsHpdLcA31FD1phqmhqsR6i01Uo1So9UYNVaNU+PV22qCekdNVO+qSWqymqKmqmlqupqh3lMz1Sw1W72v5qgP1Fw1T81XC9RC9aFapBarJeojtVR9rJap5WqFWqlWqdVqjVqr1qn1aoPaqDapzWqL2qq2qU/UdrVD7VS71G61R+1Vn6p96jO1X32uDqgv1EH1Z3VIfakOq69UuvpaHVHfqKPqW3VMfaeOq+/VCXVSnVI/qNPqR3VGnVXn1E/qvPpZXVC/qIsqKNColdba6Ehn0pl1is6is+qrdDZ9tc6ur9EJfa3Ooa/TOfX1OpfOrfPovDpV59P5tdWknWYd6wK6oE7qG3QhfaNO04V1EV1Ue11MF9c36RL6Zl1S36JL6Vt1aX2bLqPL6nK6vL5dV9B36Ir6Tl1J36Ur6yq6qq6m79bV9T26hr5X19T36Vr6fl1bP6Dr6D/puvpBXU8/pOvrh3UD/YhuqBvpxrqJbqof1c30Y7q5bqFb6sd1K/2Ebq2f1G30U7qtflq308/o9vpZ3UE/pzvq53Un/YLurH/RF3XQXXRX3U131z10T91L99Z9dF/dT7+i++tX9QD9mh6oB+nB+nU9RL+hh+o39TA9XI/Qb+mRepQercfosXqcHq/f1hP0O3qifldP0pP1FD1VT9PTdZ/LPc3+L+S/8y/yB2QGAL1Vb9Of6O16h96pd+ndeo/eq/fqfXqf3q/36wP6gD6oD+pD+pA+rA/rdJ2uj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WXX5xKYvXD4GYNAoo40xkclkMpsUk8VkNVeZbOZqk91cYxLmWpPDXGdymutNLpPb5DF5TarJZ/Iba8g4wyY2BUxBkzQ34OW+TRFT1HhTzBQ3N/07+aaQudGkmcK/y/+j8TU1TU0z08w0N81NS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQynUxn09m8ZF4yXUwX0810Mz1MT9PL9DZ9TF/Tz7xi+pv+ZoAZYAaagWawGWyGmCFmqBlqhplhZoQZYUaakWa0GW3GmrFmvBlvJpgJZqKZaCaZSWaKmWKmmWlmhplhZpqZZraZbeaYOWaumWvmm/lmoVloFplFZolZYpaapWaZWW6Wm5VmpVltVpu1Zq1Zb9abjWaj2Ww2m2WZt5ltZrvZbnaanWa32W32mr1mn9ln9pv95oA5YA6ag+aQOWQOm8Mm3aSbI+aIOWqOmmPmmDlujpsT5oQ5ZU6Z0+a0OWPOmHPmnDlvzpsL5oK5aC5euuyLVKQiE5koU5QpSolSoqxR1ihblC3KHmWPElEiyhHliHJG10e5otxRnihvlBrli/JHNqLIRRzFUYGoYJSMbogKRTdGaVHhqEhUNPJRsah4dFNUIro5KhndEpWKbo1KR7dFZaKyUbmofHR7VCG6I6oY3RlViu6KKkdVoqpRtejuqHp0T1QjujeqGd0X1Yruj2pHD0R1oj9FdaMHo3rRQ1H96OGoQfRI1DBqFDWOmkRN/6P9h3Am92O+i+1qu9nutoftaXvZ3raP7Wv72Vdsf/uqHWBfswPtIDvYvm6H2DfsUPumHWaH2xH2LTvSjrKj7Rg71o6z4+3bdoJ9x06079pJdrKdYqfaaXa6nWHfszPtLDvbvm/n2A/sXDvPzrcL7EL7oV1kF9sl9iO71H5sl9nldoVdaVfZ1XaNXWvX2fV2g91oN9nNdovdarfZT+x2u8PutLvsbrvH7rWf2n32M7vffm4P2C/sQftne8h+aQ/br2y6/doesd/Yo/Zbe8x+Z4/b7+0Je9Kesj/Y0/ZHe8aetefsT/a8/dlesL/YizZcuri/dHonQ4YyUSZKoRTKSlkpG2Wj7JSdEpSgHJSDclJOykW5KA/loVRKpfyUny5hYipABShJSSpEhSiN0qgIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoDvpTrqL7qIqVIWqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oM3Wml+gl6kJdqBt1ox7Ug3pRL+pDfagf9aP+1J8G0AAaSANpMA2mITSEhtJQGkbDaQS9RSNpFI2mMTSWxtF4Gk8TaAJNpIk0iSbRFJpC02gazaAZNJNm0myaTXNoDs2luTSf5tNCWkiLaBEtoSW0lJbSMlpGK2gFraJVtIbW0DpaRxtoA22iTbSFttA22kbbaTvtpJ20m3bTXtpL+2gf7af9dIAO0EE6SIfoEB2mw5RO6XSEjtBROkrH6Bgdp+N0gk7QKTpFp+k0naEzdI7O0Xn6mS7QL3SRAqW4LC6ru8plc1e77O4a949xHpfXpbp8Lr+zLpfL/buYnHNprrAr4oo674q54u4ml3ZpSfWbuIwr68q58u52V8Hd4Sr+U1zd3eNquHtdTXefq+bu/l1cy93varuHXR33iKvrGrl6romr7x52DdwjrqFr5Bq7Jq6Ve8K1dk+6Nu4p19Y9Hf1D7Ba5xW6dW+82uI1un/vMnXM/uaPuW3fe/ey6uK6un3vF9XevugHuNTfQDfqneIR7y410o9xoN8aNdeP+KZ7iprppbrqb4d5zM92sf4oXug/dHLfEzXXz3Hy34C/xpTEtcR+5pe5jt8wtdyvcSrfKrXZr3Nq/j3Wl2+y2uK1ur/vUbXc73E63y+12e/4SX5rHfve5O+C+cEfcN+6Q+9Iddsdcuvv6L/Gl+R1z37nj7nt3wp10p9wP7rT70Z1xZ/8y/0tz/8H94i664ICRFWs2HHEmzswpnIWz8lWcja/m7HwNJ/hazsHXcU6+nnNxbs7DeTmV83F+tkzsmDnmAlyQk3wDF+IbOY0LcxEuyp6LcXG+iUvwzVySb+FSfCuX5tu4DJflclyeb+cKfAdX5Du5Et/FlbkKV+VqfDdX53u4Bt/LNfk+rsX3c21+gOvwn7guP8j1+CGuzw9zA36EG3IjbsxNuCk/ys34MW7OLbglP86t+AluzU9yG36K2/LT3I6f4fb8LHfg57gjP8+d+AXuzC/yS/wyd+Gu3I27cw/uyb24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgX8xL+iJfyx7yMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+GtvI0/4e28g3fyLt7Ne3gvf8r7+DPez5/zAf6CD/Kf+RB/yYf5K07nr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4UZ45T4ixx1viqOFt8dZw9viZOxNfGOeLr4pzx9XGuOHecJ84bp8b54vyxjSl2McdxXCAuGCfjG+JC8Y1xWlw4LhIXjX1cLC4e3xSXiG+OS8a3xKXiW+PS8W1xmbhs/PB95ePb4wrxHXHF+M64UnxXXDmuEleNq8V3x9Xje+Ia8b1xzfi+uGR8f1w7fiCGy99XqRc/FNePH44bxI/EDeNGceO4Sdw0fjRuFj8WN49bxC3jx+NW8RNx6/jJuE38VNw2fvoP93eLu8c94p5xzziEe/X85ILkwuSHyUXJxcklyY+SS5MfJ5cllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JLcmQ6iWGTx65bU3PvKZfGaf4rP4rP4qn81f7bP7a3zCX+tz+Ot8Tn+9z+Vz+zw+r0/1+Xx+bz1559nHvoAv6JP+Bl/I3+jTfGFfxBf13hfzxX0T39Q39c38Y765b+Fb+sf94/4J/4R/0j/pn/Jt/dO+nX/Gt/fP+g7+Of+cf9538i/4zv5F/5J/2XfxXX0338338D18L9/L9/F9fD/fz/f3/f0AP8AP9AP9YD/YD/FD/FA/1A/zw/wIP8KP9CP9aD/aj/Vj/Xg/3k/wE/xEP9FP8pP8FD/FT/PT/Aw/w8/0M/1sP9vPSZvj5/q5fr6f7xf6hX6RX+SX+CV+qV/ql/llfoVf4Vf5VX6NX+PX+XV+g9/gN/lNfovf4rf5bX673+53+p1+t9/t9/q9fp/f5/f7/f6AP+AP+oP+kD/kD/uvfLr/2h/x3/ij/lt/zH/nj/vv/Ql/0p/yP/jT/kd/xp/15/xP/rz/2V/wv/iLPvjxibcTExLvJCYm3k1MSkxOTElMTUxLTE/MSLyXmJmYlZideD8xJ/FBYm5iXmJ+YkFiYeLDxKLE4sSSxEeJpYmPE8sSyxMrEisTqxKrEyHk2x6HAqFgSIYbQqFwY0gLhUORUDT4UCwUDzeFEuHmUDLcEkqFW0PpcFsoE8qGcuGR0DA0Co1Dk9A0PBqahcdC89AitAyPh1bhidA6PBnahKdC2/B0aBeeCe3Ds6FDeC50DM+HTn9bcYWXQ5fQNXQL3UOP0DP0Cr1Dn9A39AuvhP7h1TAgvBYGhkFhcHg9DAlvhKHhzTAsDA8jwlthZBgVRocxYWwYF8aHt8OE8E6YGN4Nk8LkMCVMDdPC9DAjvBdmhllhdng/zAkfhLlhXpgfFoSF4cOwKCwOS8JHYWn4OCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDVsC5+E7WFH2Bl2hd1hT9gbPg37wmdhf/g8HAhfhIPhz+FQ+DIcDl+F9PB1OBK+CUfDt+FY+C4cD9+HE+FkOBV+CKfDj+FMOBvOhZ/C+fBzuBB+CRflO2tCCCGEEP8lPf9gf/d/8ZwBgL99kNADAK7ekTf9t/s1AGzK9dd2b5XaKgEAT3Xt+ODftsqVu3Xrdvm1yzREBecBQOIf3uByvBxawhPQBlpAiX85vt7qhfP8B/0nbwXI+pucFPg1/nv/+K/n31s9+viIRaXjczn+H/3PA0gr+GtOFvg1Xg4tL80GWkDJ/0v/uZv9wfizfDkeoPlvcrLBr/Gvx6c4PAZPQ5vfvVIIIYQQQgghhPir3qpc+z9aP19an6cC/H2FnBkAUs1f23+0PhdCCCGEEEIIIcSV9+wLnZ98tE2bFu2lIQ1pSOPvjSv9n0kIIYQQQgjxn/brRf+vz2W5kgMSQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCEyoN/86FcWAPhf+TmxKz1HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4kr7PwEAAP//lOcr+A==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000040), 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4020ae46, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008000001b00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x12002}, 0xc, &(0x7f0000000200)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x844}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xe0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000002c0)=0x30, 0x4) 3.707750273s ago: executing program 7 (id=5182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00 \x00'/15], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_rr_get_interval(r3, &(0x7f0000000180)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) capget(&(0x7f0000000040)={0x19980330, r6}, &(0x7f0000000100)={0x0, 0x1, 0x7, 0x5, 0x1ff, 0x1ff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x8000000000000001) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000093aac0d654b526bc551df8dd1d5408c46f960236c9c3dfcfae934d215850f7c109a17d6921b18eb4160c8431367bc77fecd26643ecf67a2cc8efe5c8427606f6927a709746e05c2d29629701caaf88eeb3edf98019e60ebd8c9284acdbed482b81c72d7134848a7865124da6cb06545af166b78977e4bd3aca6022410ee79f25d5c79123bebd394eccb3336904a5693c0f51da3e7bb3f13f32750f77063c240d3c6a1d5ee36f6f169dfd3d55e6d79ece50e7"], 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.564473096s ago: executing program 9 (id=5183): r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c6163746976655f6c6f67733d342c6a71666d743d766673763100006f896e6c696e655f646174612c757365725f78617474722c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c007a9c3781c551aad3da"], 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNJ07cmDR/HgfyIKnjz6N3jw7E08KOJFUDLvrHarBWGzG7f7+8Hkmfedd55532FZeGZCAji0lvNff87iTJyIiMWIOB1R7mfVVrqawgsRcTYiFh7Zsqr/r46jEXEyIs5Mk6ecWXXo8/OTc5d/euuXb747duTUF19/P79VA/P2YkQMNtL+g0GKRTfFu1V/c9Ir4+DSpIrpwOBe1S5SfNBZLzM8aG6Pa5bxYjeNLzbuj6bxTr/ZmsZu707ZvzFMFxxNutt5yhPuNjfLdruzXsbeqChj92Ga19bD9L/t4Wic8rSrfB+V6WM83o6pv7PVSevZuFfG1nBc9ae8RbuzNY2TKlaXi1bRb5fzWN/Nnf7/+i2LeLs3vL+VTzqbo14xzC/XGy/VG1dqjc2i3Rl3LtWag/aVS/lKtz8dVht3moOr3aLo9jv1VjFYzVe6rVat0chXrnXWe81h3mjUL9Yv1C6vVnvn89dvvpf32/nKNL7aG94f9/qj/E6xmaczVvO1+sWXV/NzjfydG7fyW7evX79x690Prr1/85Ubb75WDfrHtPKVtQtra7XGhdpaY3V39+BArf+TatIzXD/sSjbvCQAcPOp/YB72rv7fvB2x9/V/qP9n4kDVv4e9/t+D9cOuqP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6tH5a+fKPcWU7tU1X/M1XXc1U7i4iFiPjjXyzG0R05F6s8S08Yv/TYHL7NoswwvcaxajsZEVer7fdn9/ouAAAAwNPrq4/Pfpaq9fSxPO8JsZ/SQ5uF0x/OKF8WEUvLP84o28L04/kZJSv/vo/E1oyylQ+wjs8oWXrkdmRW2f6TxR3h+CMhS2Hh8TNmtloAAGBudlYC+1uFAAAAsJ8+feKRe/s6D/ZZFtuvMrffBZffvP/7Zd+J1PbqDwAAAA6ubN4TAAAAAPZcWf/7/T8AAAB4uqXf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9m5l9y0gTgOwH8bXOhLRVX3vUp3cIweocsuKw7QS3AEcoVcgDOQXY4QQYTHQSEiD+IxVqLvk+zBlvnNDI/FzEgDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpqlrOLv79/N82Z7NtJ09vAAAAgGPW1XJWv5ik68/N/a/Nre/NdRERZUQcG7sP4sNB5qDJqR55vnrQhsuIOmFXx6g5PkXEr3Rs41vXnwIAAAC8S8PdaTVfTNNoPZ0mfbeK1k74DtOkTfnld6aqi4ioJteZ0spd3o9MYfXvexh/M6XVE1jjTGFpym2YK+1F6r/7ftZufK8oUlE+/f5sfQcAAM5ocFCcdxQCAADAOf3puwF04eOzTxRxt5S5XwocpWJ8EGGxDwAAAN6uou8GAAAAAJ2rx/+n7P8X/ez/Fzf2/wMAAIBXS/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KV1tZyt5otp25zNtp08vQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCW/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB487u//J+YGmeSudfG0vNIsnZqbJ0ae+fG0R/G168BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7od7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527t83bioOAPizfb7+AMQR0A1BCCQGWOj1Wlq6IQZQxMCfgBSl1xJ65UebgVYVUhY2lLkLghEhJFDY+g8wdUNqpS5l63BDkVhYDtln55ymEhei2Jfk85Ge3/ccx+/7bCnK188JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlEbvTeMk23QmcVzsu/f41krW33+iz9zZeLCYtSyO6kz6YHil+iHqNpcIAAAAR0dS1vchhIfp5lLWx528/k/LY7Ka//vnJnFZzz9Z95d9Wftn7bdfH720NVBnMk520kurw8Hpnam09m+W8+35/zyilV/5/NlLkt+Q+MP1F0dpfj2jb+/efb+dh8fqyBYA+D9OlX0RlL8PZX2/ycQAODJalcK7rP+TTrM5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANRhtB6eKeMohLDYmsaZ+49vrTytv7PxYLFs52/f3qieMztFGkK4tDocnK5xLvPu+o2bV5aHw8G1+oNXQwhNjf5uMf0rH89wcAiNXJ/9Cv4Zj8e7+q7jzee8pyAubva85HMwggZ/KAEAcCilRcvq+ofp5lK2L1oIYfzD9vr/jUocZqz/H31y/l51rGr9369thvOvt3b1i971GzffWr26fHlwefDZ22f67/TPXjh37kIvf1bS88QEAACAvWkXrVr/xws71/9PVuIwY/3/5Xf9r6cj/ZFv1f87TRf9ms4EAADgaHvhtb//ip6yP2q3w1fLa2vX+pPt1uczk20Dqe7asaJV6/9koemsAAAAgDqM1qNt6/8XK3GYcf3/2R9f/rl6ziSEcKJY/z+18vnwYn3TmWt1/Dlx03MEAACgWSeKVl3/T/P3/+OtVx7iEMKbr0/i4t8AzlT/Jx9881N1rKTy/v/Z+qY4l+Lu5HrkfTeEVnfbl39vLDEAAAAOpeNFy4r9P9PNpU9/OflR2/v/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7NwAA//8nb0N3") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000fffffffffffffff70000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) fstatfs(r1, &(0x7f00000003c0)=""/219) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000000000000000000020300000002000000000000050000000000000000000000090200000000005f"], &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYRESHEX=r3, @ANYRESHEX, @ANYRESDEC=r0], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@errors_remount}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r6 = timerfd_create(0x1, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setreuid(0x0, 0xee00) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000480)={r9, r10, 0xc, 0x0, 0x0, 0xc, 0x96, 0x458, 0x6, 0x1, 0x1, 0x7, 'syz0\x00'}) fchmod(r8, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="200000000f090000ffffffff9400000002800000", @ANYRES32=r4, @ANYBLOB="010000000000000000000000006822003623541f0000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000000000000300"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.726345949s ago: executing program 0 (id=5185): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="15df326e3a7a99107b8f003728dcedc3e784b3ac9436fdd3474b66d82cab86c980dfc0f732fa6d5ad2d7d5cd65c45e0eccd4fbbfee69a05e82d74477729315c027816892618d53cb056d667c8aa7c24181518d93b2976e5b3e55afce6329"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0xe7e4, 0x42801) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYRES64=r0], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) (async, rerun: 64) r4 = eventfd2(0xffffffff, 0x1) (rerun: 64) write$eventfd(r4, &(0x7f0000000080)=0xffffffff00000000, 0x8) (async) read$eventfd(r4, &(0x7f0000000000), 0x8) syslog(0x0, &(0x7f0000000440)=""/43, 0x2b) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r6 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000000d40)=""/391, 0x187) 2.61108711s ago: executing program 0 (id=5186): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x204800, &(0x7f0000000280)=ANY=[], 0x1, 0x392, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000002080)={0x15d0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x5}, {0x4, 0x6}, {0x2, 0x7}, {}, {0x3, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {}, {0x7}, {0x3, 0x3}, {0x5, 0x4}, {0x3, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x8, 0x0, 0x5, 0x1, 0x1, 0x4a6]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x401, 0xab46, 0x3ff, 0x2, 0xf3ff, 0x6]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd00, 0xa, 0x4, 0x1, 0xd058, 0xfffc, 0x46, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x6, 0x5, 0x3ff, 0xfffb, 0xfffb, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb0eb, 0x0, 0x2, 0xfff, 0xc, 0x9, 0x3, 0x2]}}]}]}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x709}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7890, 0xf, 0x1, 0x4, 0x5b70, 0x2, 0xfff8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1000, 0x1cc0, 0x91e4, 0x5, 0x5, 0xff, 0x3a8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0xfff7, 0x1d, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x9}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x4}, {0x3, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x4}, {0x5, 0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x3, 0x4}, {0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x6, 0x4}, {0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0xa}, {}, {0x3, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff9, 0x9, 0x4, 0x5, 0x3ff, 0x400, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x1b, 0x9, 0x18, 0x36, 0xb, 0x1b, 0x12, 0x0, 0x15, 0x9]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10c, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xdf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4fc, 0x11d, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xf, 0x3ff, 0x7, 0x7, 0xfbff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xb6, 0x9, 0x7fff, 0x7, 0xfffa, 0x8, 0xf8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x4, 0x7, 0x1, 0x728, 0xfffb, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6a, 0x16, 0x57, 0x1, 0x5, 0xc, 0xc, 0xb, 0x60, 0x4, 0xc, 0x24, 0x3, 0xb, 0x12, 0x5, 0x9, 0x6, 0x2, 0x24, 0x9, 0x3, 0x5, 0xb, 0x12, 0x36, 0x2, 0x1f]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x8}, {0x1, 0x3}, {0x3}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x6}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x5, 0x24, 0xb, 0x12, 0x4, 0x2, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffc0, 0x2, 0x4, 0x5, 0x6, 0x400, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x9, 0x30, 0x4, 0xb, 0x16, 0x18, 0x12, 0xc, 0x2, 0x6c, 0x30, 0x5, 0x18, 0x6c, 0x0, 0x4, 0x30, 0x12, 0x4]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x9}, {0x5, 0x6}, {0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0xa}, {}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x5}, {0x7, 0x4}, {0x6, 0x9}, {}, {}, {0x7, 0x1}, {0x2, 0x6}, {0x5, 0x4}, {0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x3}, {0x2}, {0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc36, 0x0, 0x6, 0x5, 0x800, 0x100, 0x5, 0x8]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x3, 0x81, 0x15, 0x400, 0x1, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc96, 0x0, 0xaf, 0x6, 0x5, 0x18, 0x0, 0x7]}}]}]}]}, {0x4}, {0x260, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x3, 0x7, 0x80, 0x9, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x48, 0x5, 0x30, 0x60, 0x0, 0x3, 0x4, 0x6, 0x16, 0x1, 0x6, 0x9, 0x2a, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x36, 0x1, 0x3, 0x9, 0x9, 0x16, 0x9, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x26, 0x3ff, 0xfff, 0xffff, 0x9, 0x2, 0x4, 0x61]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x5}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0xa}, {0x3, 0x9}, {0x6}, {0x4, 0x8}, {}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x9}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x7}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe6, 0xfff, 0x81, 0xd95a, 0x1, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7, 0xa, 0x2, 0x100, 0x100, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x83e9, 0xc, 0x3, 0x2, 0x100, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0xff, 0xfffb, 0x1ff, 0x3, 0x8000, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x80, 0x8, 0x4, 0xb917, 0x8, 0x2ba, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1f, 0x9, 0x36, 0x36, 0x3, 0x18, 0x9, 0x16, 0x6c, 0x5, 0x74, 0x47, 0x18, 0x1b, 0x17, 0x9, 0x6, 0xc, 0x1, 0x4, 0x17]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x4}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x2}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcc2, 0x200, 0xfffd, 0x3, 0x5, 0x1, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff8, 0x3c, 0x8001, 0x3, 0x3, 0xa, 0x3]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x800, 0xf, 0x0, 0x6, 0x1ff, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x2, 0x9, 0x3, 0x0, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x0, 0x4, 0x400, 0x6, 0x80, 0xa9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8001, 0xdb8, 0x9, 0x0, 0x4, 0x9, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc0c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x16, 0x1b, 0x6, 0xc, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x0, 0x643, 0xe000, 0x81, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1a, 0x36, 0x12, 0xb, 0x3, 0x6e, 0x6c, 0x30, 0x1, 0x5, 0x5, 0x12, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xef}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x12, 0x60, 0x18, 0x9, 0x36, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x0, 0x30, 0x18, 0x1b, 0xc, 0x60, 0x6, 0x18, 0x18, 0x30, 0x36, 0x4, 0x0, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x9, 0x3, 0xc9, 0x0, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x8}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x1}, {0x6, 0x6}, {0x3}, {0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x1, 0xe}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x6, 0x80, 0x2, 0xea5, 0x8000, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x7c, 0x1, 0x5, 0x9, 0x18, 0x1, 0x9, 0x24, 0x9, 0xb, 0x9, 0xb, 0x4, 0x16, 0x30, 0x3, 0x5, 0xb, 0x5, 0x16, 0x16, 0x16, 0x4, 0x4, 0x4, 0x1b, 0x6c, 0x1b, 0x5, 0x63, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x4, 0x2, 0x4d, 0x24, 0x3, 0x9, 0x9, 0x6c, 0xb, 0x60, 0xb, 0x9, 0x6, 0x16, 0x6c, 0x6, 0x48, 0xb, 0x4, 0x5, 0x1, 0x2, 0x36, 0x12, 0xb, 0x16, 0x1, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1cf, 0x9, 0xfffe, 0x4, 0xfff9, 0x7, 0x1ab]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x36, 0x30, 0x5, 0x0, 0x1, 0x24, 0x1, 0x77f2c1deb9ea40b, 0x18, 0x4, 0x18, 0x5, 0x1, 0x6c, 0x6c, 0x6, 0x1, 0x0, 0x9, 0xc, 0x12, 0x3, 0x30, 0x48, 0x9, 0x4, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe1}]}, {0x4}, {0x5e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3b4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5c2, 0x3ff, 0x1ff, 0x5, 0x7ff, 0x7fff, 0x1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x24, 0x3b, 0x1, 0x0, 0x18, 0x16, 0x18, 0xb, 0x48, 0x3, 0x12, 0x9, 0x4, 0x18, 0x52, 0x1b, 0x60, 0x3, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x1000, 0x0, 0x1, 0x40, 0x4, 0x3b4f, 0x8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x9}, {}, {0x4, 0x8}, {0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x5, 0x9}, {}, {0x1}, {0x6, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x7, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x5}, {0x1, 0x7}, {0x5}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x6, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x1b, 0x48, 0x24, 0x30, 0x1b, 0x60, 0x1, 0x30, 0x1, 0x48, 0x56, 0x5, 0x9, 0x4, 0x48, 0x6c, 0xb, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x6c, 0x12, 0x30, 0x5, 0x6c, 0x6c, 0xc, 0x5, 0x24, 0x1b, 0x9, 0xc, 0x6c, 0x60, 0x60, 0xc, 0x24, 0x1b, 0x48, 0x18]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x16, 0x30, 0x12, 0x24, 0x12, 0x2, 0x16, 0x24, 0x4, 0x18, 0x0, 0x36, 0xc, 0x36, 0x5, 0x36, 0x4, 0xc3, 0x60, 0x60, 0x60, 0x24, 0x36, 0x2, 0xb]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8, 0x6, 0x8001, 0x9, 0x20, 0x5c, 0x6]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x4}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x9}, {0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x2}, {0x4}, {0x6, 0x6}, {0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xffff, 0x80, 0x3, 0x4, 0x7f, 0xd6, 0x7]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x1}, {0x2, 0xa}, {0x6, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x30, 0x1b, 0x3c, 0x6, 0xc, 0xb, 0x18, 0x1, 0x24, 0x9, 0x24, 0x48, 0x60, 0x1, 0xb, 0x2, 0x3, 0x4, 0x16, 0x18, 0x1b, 0x12, 0xc, 0x30, 0x36, 0xc, 0x12, 0x6c, 0x9, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x6, 0x6, 0x0, 0x7, 0x6, 0x4, 0x15ff]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x7}, {0x4, 0x3}, {0x3, 0x3}, {0x3}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xfffa, 0xf, 0x9, 0x6, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x7ff, 0x6, 0x6, 0x8, 0x0, 0x1, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x40, 0x8000, 0x40, 0x0, 0x9, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0xb, 0x16, 0x18, 0xc, 0x36, 0xb, 0x1c, 0x60, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x2, 0x7}, {0x7, 0x3}, {0x2}, {0x6, 0x7}, {0x4}, {0x1}, {0x2, 0x1}, {0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x7}, {0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0x9}, {0x4, 0x4}, {0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x5, 0x9}, {0x2, 0xd}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0xa}, {0x5, 0x3}, {0x5}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x8}, {}, {}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x8, 0xc10, 0x8001, 0xfffd, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc00, 0x2, 0x8001, 0x6, 0x53, 0x43b9, 0x9, 0xf]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x4, 0x18, 0xe, 0x12, 0x36, 0x3, 0x18, 0x12, 0x30, 0x16, 0x1b, 0x3, 0x18, 0x36, 0x0, 0x36, 0x18, 0x9, 0x18, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x9, 0xa64, 0x1ff, 0x6, 0x3, 0x2]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x3, 0x12, 0x18, 0x0, 0x48, 0x79, 0x60, 0x48, 0x3, 0x5, 0x1, 0x1, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd4, 0x48, 0x2, 0x3, 0x8, 0xfff9, 0xffff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x2, 0xc, 0x1b, 0xc, 0x3c, 0x36, 0x6, 0x9, 0x48, 0x12, 0xc, 0x12, 0x1b, 0x16, 0x30, 0x44, 0x4, 0x3, 0x36, 0x48, 0x24, 0x24, 0x14, 0xb, 0x16, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x401, 0x3ff, 0x4, 0x7f, 0x3, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x2}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x7, 0x401, 0x5, 0x2, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a, 0x1, 0xc264, 0x6, 0x3ff, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0xa}, {0x7, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0xa}, {0x3}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x1}, {0x5, 0x9}, {0x2}, {0x4, 0x2}, {0x7, 0x7}, {0x2, 0x9}, {0x5, 0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x3, 0x2}, {0x2, 0x2}, {0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x3}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0x1}, {0x3, 0x6}, {0x7}, {0x6, 0x6}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x23b1, 0xc23, 0x3, 0xfffe, 0x7, 0x8ed6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff8, 0x9, 0x2, 0x51, 0xed85, 0x100, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x30, 0x16, 0x5, 0x48, 0x2, 0x1b, 0x12, 0x1b, 0xc, 0x24, 0x5, 0xc, 0x18, 0x18, 0x1, 0x36, 0x1b, 0x2, 0x18, 0x5, 0xb, 0x1b, 0x60, 0x60, 0x30, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xffff, 0x8001, 0x6, 0x200, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x5}, {}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x8}, {}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x7}, {0x6, 0x6}, {0x5}, {0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x7}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x8001, 0xd3, 0x5, 0x9, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1, 0x81, 0x5, 0x7, 0x3, 0x5, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x5, 0x8a37, 0xb, 0x9, 0x1, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x100, 0x5, 0x5, 0x7d8, 0xd5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x2, 0x6c62, 0xb, 0xe702, 0xc893, 0xffff, 0x5]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x9}, {0x7, 0x4}, {0x6}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x9, 0x8001, 0x3, 0x5, 0x6, 0x81]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x408, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x83, 0x4, 0x81, 0x3, 0x2, 0x8, 0xb3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xdb39, 0x1000, 0xa62, 0xd, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0xa}, {}, {0x3, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x3, 0x2, 0x0, 0x8, 0x7, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8f, 0x3, 0xb8d0, 0x4, 0x1ff, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x12, 0x3, 0x6c, 0x7, 0x24, 0x6, 0x6c, 0x1b, 0x2, 0x48, 0x1, 0x30, 0x4, 0xb, 0x48, 0xb, 0x18, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x8, 0xd05, 0x7f, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x5, 0xc0, 0x100, 0x2, 0xfc2e, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xfff9, 0xb, 0x1, 0x9, 0xd9, 0x5]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x2, 0x12, 0x36, 0x2, 0x60, 0x60, 0x48, 0x5, 0x6, 0x2, 0x4, 0x2, 0x12, 0x6c, 0x6, 0x36, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x3}, {}, {0x6, 0x1}, {0x3, 0x6}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {}, {0x2, 0x8}, {0x7, 0x9}, {0x2}, {0x4, 0x2}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {}, {0x3, 0x3}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x1}, {0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x5, 0x11}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf03, 0x95f, 0x0, 0x7, 0x3, 0x1000, 0xff00, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1ff, 0x1, 0x180a, 0x9, 0xb27a, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x78, 0x6, 0x4, 0xc, 0x48, 0x0, 0x5, 0x1b, 0x1b, 0x1, 0x12, 0x1b, 0x5, 0x29, 0x1, 0xc, 0x3, 0x18, 0x3, 0x18, 0x3, 0x6, 0x16, 0x4, 0x60, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95ca, 0x1, 0xb307, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x6}, {0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x9}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x9}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x7}]}]}, @NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7f, 0x57, 0x8000, 0xd43, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x2}, {0x0, 0x13}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x5}, {0x1, 0x3}, {0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x4}, {0x5, 0x8}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x7}, {0x2, 0x7}, {0x6, 0x6}, {0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x2}, {0x1, 0x8}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x3}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0x1, 0x6, 0x638, 0x5, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x9}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0xa}, {0x2}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x5}, {0x6, 0x3}, {0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x4}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x5}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x9}, {0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {}, {0x5, 0x9}, {}, {0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {}, {0x3, 0xa}, {0x3, 0x5}, {}, {0x5, 0x8}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x7, 0x3}, {0x6, 0x5}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x60, 0x12, 0x2, 0x24, 0x3, 0x3, 0x6c, 0x48, 0x3, 0x4, 0x9, 0x6c, 0x18, 0x30, 0x48, 0x24, 0x3, 0x60, 0x6, 0x5, 0x9, 0x48, 0x0, 0x16]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x200, 0x0, 0x8, 0x6, 0x200, 0x1261]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x4756, 0x2, 0x1, 0x7, 0x3, 0xb5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x14, 0x3, 0x3, 0x6, 0xfc, 0xd9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x98, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}]}, 0x15d0}, 0x1, 0x0, 0x0, 0x10}, 0x40) futex(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x2) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xffffffffffffffdb, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:devpts_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0xffffff00, 0x0, 0x4, 0x2, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_hsr\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010105, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x53d) 2.594220231s ago: executing program 0 (id=5187): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x1, 0x8000000, 0x0, 0x4, 0x7, 0x0, 0x5, 0x9092, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001200)='sched_switch\x00', r8}, 0x18) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x2a, 0x0, 0x1}, 0x28) socket$netlink(0x10, 0x3, 0x0) 2.541960841s ago: executing program 7 (id=5188): r0 = socket(0x4, 0x80000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38c1009c7c0016003f8351d95bdfd855fb3ebdb8bae740e4008bca07d56ea71fbdea39ccb79f3f53861cf3945e38da876bad1e2b49be19bdf4e7d7e539b7893dab20cdca884594eda19bc1", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdbdf25810000000c009900000000006e0000000e003300c4000500ffffffffffff0000040067000a00060008021100000100003a00330094004400080211000000080211000000072000200100b6b0e86f6243641e00906800dcedc58c9b59cb5600306501783e179bcf4064310000"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000004c0)=""/161, &(0x7f00000002c0)=0xa1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xffff, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) (async) write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7d, 0x0, 0x0, "0022c9ff00"}) (async) syz_open_pts(r6, 0x54803) (async) r7 = dup3(r3, r6, 0x80000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) (async) ioctl$RTC_EPOCH_SET(r7, 0x4008700e, 0x7ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) (async) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") getpid() syz_open_dev$loop(0x0, 0xff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 2.428701443s ago: executing program 7 (id=5189): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x9}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f00000004c0)=""/194, 0x44, 0xc2, 0x1, 0x4, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93c8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a2560641263da4de1df32c1739d7fbee9aa241731ae9e0b3903a1cdb", 0x93, 0x1, 0x0, 0x0) 2.321224655s ago: executing program 7 (id=5190): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x558b, &(0x7f00000079c0)="$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") setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x3a, 0xcc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x14a4b4d80f2ae8ae, &(0x7f0000000a80)=ANY=[@ANYBLOB="636865636b3d7374726963742c726f6469722c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c696f636861727365743d6e6f6e652c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c657569643ca1112310764c6eab7260b54143700bde1132165e707ba3df1eb1b9f1d8cc23d459", @ANYRESDEC=0x0, @ANYBLOB=',subj_role=,\x00'], 0x3, 0x372, &(0x7f0000000b80)="$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") r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x21) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10) listen(r2, 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x18) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 2.262498766s ago: executing program 0 (id=5191): openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x681c2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) r6 = socket(0x1e, 0x5, 0x0) listen(r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r6, 0x0, 0x0, 0x0) 2.095277648s ago: executing program 9 (id=5192): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (rerun: 32) statfs(&(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 32) syz_clone(0x0, &(0x7f0000000240)="53f5057e70ef188b51a8f1053e9c91a63a12f907eec2cd212978bb5b73b6ff36ebc0a6a2f3e42de2c87971f852925ba9357a54bef8fe9b946f0eacd45ff2bd8286c16b51c4037b6444fb315d8411be97f0b48f1c3198f553", 0x58, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="d82b90508384e876d2822f4257a70356eb9421fb35848dc087") (rerun: 32) 1.9767955s ago: executing program 2 (id=5193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xffffffff, 0xad8, &(0x7f00000004c0)="01fbfc1ee6b68cdda742f51bfe2a58eea3a94fe0c0780714c1b4dbb80ee6fec007766318273cfa5b6d569086b2ae91deef4b5a43b85a1d1c356de530e42f1b411869708064a2c27ab65a292edbcc9a498042d8d16de7214b73cd06d253b7c187ee413eb428d86ceea927bd68623204bed8270ae9439aa4827868854a154f0a551e4580f8dca9b6ee90b48cf8e076df6bb9f4f0a4fe75f1bcc3bf37797fb03511966ef4abdc675530a81fbf140624d8"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffffffffff0}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.537989426s ago: executing program 7 (id=5194): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") creat(&(0x7f0000000080)='./file0\x00', 0x86) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) (async) r4 = socket(0x1e, 0x80004, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000004c0), 0x12) (async) fsopen(0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) (async) r9 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x9dc32000) (async) poll(&(0x7f0000000000)=[{r9, 0x1104}, {r0}, {r3, 0x3140}, {r2, 0x5423}, {r0}], 0x5, 0x0) (async) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = dup3(r9, r4, 0x0) recvmmsg(r10, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0xfffffffffffffc1}, 0xffffffff}], 0x1, 0x2001, 0x0) 1.33734309s ago: executing program 0 (id=5195): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x3, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64", 0x27}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000002000000127bd70000000000007002040000000070000000002000200fe88000000000000000000000000fe01dcfe0a000500000008000e00f8ffffffaa95c1f0afb624f900dde979d0faa1714ef2d29d795090aaebb2e4a053469ff935ee87825f9172e097ecd9d5fd7da6368760128cea45d06a1d22203516c68c426b2550b03b1ebf9ce52fbfc928838909afdf5d960f3a96fbcde3208c82a1705be180fec950811f654e3852da38670fab015cf5b90a6c09b937627f0433076a2d5705ed4b91a2af0aee46f8d3b3e506322903246c39e331d717253a979f8f216696c45406ab25561dc6064f"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000480), 0x4, 0x240180) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x4000200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0, {}, &(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000000180)=""/132, &(0x7f0000000280)=[0x0, 0x0], 0x2}, 0x58) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(r8, &(0x7f0000000440)='net/psched\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 1.112647363s ago: executing program 7 (id=5196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc8901, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x4) (async, rerun: 64) ioctl$TCFLSH(r3, 0x400455c8, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsmount(r1, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be43"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='f2fs_update_extent_tree_range\x00', 0xffffffffffffffff, 0x0, 0x521a}, 0x18) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4000084) (async) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB='read_timeout_ms=01']) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setrlimit(0x0, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) dup3(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.111717143s ago: executing program 2 (id=5197): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x20}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe9c}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6253, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0xd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xec9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0xfd}}}}}]}}]}}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2402}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x2, &(0x7f0000001500)=@string={0x2}}]}) 1.081577743s ago: executing program 9 (id=5198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x40000001, 0xfff, 0x6, 0x1, 0x7, 0x8000, 0x7}, {0xd, 0x1, 0x2, 0x2, 0x6, 0x3, 0x3ff}]}) (async) syz_emit_ethernet(0x53, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1d, 0x0, 0x0, @private2, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5a"}}}}}, 0x0) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x1}) (async) vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) write$UHID_INPUT(r5, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) r7 = syz_open_pts(r4, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x8) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 32) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00^\x00'], 0x24}], 0x1}, 0x0) 1.000871755s ago: executing program 0 (id=5199): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) openat$ashmem(0xffffffffffffff9c, 0x0, 0x2080, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x4090) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2ad4, 0x60004}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4008040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000080", @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000280)=ANY=[@ANYBLOB="eef6b346cc110f336d0104a15ea8c400"], 0x25, 0x365, &(0x7f0000000640)="$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") (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) recvfrom$unix(r3, &(0x7f0000000340)=""/227, 0xe3, 0x2, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000002480)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,checkpoint=disable,flush_merge,fault_injection=00000000000000001262,acl,active_logs=6,compress_mode=default,alloc_mode=default,compress_cache,checkpoint=disable,\x00'], 0x1, 0x5505, &(0x7f000000c240)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x81000) 800.835228ms ago: executing program 6 (id=5200): r0 = getpid() (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async, rerun: 32) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 715.982079ms ago: executing program 9 (id=5201): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet(0x2, 0xa, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 641.32398ms ago: executing program 6 (id=5202): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f00000000c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x70bd26, 0x25dfdbfe, {{@in6=@mcast2, 0x4d3, 0x3c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e20, 0x5bd4, 0x2, 0x80, 0xa0, 0x62}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e24, 0x7, 0xe, 0x0, 0xa, 0xa0, 0x0, 0x2c}, {0x5, 0x400, 0x8000000000000001, 0xd9, 0x9, 0xfff, 0x100000001, 0x6}, {0x56c, 0x2, 0x25, 0x1ff}, 0xe1c52da, 0x6e6bbd, 0x2, 0x0, 0x2, 0x2}, 0xf, 0x4, 0x6, 0x70bd2a}}, 0x128}, 0x1, 0x0, 0x0, 0x4008040}, 0x42084) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x80) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) chroot(0x0) 482.556803ms ago: executing program 6 (id=5203): getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000050, &(0x7f00000000c0)={[{@errors_remount}, {@nodiscard}, {@data_err_ignore}, {@init_itable}, {@jqfmt_vfsv0}, {@resgid={'resgid', 0x3d, r0}}, {@norecovery}, {@delalloc}, {@quota}]}, 0x10, 0x4e0, &(0x7f0000000400)="$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") ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x130000, 0x0, [0x7, 0x7e, 0x62, 0x9, 0x1, 0x2, 0x5, 0x8]}) lchown(&(0x7f0000000b40)='./file1\x00', 0xee00, 0x0) 0s ago: executing program 6 (id=5204): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x1, [@generic={0x2e, 0x10, 0x4, "22390dd20b499b59badf67a0b5cc6d1744bedca98ec667302b9497da9b07c0d499914f933e5735e5317081"}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xff], [0xffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'wlan0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xf, 0x2, 0x3, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x2) unshare(0x400) r6 = epoll_create1(0x0) fcntl$setstatus(r6, 0x4, 0x42000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x9}, {0x28, 0x1, 0x20, 0xbffff038}, {0x6, 0x6, 0x0, 0x10009}]}, 0x10) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0x9ffc) kernel console output (not intermixed with test programs): R11: 1ffff1103ee0a5f7 R12: ffff88814b9e8000 [ 588.282455][T16432] bridge0: port 3(vlan2) entered disabled state [ 588.291057][T16427] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888114960800 [ 588.296911][ T2109] usb 9-1: Using ep0 maxpacket: 8 [ 588.305019][T16427] FS: 00007f90875fa6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 588.310312][T16432] device vlan2 entered promiscuous mode [ 588.319048][T16427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.324592][T16432] bridge0: mtu less than device minimum [ 588.337077][T16427] CR2: 0000000000000000 CR3: 000000012faa7000 CR4: 00000000003526a0 [ 588.345205][ T2109] usb 9-1: no configurations [ 588.349979][ T2109] usb 9-1: can't read configurations, error -22 [ 588.349989][T16427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.350005][T16427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 588.373049][T16427] Call Trace: [ 588.376457][T16427] ? __fdget+0x1a1/0x230 [ 588.380739][T16427] resolve_pseudo_ldimm64+0x526/0x1020 [ 588.386351][T16427] ? bpf_check+0xd720/0xd720 [ 588.391025][T16427] ? kvmalloc_node+0x88/0x130 [ 588.395796][T16427] bpf_check+0x8db4/0xd720 [ 588.400248][T16427] ? bpf_get_btf_vmlinux+0x60/0x60 [ 588.405583][T16427] ? 0xffffffffa0018000 [ 588.409747][T16427] ? is_bpf_text_address+0x177/0x190 [ 588.415054][T16427] ? selinux_bpf_prog_alloc+0x51/0x140 [ 588.420635][T16427] ? __kernel_text_address+0xa0/0x100 [ 588.426173][T16427] ? unwind_get_return_address+0x4d/0x90 [ 588.427517][T10039] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 7 proto 3 vid 0x0525 pid 0xA4A8 [ 588.431900][T16427] ? stack_trace_save+0xe0/0xe0 [ 588.444035][T10039] usb 10-1: USB disconnect, device number 39 [ 588.448138][T16427] ? arch_stack_walk+0xee/0x140 [ 588.458087][T10039] usblp0: removed [ 588.458839][T16427] ? stack_trace_save+0x98/0xe0 [ 588.467040][T16427] ? stack_trace_snprint+0xf0/0xf0 [ 588.472210][T16427] ? __kasan_slab_alloc+0x69/0xf0 [ 588.477286][T16427] ? pcpu_block_update+0x53b/0x900 [ 588.482447][T16427] ? selinux_bpf_prog_alloc+0x51/0x140 [ 588.487966][T16427] ? __kasan_kmalloc+0xec/0x110 [ 588.492837][T16427] ? __kasan_kmalloc+0xda/0x110 [ 588.497744][T16427] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 588.503372][T16427] ? selinux_bpf_prog_alloc+0x51/0x140 [ 588.508883][T16427] ? security_bpf_prog_alloc+0x62/0x90 [ 588.514339][T16427] ? bpf_prog_load+0x949/0x1420 [ 588.519257][ T2109] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 588.519396][T16427] ? __se_sys_bpf+0x442/0x680 [ 588.531573][T16427] ? __x64_sys_bpf+0x7b/0x90 [ 588.536200][T16427] ? do_syscall_64+0x31/0x40 [ 588.540844][T16427] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 588.546985][T16427] ? memset+0x35/0x40 [ 588.551046][T16427] ? bpf_obj_name_cpy+0x193/0x1e0 [ 588.556093][T16427] bpf_prog_load+0xf5a/0x1420 [ 588.560779][T16427] ? avc_has_perm+0x1ca/0x360 [ 588.565563][T16427] ? map_freeze+0x320/0x320 [ 588.570074][T16427] ? selinux_bpf+0xc7/0xf0 [ 588.574469][T16427] ? security_bpf+0x82/0xa0 [ 588.579073][T16427] __se_sys_bpf+0x442/0x680 [ 588.583588][T16427] ? __x64_sys_bpf+0x90/0x90 [ 588.588236][T16427] ? fpu__clear_all+0x20/0x20 [ 588.592959][T16427] ? __se_sys_ioctl+0x184/0x1a0 [ 588.598228][T16427] __x64_sys_bpf+0x7b/0x90 [ 588.602636][T16427] do_syscall_64+0x31/0x40 [ 588.607124][T16427] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 588.613021][T16427] RIP: 0033:0x7f9088f91929 [ 588.617535][ T2109] usb 9-1: Using ep0 maxpacket: 8 [ 588.622612][T16427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.642345][T16427] RSP: 002b:00007f90875fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 588.650864][T16427] RAX: ffffffffffffffda RBX: 00007f90891b8fa0 RCX: 00007f9088f91929 [ 588.658993][ T2109] usb 9-1: no configurations [ 588.659029][T16427] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 588.663593][ T2109] usb 9-1: can't read configurations, error -22 [ 588.663675][ T2109] usb usb9-port1: unable to enumerate USB device [ 588.672425][T16427] RBP: 00007f9089013b39 R08: 0000000000000000 R09: 0000000000000000 [ 588.692407][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.700474][T16427] R13: 0000000000000000 R14: 00007f90891b8fa0 R15: 00007ffccfe06e28 [ 588.708610][T16427] ---[ end trace 650ec1a1d9600bd9 ]--- [ 590.082886][T16478] SELinux: failed to load policy [ 590.144735][ T297] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 590.245520][T16484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16484 comm=syz.9.4446 [ 590.384757][ T297] usb 4-1: Using ep0 maxpacket: 8 [ 590.504837][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.524723][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.544725][ T297] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 590.574735][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.589544][ T297] usb 4-1: config 0 descriptor?? [ 590.954896][ T24] kauditd_printk_skb: 479 callbacks suppressed [ 590.954931][ T24] audit: type=1400 audit(2000002992.771:211682): avc: denied { map_create } for pid=16492 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.007900][T16499] EXT4-fs (loop4): Test dummy encryption mode enabled [ 591.071294][T16499] EXT4-fs error (device loop4): __ext4_iget:5007: inode #11: block 1: comm syz.4.4452: invalid block [ 591.088685][T16499] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.4452: couldn't read orphan inode 11 (err -117) [ 591.111891][ T297] arvo 0003:1E7D:30D4.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 591.124815][T16499] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 591.635304][ T24] audit: type=1400 audit(2000002992.771:211683): avc: denied { bpf } for pid=16492 comm="syz.4.4452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.736011][ T24] audit: type=1400 audit(2000002992.771:211684): avc: denied { map_read map_write } for pid=16492 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.789847][ T24] audit: type=1400 audit(2000002992.771:211685): avc: denied { prog_load } for pid=16492 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.814844][ T297] arvo 0003:1E7D:30D4.0033: couldn't init struct arvo_device [ 591.824435][ T297] arvo 0003:1E7D:30D4.0033: couldn't install keyboard [ 591.830360][ T24] audit: type=1400 audit(2000002992.781:211686): avc: denied { perfmon } for pid=16492 comm="syz.4.4452" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.834789][ T297] arvo: probe of 0003:1E7D:30D4.0033 failed with error -71 [ 591.859169][ T24] audit: type=1400 audit(2000002992.781:211687): avc: denied { prog_run } for pid=16492 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.880734][ T297] usb 4-1: USB disconnect, device number 21 [ 591.882383][ T24] audit: type=1400 audit(2000002992.791:211688): avc: denied { prog_load } for pid=16492 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.906731][ T24] audit: type=1400 audit(2000002992.791:211689): avc: denied { bpf } for pid=16492 comm="syz.4.4452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.928313][ T24] audit: type=1400 audit(2000002992.791:211690): avc: denied { perfmon } for pid=16492 comm="syz.4.4452" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.964930][ T24] audit: type=1400 audit(2000002992.801:211691): avc: denied { read write } for pid=16492 comm="syz.4.4452" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.017273][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4458'. [ 592.512152][T16544] fuse: Bad value for 'fd' [ 592.520468][T16544] netlink: 'syz.3.4464': attribute type 12 has an invalid length. [ 592.671087][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4467'. [ 592.680648][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4467'. [ 592.693079][T16551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16551 comm=syz.3.4467 [ 593.067138][T16563] device pim6reg1 entered promiscuous mode [ 593.143542][T16565] blk_update_request: I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 593.154757][T16565] FAT-fs (loop19): unable to read boot sector [ 593.191889][T16570] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4472'. [ 593.201042][T16570] netlink: 112 bytes leftover after parsing attributes in process `syz.9.4472'. [ 593.274903][T16574] syz.9.4474[16574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.274971][T16574] syz.9.4474[16574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.297200][T16574] 9pnet: Insufficient options for proto=fd [ 594.184777][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 594.284116][T16611] tipc: Started in network mode [ 594.289036][T16611] tipc: Own node identity ac14140f, cluster identity 4711 [ 594.296249][T16611] tipc: New replicast peer: 0.0.255.255 [ 594.301865][T16611] tipc: Enabled bearer , priority 10 [ 594.349385][T16613] device pim6reg1 entered promiscuous mode [ 594.856884][T16624] netlink: 'syz.8.4491': attribute type 4 has an invalid length. [ 595.414752][T10033] tipc: 32-bit node address hash set to f1414ac [ 595.638085][T16648] F2FS-fs (loop4): invalid crc value [ 595.646142][T16648] F2FS-fs (loop4): Found nat_bits in checkpoint [ 595.672547][T16648] F2FS-fs (loop4): Start checkpoint disabled! [ 595.680230][T16648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 596.074781][ T24] kauditd_printk_skb: 722 callbacks suppressed [ 596.074803][ T24] audit: type=1400 audit(2000002998.011:212414): avc: denied { map_create } for pid=16667 comm="syz.8.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 596.103819][ T24] audit: type=1400 audit(2000002998.021:212415): avc: denied { map_read map_write } for pid=16667 comm="syz.8.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 596.497387][ T24] audit: type=1400 audit(2000002998.461:212416): avc: denied { read write } for pid=16111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.526153][ T24] audit: type=1400 audit(2000002998.461:212417): avc: denied { read write open } for pid=16111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.552059][ T24] audit: type=1400 audit(2000002998.461:212418): avc: denied { ioctl } for pid=16111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.581297][ T24] audit: type=1400 audit(2000002998.461:212419): avc: denied { read write } for pid=16673 comm="syz.3.4504" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.605520][ T24] audit: type=1400 audit(2000002998.461:212420): avc: denied { open } for pid=16673 comm="syz.3.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.629811][ T24] audit: type=1400 audit(2000002998.461:212421): avc: denied { module_request } for pid=16673 comm="syz.3.4504" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 596.651664][ T24] audit: type=1400 audit(2000002998.541:212422): avc: denied { read write } for pid=15227 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.679219][ T24] audit: type=1400 audit(2000002998.541:212423): avc: denied { read write open } for pid=15227 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.900038][T16689] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.911992][T16689] bridge_slave_0: FDB only supports static addresses [ 597.047816][ T297] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 597.214856][ T2109] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 597.295095][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 597.324827][ T297] usb 10-1: device descriptor read/64, error -71 [ 597.605217][ T2109] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.624874][ T2109] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.638112][ T2109] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 597.647999][ T2109] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.657743][ T2109] usb 9-1: config 0 descriptor?? [ 597.697175][T16699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 597.706569][T16699] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.718660][ T297] usb 10-1: device descriptor read/64, error -71 [ 597.994726][ T297] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 598.125911][ T2109] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 598.139871][ T2109] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 598.274755][ T297] usb 10-1: device descriptor read/64, error -71 [ 598.311217][T16706] incfs: Options parsing error. -22 [ 598.316820][T16706] incfs: mount failed -22 [ 598.344868][ T2109] cp2112 0003:10C4:EA90.0034: Part Number: 0x82 Device Version: 0xFE [ 599.020300][T16718] FAT-fs (loop4): Unrecognized mount option "rods1xfloppy" or missing value [ 599.813060][T16723] netlink: 'syz.7.4517': attribute type 4 has an invalid length. [ 600.169436][T16730] syz.8.4519[16730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.169508][T16730] syz.8.4519[16730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.235199][ T2109] cp2112 0003:10C4:EA90.0034: error setting SMBus config [ 600.255557][ T2109] cp2112: probe of 0003:10C4:EA90.0034 failed with error -71 [ 600.266047][ T2109] usb 9-1: USB disconnect, device number 45 [ 600.354572][T16748] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 600.394153][T16748] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4525: bg 0: block 234: padding at end of block bitmap is not set [ 600.666332][T16765] EXT4-fs (loop4): Mount option "dax=always" incompatible with ext2 [ 601.123884][ T24] kauditd_printk_skb: 457 callbacks suppressed [ 601.123897][ T24] audit: type=1400 audit(2000003003.081:212878): avc: denied { read write } for pid=15268 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.156902][ T24] audit: type=1400 audit(2000003003.081:212879): avc: denied { open } for pid=15268 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.181470][ T24] audit: type=1400 audit(2000003003.081:212880): avc: denied { ioctl } for pid=15268 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.227877][ T24] audit: type=1400 audit(2000003003.101:212881): avc: denied { read write } for pid=16770 comm="syz.8.4532" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.252723][ T24] audit: type=1400 audit(2000003003.101:212882): avc: denied { read write open } for pid=16770 comm="syz.8.4532" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.279581][ T24] audit: type=1400 audit(2000003003.101:212883): avc: denied { ioctl } for pid=16770 comm="syz.8.4532" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.305643][ T24] audit: type=1400 audit(2000003003.101:212884): avc: denied { read write } for pid=16770 comm="syz.8.4532" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 601.330790][ T24] audit: type=1400 audit(2000003003.101:212885): avc: denied { open } for pid=16770 comm="syz.8.4532" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 601.370605][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4536'. [ 601.379839][ T24] audit: type=1400 audit(2000003003.101:212886): avc: denied { mounton } for pid=16770 comm="syz.8.4532" path="/88/file0" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 601.413947][T16774] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 601.434841][ T24] audit: type=1400 audit(2000003003.101:212887): avc: denied { mount } for pid=16770 comm="syz.8.4532" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 601.463179][T16774] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.486586][T16786] netlink: 'syz.8.4538': attribute type 6 has an invalid length. [ 601.579184][T16774] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.4533: Failed to acquire dquot type 0 [ 601.808677][T16796] SELinux: security_context_str_to_sid(ÿ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 603.064731][ T297] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 603.141146][T16820] fuse: Bad value for 'fd' [ 603.260042][T16828] x_tables: duplicate underflow at hook 3 [ 603.304775][ T297] usb 4-1: Using ep0 maxpacket: 16 [ 603.374313][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4552'. [ 603.425087][ T297] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 603.433286][ T297] usb 4-1: config 0 has no interface number 0 [ 603.450244][ T297] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 603.470340][ T297] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 604.516202][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 604.634749][ T297] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 604.643849][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.651912][ T297] usb 4-1: Product: syz [ 604.656097][ T297] usb 4-1: Manufacturer: syz [ 604.660696][ T297] usb 4-1: SerialNumber: syz [ 604.666614][ T297] usb 4-1: config 0 descriptor?? [ 604.675342][T16862] input: syz1 as /devices/virtual/input/input64 [ 605.104581][T16814] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 605.213231][T16814] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 605.244133][T16865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4560'. [ 605.254024][T16865] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4560'. [ 605.519211][T16814] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 605.526636][T16814] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 605.576333][T16870] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 605.744621][T16814] udc-core: couldn't find an available UDC or it's busy [ 605.752007][T16814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 605.765126][ T297] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 605.778953][ T297] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 605.791120][ T297] asix: probe of 4-1:0.251 failed with error -5 [ 605.798940][ T297] usb 4-1: USB disconnect, device number 22 [ 605.867468][T16876] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 606.188914][ T24] kauditd_printk_skb: 494 callbacks suppressed [ 606.188928][ T24] audit: type=1326 audit(2000003008.141:213380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16866 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7fd618b19 code=0x7fc00000 [ 606.225624][T16898] binder: 16897:16898 ioctl 4018620d 0 returned -22 [ 606.234169][ T24] audit: type=1326 audit(2000003008.141:213381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16866 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa7fd618bdf code=0x7fc00000 [ 606.262544][ T24] audit: type=1326 audit(2000003008.141:213382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16866 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa7fd67c929 code=0x7fc00000 [ 606.333446][ T24] audit: type=1400 audit(2000003008.151:213383): avc: denied { read write } for pid=16111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.401500][ T24] audit: type=1400 audit(2000003008.151:213384): avc: denied { read write open } for pid=16111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.433843][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4571'. [ 606.459196][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4571'. [ 606.464718][ T24] audit: type=1400 audit(2000003008.151:213385): avc: denied { ioctl } for pid=16111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.494099][T16909] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4571'. [ 606.521751][T16912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.528884][T16914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.534788][ T24] audit: type=1400 audit(2000003008.181:213386): avc: denied { read } for pid=16897 comm="syz.3.4568" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 606.535539][T16912] audit: audit_lost=2749 audit_rate_limit=0 audit_backlog_limit=64 [ 606.573577][T16918] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4574'. [ 606.585532][T14231] Bluetooth: hci0: Frame reassembly failed (-84) [ 606.592043][ T3660] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 606.824751][ T297] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 607.094733][ T297] usb 4-1: device descriptor read/64, error -71 [ 607.804745][ T297] usb 4-1: device descriptor read/64, error -71 [ 608.006502][T16961] F2FS-fs (loop4): Zoned block device path is missing [ 608.013354][T16961] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 608.022812][T16961] F2FS-fs (loop4): invalid crc value [ 608.029878][T16961] F2FS-fs (loop4): Found nat_bits in checkpoint [ 608.048490][T16961] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 608.055625][T16961] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 608.074792][ T297] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 608.236370][T16976] EXT4-fs (loop4): Ignoring removed oldalloc option [ 608.243025][T16976] EXT4-fs (loop4): Invalid want_extra_isize 129 [ 608.344767][ T297] usb 4-1: device descriptor read/64, error -71 [ 608.594987][T10033] Bluetooth: hci0: command 0x1003 tx timeout [ 608.601717][ T3150] Bluetooth: hci0: sending frame failed (-49) [ 608.732487][T16979] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,nobarrier,init_itable,,errors=continue [ 609.169653][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4589'. [ 609.462484][T16990] device wg2 entered promiscuous mode [ 609.895430][T16997] loop4: p1 p3 < p5 p6 > [ 609.901382][T16997] loop4: p5 size 67045128 extends beyond EOD, truncated [ 609.954825][ T297] usb 4-1: device descriptor read/64, error -71 [ 610.074816][ T297] usb usb4-port1: attempt power cycle [ 610.484759][ T297] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 610.574809][ T297] usb 4-1: Using ep0 maxpacket: 16 [ 610.684732][T10033] Bluetooth: hci0: command 0x1001 tx timeout [ 610.690795][ T3150] Bluetooth: hci0: sending frame failed (-49) [ 610.695147][ T297] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 610.705190][ T297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.715496][ T297] usb 4-1: config 1 has no interface number 0 [ 610.721605][ T297] usb 4-1: config 1 interface 214 has no altsetting 0 [ 610.895279][ T297] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 610.905663][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.913849][ T297] usb 4-1: Product: syz [ 610.922256][ T297] usb 4-1: Manufacturer: syz [ 610.928329][ T297] usb 4-1: SerialNumber: syz [ 610.995405][ T297] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 611.199252][ T297] usb 4-1: USB disconnect, device number 25 [ 611.598067][ T24] kauditd_printk_skb: 389 callbacks suppressed [ 611.598080][ T24] audit: type=1400 audit(2000003526.566:213773): avc: denied { read write } for pid=15125 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.651068][ T24] audit: type=1400 audit(2000003526.566:213774): avc: denied { open } for pid=15125 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.675709][ T24] audit: type=1400 audit(2000003526.566:213775): avc: denied { ioctl } for pid=15125 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.701809][ T24] audit: type=1400 audit(2000003526.596:213776): avc: denied { read write } for pid=10447 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.754387][ T24] audit: type=1400 audit(2000003526.596:213777): avc: denied { open } for pid=10447 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.809186][ T24] audit: type=1400 audit(2000003526.596:213778): avc: denied { ioctl } for pid=10447 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.819123][T17031] syz.9.4605[17031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.837502][T17031] syz.9.4605[17031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.838157][ T24] audit: type=1400 audit(2000003526.606:213779): avc: denied { prog_load } for pid=17019 comm="syz.4.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 611.861024][T17031] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.879872][ T24] audit: type=1400 audit(2000003526.606:213780): avc: denied { bpf } for pid=17020 comm="syz.9.4601" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 611.907417][ T24] audit: type=1400 audit(2000003526.606:213781): avc: denied { perfmon } for pid=17020 comm="syz.9.4601" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 611.933084][T17029] SELinux: ebitmap start bit (17) is not a multiple of the map unit size (64) [ 611.945301][T17029] SELinux: failed to load policy [ 611.997754][T17037] fuse: Unknown parameter 'rooÚÞlúe' [ 612.028718][T17043] incfs: Error accessing: ./file0. [ 612.034046][T17043] incfs: mount failed -20 [ 612.436286][T17049] F2FS-fs (loop4): Zoned block device path is missing [ 612.443167][T17049] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 612.451426][T17049] F2FS-fs (loop4): Unrecognized mount option " 9*.h [ 612.451426][T17049] ægŠƒjÍXTâB [ 612.451426][T17049] ê$Z|&Þ@ÀA‘ŸáFˆH‰®ÚÀVÂ…+' [ 612.451426][T17049] xDŒª´SÂ}Úú(Hq÷;€Gø±ÿÜZŠ" or missing value [ 613.379287][T10037] Bluetooth: hci0: command 0x1009 tx timeout [ 613.990661][T17091] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 614.052524][T17095] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 614.089084][T17099] IPv6: Can't replace route, no match found [ 614.266996][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.274356][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.282813][T17101] device bridge_slave_0 entered promiscuous mode [ 614.290832][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.298231][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.309847][T17101] device bridge_slave_1 entered promiscuous mode [ 614.372481][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.379721][T17101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.387052][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.394088][T17101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.427184][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.435824][T14231] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.443314][T14231] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.457201][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.476601][T14231] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.483667][T14231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.500328][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.509090][T14231] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.516170][T14231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.560646][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.569947][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.763193][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.814768][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 614.888801][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.918387][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.971304][T17101] device veth0_vlan entered promiscuous mode [ 614.992243][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.994544][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.047131][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.048139][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.061330][T17101] device veth1_macvtap entered promiscuous mode [ 615.079459][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 615.111588][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.120583][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.132160][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.140691][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.226119][T17127] EXT4-fs (loop6): Ignoring removed bh option [ 615.237117][T17127] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue [ 616.799643][ T24] kauditd_printk_skb: 620 callbacks suppressed [ 616.799655][ T24] audit: type=1400 audit(2000003531.766:214400): avc: denied { read write } for pid=17101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.831854][ T24] audit: type=1400 audit(2000003531.766:214401): avc: denied { open } for pid=17101 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.857377][ T24] audit: type=1400 audit(2000003531.766:214402): avc: denied { ioctl } for pid=17101 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.883498][ T24] audit: type=1400 audit(2000003531.776:214403): avc: denied { map_create } for pid=17175 comm="syz.6.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 616.903191][ T24] audit: type=1400 audit(2000003531.776:214404): avc: denied { perfmon } for pid=17175 comm="syz.6.4646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 616.927805][ T24] audit: type=1400 audit(2000003531.776:214405): avc: denied { map_read map_write } for pid=17175 comm="syz.6.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 616.948117][ T24] audit: type=1400 audit(2000003531.776:214406): avc: denied { prog_load } for pid=17175 comm="syz.6.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 616.967624][ T24] audit: type=1400 audit(2000003531.776:214407): avc: denied { bpf } for pid=17175 comm="syz.6.4646" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 616.989664][ T24] audit: type=1400 audit(2000003531.796:214408): avc: denied { prog_run } for pid=17175 comm="syz.6.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 617.010956][ T24] audit: type=1400 audit(2000003531.826:214409): avc: denied { bpf } for pid=17175 comm="syz.6.4646" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.666131][T17225] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 618.682733][T17225] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,i_version,noload,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,lazytime,dioread_nolock,,errors=continue [ 618.713680][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'. [ 618.867919][T17232] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4660'. [ 619.688035][T17248] EXT4-fs (loop6): Ignoring removed orlov option [ 619.694545][T17248] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 619.705263][ T297] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 619.732678][T17248] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x000000000000007c,orlov,nogrpid,nodiscard,nomblk_io_submit,,errors=continue [ 620.566062][T17279] netlink: 'syz.6.4671': attribute type 12 has an invalid length. [ 620.587805][T17285] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:0:5efe:253.127.26.154 [ 620.620270][T17283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 620.645138][ T297] usb 9-1: unable to get BOS descriptor or descriptor too short [ 620.650494][T17283] EXT4-fs (loop4): 1 truncate cleaned up [ 620.659624][T17283] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,errors=remount-ro, [ 620.685299][ T297] usb 9-1: not running at top speed; connect to a high speed hub [ 620.785169][ T297] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 620.798474][ T297] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 620.814315][T17334] xt_bpf: check failed: parse error [ 620.831354][ T297] usb 9-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.848818][ T297] usb 9-1: config 1 interface 0 has no altsetting 0 [ 620.929326][T17355] 9pnet: Insufficient options for proto=fd [ 620.958059][T17359] xt_hashlimit: max too large, truncated to 1048576 [ 621.004841][ T2109] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 621.024894][ T297] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.034066][ T297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.042126][ T297] usb 9-1: Product: syz [ 621.046433][ T297] usb 9-1: Manufacturer: syz [ 621.051027][ T297] usb 9-1: SerialNumber: syz [ 621.075142][T17232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 621.082140][T17232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 621.244757][ T2109] usb 7-1: Using ep0 maxpacket: 16 [ 621.334597][T17364] xt_bpf: check failed: parse error [ 621.364842][ T2109] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.376099][ T297] usb 9-1: bad CDC descriptors [ 621.381842][ T297] usb 9-1: USB disconnect, device number 46 [ 621.388585][ T2109] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.399035][ T2109] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 621.408152][ T2109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.417215][ T2109] usb 7-1: config 0 descriptor?? [ 621.584278][T17372] xt_CT: No such helper "netbios-ns" [ 621.875406][ T24] kauditd_printk_skb: 785 callbacks suppressed [ 621.875420][ T24] audit: type=1400 audit(2000003536.846:215195): avc: denied { ioctl } for pid=17306 comm="syz.6.4678" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 622.154801][ T2109] usbhid 7-1:0.0: can't add hid device: -71 [ 622.160972][ T2109] usbhid: probe of 7-1:0.0 failed with error -71 [ 622.168432][ T2109] usb 7-1: USB disconnect, device number 13 [ 622.174405][ T24] audit: type=1400 audit(2000003537.136:215196): avc: denied { read write } for pid=15268 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.199815][ T24] audit: type=1400 audit(2000003537.136:215197): avc: denied { open } for pid=15268 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.225133][ T24] audit: type=1400 audit(2000003537.136:215198): avc: denied { ioctl } for pid=15268 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.251130][ T24] audit: type=1400 audit(2000003537.166:215199): avc: denied { map_create } for pid=17378 comm="syz.8.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 622.270684][ T24] audit: type=1400 audit(2000003537.186:215200): avc: denied { execmem } for pid=17378 comm="syz.8.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 622.660136][ T24] audit: type=1400 audit(2000003537.626:215201): avc: denied { prog_load } for pid=17383 comm="syz.9.4702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 622.684218][ T24] audit: type=1400 audit(2000003537.646:215202): avc: denied { bpf } for pid=17383 comm="syz.9.4702" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 622.710332][ T24] audit: type=1400 audit(2000003537.646:215203): avc: denied { bpf } for pid=17383 comm="syz.9.4702" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 622.735462][ T24] audit: type=1400 audit(2000003537.646:215204): avc: denied { perfmon } for pid=17383 comm="syz.9.4702" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 622.767944][T17384] netlink: 'syz.9.4702': attribute type 4 has an invalid length. [ 622.768829][T17386] incfs: Can't find or create .index dir in ./file0 [ 622.782700][T17386] incfs: mount failed -14 [ 622.893146][T17400] device ip6gre1 entered promiscuous mode [ 623.733183][T17420] fuseblk: Bad value for 'fd' [ 625.160450][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 626.105655][T17464] SELinux: failed to load policy [ 626.266700][T10039] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 626.325311][T17485] exfat: Unknown parameter '' [ 626.387919][T17469] netlink: 'syz.4.4725': attribute type 27 has an invalid length. [ 626.413275][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.514934][T10039] usb 9-1: Using ep0 maxpacket: 32 [ 626.634814][T10039] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 626.643538][T10039] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.664724][T10039] usb 9-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 626.684712][T10039] usb 9-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 626.693823][T10039] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 626.849739][T17512] cgroup: Unknown subsys name 'nofavordynmods' [ 626.874724][ T2109] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 626.885006][ T24] kauditd_printk_skb: 463 callbacks suppressed [ 626.885020][ T24] audit: type=1400 audit(2000003541.856:215668): avc: denied { ioctl } for pid=17449 comm="syz.8.4719" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.885294][T10039] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.925483][ T24] audit: type=1400 audit(2000003541.886:215669): avc: denied { ioctl } for pid=17507 comm="syz.6.4735" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.984870][T10039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.992985][T10039] usb 9-1: Product: syz [ 626.998364][T10039] usb 9-1: Manufacturer: syz [ 627.003086][T10039] usb 9-1: SerialNumber: syz [ 627.025338][ T24] audit: type=1400 audit(2000003541.996:215670): avc: denied { ioctl } for pid=17449 comm="syz.8.4719" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.105483][ T24] audit: type=1400 audit(2000003542.076:215671): avc: denied { create } for pid=17510 comm="syz.9.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.127343][ T24] audit: type=1400 audit(2000003542.096:215672): avc: denied { write } for pid=17510 comm="syz.9.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.148852][ T24] audit: type=1400 audit(2000003542.096:215673): avc: denied { read } for pid=17510 comm="syz.9.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.170309][ T24] audit: type=1400 audit(2000003542.116:215674): avc: denied { ioctl } for pid=17510 comm="syz.9.4736" path="socket:[76611]" dev="sockfs" ino=76611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.196313][ T2109] usb 7-1: Using ep0 maxpacket: 8 [ 627.201464][ T24] audit: type=1400 audit(2000003542.136:215675): avc: denied { write } for pid=17510 comm="syz.9.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.223903][ T24] audit: type=1400 audit(2000003542.186:215676): avc: denied { ioctl } for pid=17507 comm="syz.6.4735" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.249851][ T24] audit: type=1400 audit(2000003542.216:215677): avc: denied { ioctl } for pid=17507 comm="syz.6.4735" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.424809][ T2109] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.481614][T10039] usb 9-1: USB disconnect, device number 47 [ 628.359718][ T2109] usb 7-1: config 1 interface 0 has no altsetting 0 [ 628.423305][T17523] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 628.575054][ T2109] usb 7-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 628.588255][ T2109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.605560][ T2109] usb 7-1: Product: 툄籌ퟚî°ëµ‹ìš¬ë¢•㙆쓅ê‡å£¯ä›Œæ¡žw뉓ᑘ嗑뗡罰⪤áªì²¸ä§»á’Šà ´å–—壌칀뫄㌀éˆåªç§²ë¹‚㕗풞佤҅ê‡é©“ꉤ铳둳秋⮋è«á’šé£´å¼²ï¢‘ë‚°ë±©ì°™ìš…î½¸é’˜ì‘•êŒæ†‚꩟껇ᷖ拧屪íŒèŒêœ“釿箜Ԙâ«áµ•Ꙅꋧâ®ï§Œè¤žë‹Œæ¦žë»´ç„æ¶’ï±´à©ì‡¾çµ¿êŽ‹ç©¦å¨ [ 628.661598][ T2109] usb 7-1: Manufacturer: é¹¶à°å ‹ç´“ૢ䄾藦䊮ꢢ漊滆í™ä’ªåªå—–èŽï¹Šå„ï·ï¸¦ï‰Œå¬»å¤ºã‹•á£ì¡¬å˜¬ã“¹èµ¶à°»í‰¢î±„æ†ãœê½‹ìº·ïˆ°ãµ•硵ͪ䅢㓅ᑓꭋᇒﻵ龯ㇰ뮎í¶êš¢ì–®ä‡‘밯ï ç™œè™¬á„®å¢³ï»€á¨¡à¨‡â¹•뱨燷ᅛ [ 628.708050][ T2109] usb 7-1: SerialNumber: syz [ 628.864756][ T297] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 629.170510][T17534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4742'. [ 629.234815][ T297] usb 9-1: config index 0 descriptor too short (expected 4114, got 18) [ 629.255834][T17508] udc-core: couldn't find an available UDC or it's busy [ 629.262871][T17508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.394813][ T297] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 629.403907][ T297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.412276][ T297] usb 9-1: Product: syz [ 629.416463][ T297] usb 9-1: Manufacturer: syz [ 629.421038][ T297] usb 9-1: SerialNumber: syz [ 629.426825][ T297] usb 9-1: config 0 descriptor?? [ 629.444830][ T2109] usbhid 7-1:1.0: can't add hid device: -71 [ 629.450907][ T2109] usbhid: probe of 7-1:1.0 failed with error -71 [ 629.458285][ T2109] usb 7-1: USB disconnect, device number 14 [ 629.672241][T10039] usb 9-1: USB disconnect, device number 48 [ 629.970223][T17548] tipc: Started in network mode [ 629.975151][T17548] tipc: Own node identity ac14140f, cluster identity 4711 [ 629.982360][T17548] tipc: New replicast peer: 255.255.255.83 [ 629.987392][T17545] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 629.988321][T17548] tipc: Enabled bearer , priority 10 [ 629.997247][T17545] EXT4-fs (loop6): orphan cleanup on readonly fs [ 630.009161][T17545] EXT4-fs error (device loop6): __ext4_get_inode_loc:4438: comm syz.6.4746: Invalid inode table block 0 in block_group 0 [ 630.022551][T17545] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 630.032217][T17545] EXT4-fs error (device loop6): ext4_quota_write:6651: inode #3: comm syz.6.4746: mark_inode_dirty error [ 630.043722][T17545] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.4746: Failed to acquire dquot type 0 [ 630.055117][T17545] EXT4-fs error (device loop6): __ext4_get_inode_loc:4438: comm syz.6.4746: Invalid inode table block 0 in block_group 0 [ 630.067896][T17545] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 630.077443][T17545] EXT4-fs error (device loop6): ext4_ext_truncate:4448: inode #15: comm syz.6.4746: mark_inode_dirty error [ 630.088951][T17545] EXT4-fs error (device loop6): __ext4_get_inode_loc:4438: comm syz.6.4746: Invalid inode table block 0 in block_group 0 [ 630.101757][T17545] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 630.111266][T17545] EXT4-fs error (device loop6) in ext4_orphan_del:3292: Corrupt filesystem [ 630.120442][T17545] EXT4-fs error (device loop6): __ext4_get_inode_loc:4438: comm syz.6.4746: Invalid inode table block 0 in block_group 0 [ 630.133542][T17545] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 630.143167][T17545] EXT4-fs error (device loop6): ext4_truncate:4390: inode #15: comm syz.6.4746: mark_inode_dirty error [ 630.154706][T17545] EXT4-fs error (device loop6) in ext4_orphan_cleanup:3108: Corrupt filesystem [ 630.164454][T17545] EXT4-fs (loop6): 1 truncate cleaned up [ 630.170441][T17545] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 630.378685][T17567] fuse: Bad value for 'fd' [ 630.912055][ T297] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 631.114718][ T309] tipc: 32-bit node address hash set to f1414ac [ 631.534617][ T297] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 631.543711][ T297] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 632.120023][ T297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 632.129408][ T297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 632.140451][ T297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 632.197170][ T24] kauditd_printk_skb: 363 callbacks suppressed [ 632.197182][ T24] audit: type=1400 audit(2000003547.146:216039): avc: denied { prog_load } for pid=17583 comm="syz.9.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 632.236033][ T24] audit: type=1400 audit(2000003547.146:216040): avc: denied { bpf } for pid=17583 comm="syz.9.4758" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 632.267479][ T24] audit: type=1400 audit(2000003547.146:216041): avc: denied { perfmon } for pid=17583 comm="syz.9.4758" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 632.392656][ T24] audit: type=1400 audit(2000003547.146:216042): avc: denied { prog_run } for pid=17583 comm="syz.9.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 632.422984][ T24] audit: type=1400 audit(2000003547.156:216043): avc: denied { prog_load } for pid=17585 comm="syz.9.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 633.111075][ T24] audit: type=1400 audit(2000003547.156:216044): avc: denied { bpf } for pid=17585 comm="syz.9.4759" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 633.139320][ T24] audit: type=1400 audit(2000003547.156:216045): avc: denied { perfmon } for pid=17585 comm="syz.9.4759" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 633.166124][T17591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 633.192907][T17595] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4762'. [ 633.202701][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4762'. [ 633.258619][ T24] audit: type=1400 audit(2000003547.166:216046): avc: denied { prog_run } for pid=17585 comm="syz.9.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 633.294734][ T24] audit: type=1400 audit(2000003547.166:216047): avc: denied { create } for pid=17585 comm="syz.9.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 633.364741][ T24] audit: type=1400 audit(2000003547.166:216048): avc: denied { ioctl } for pid=17544 comm="syz.6.4746" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.392088][T17591] EXT4-fs (loop4): 1 truncate cleaned up [ 633.400176][T17591] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue [ 633.433392][ T297] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 633.442524][ T297] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 633.453101][ T297] usb 7-1: Product: syz [ 633.484797][ T297] usb 7-1: can't set config #1, error -71 [ 633.495770][ T297] usb 7-1: USB disconnect, device number 15 [ 634.122396][T17611] binfmt_misc: register: failed to install interpreter file ./file0 [ 634.197412][T17617] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 635.697759][T17639] overlayfs: unrecognized mount option "uuid=null" or missing value [ 635.722066][T17645] incfs: Can't find or create .index dir in ./file0 [ 635.731700][T17645] incfs: mount failed -14 [ 635.794780][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 635.991409][T17640] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.078534][T17640] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.103364][T17640] device bridge_slave_0 entered promiscuous mode [ 636.117348][T17640] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.266545][T17640] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.347229][T17640] device bridge_slave_1 entered promiscuous mode [ 636.704281][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4782'. [ 636.798076][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.807471][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.823611][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.832954][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.850411][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.857494][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.866432][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.875456][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.890389][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.897482][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.913207][T17676] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4786'. [ 636.935158][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4786'. [ 636.948243][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.956273][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.973843][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.994896][ T2104] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 637.042010][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.070730][T17640] device veth0_vlan entered promiscuous mode [ 637.084223][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.093032][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.101138][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.120896][T17674] F2FS-fs (loop6): invalid crc value [ 637.131758][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.140705][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.149926][T17640] device veth1_macvtap entered promiscuous mode [ 637.157927][T17674] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 637.162104][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.177744][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.186703][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.207491][ T24] kauditd_printk_skb: 365 callbacks suppressed [ 637.207504][ T24] audit: type=1400 audit(2000003552.176:216414): avc: denied { create } for pid=17680 comm="syz.9.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 637.238172][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.254882][ T2104] usb 9-1: Using ep0 maxpacket: 16 [ 637.268032][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.294555][T17674] F2FS-fs (loop6): Start checkpoint disabled! [ 637.307470][ T24] audit: type=1400 audit(2000003552.206:216415): avc: denied { ioctl } for pid=17680 comm="syz.9.4788" path="socket:[79032]" dev="sockfs" ino=79032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 637.337541][T17674] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 637.364570][ T24] audit: type=1400 audit(2000003552.226:216416): avc: denied { write } for pid=17680 comm="syz.9.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 637.374821][ T2104] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 637.401117][ T24] audit: type=1400 audit(2000003552.226:216417): avc: denied { prog_load } for pid=17680 comm="syz.9.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 637.421030][ T2104] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.434793][ T2104] usb 9-1: config 0 has no interface number 0 [ 637.440407][ T24] audit: type=1400 audit(2000003552.226:216418): avc: denied { bpf } for pid=17680 comm="syz.9.4788" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 637.517483][ T24] audit: type=1400 audit(2000003552.226:216419): avc: denied { perfmon } for pid=17680 comm="syz.9.4788" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 637.539397][ T24] audit: type=1400 audit(2000003552.226:216420): avc: denied { mounton } for pid=17640 comm="syz-executor" path="/root/syzkaller.rwqo3x/syz-tmp" dev="sda1" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 637.564162][ T24] audit: type=1400 audit(2000003552.226:216421): avc: denied { mount } for pid=17640 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 637.587136][ T24] audit: type=1400 audit(2000003552.226:216422): avc: denied { mounton } for pid=17640 comm="syz-executor" path="/root/syzkaller.rwqo3x/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 637.613030][ T24] audit: type=1400 audit(2000003552.226:216423): avc: denied { mount } for pid=17640 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 637.615130][ T2104] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 637.729044][T17695] attempt to access beyond end of device [ 637.729044][T17695] loop6: rw=10241, want=45104, limit=40427 [ 638.194959][ T2104] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.223719][ T2104] usb 9-1: Product: syz [ 638.234873][ T2104] usb 9-1: Manufacturer: syz [ 638.241443][ T2104] usb 9-1: SerialNumber: syz [ 638.258001][ T2104] usb 9-1: config 0 descriptor?? [ 638.279353][ T263] attempt to access beyond end of device [ 638.279353][ T263] loop6: rw=1, want=45168, limit=40427 [ 638.291344][ T263] attempt to access beyond end of device [ 638.291344][ T263] loop6: rw=1, want=45104, limit=40427 [ 638.303082][ T263] attempt to access beyond end of device [ 638.303082][ T263] loop6: rw=2049, want=45176, limit=40427 [ 638.446042][T17702] EXT4-fs (loop6): Unrecognized mount option "uid>00000000000000000000" or missing value [ 638.554765][ T2104] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 638.561319][ T2104] uvcvideo: No valid video chain found. [ 638.568864][ T2104] usb 9-1: USB disconnect, device number 49 [ 639.136752][T17711] loop6: p1 < > p2 p3 < p5 > p4 [ 639.141922][T17711] loop6: partition table partially beyond EOD, truncated [ 639.149507][T17711] loop6: p1 start 4278190080 is beyond EOD, truncated [ 639.156818][T17711] loop6: p2 start 16908800 is beyond EOD, truncated [ 639.164851][T17711] loop6: p4 start 11326 is beyond EOD, truncated [ 639.171355][T17711] loop6: p5 start 16908800 is beyond EOD, truncated [ 639.279451][T17714] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.291275][T17714] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.298927][T17714] device bridge_slave_0 entered promiscuous mode [ 639.305373][T10039] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 639.308532][T17714] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.320584][T17714] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.328439][T17714] device bridge_slave_1 entered promiscuous mode [ 639.438800][T17714] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.445889][T17714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.453177][T17714] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.460231][T17714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.504702][T10031] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 639.512498][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.521419][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.531673][ T263] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.545114][T10039] usb 3-1: Using ep0 maxpacket: 16 [ 639.555058][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.563837][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.570899][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.606025][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.614202][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.627693][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.639432][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.647680][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.655266][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.664456][T17714] device veth0_vlan entered promiscuous mode [ 639.674888][T10039] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 639.677578][T17714] device veth1_macvtap entered promiscuous mode [ 639.684805][T10039] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 639.700242][T10039] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.701725][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.718303][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 639.727445][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.774737][T10031] usb 7-1: Using ep0 maxpacket: 8 [ 639.865188][T10039] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 639.874518][T10039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.883510][T10039] usb 3-1: Product: syz [ 639.888121][T10039] usb 3-1: Manufacturer: ó¤¹ [ 639.892878][T10039] usb 3-1: SerialNumber: syz [ 639.897900][T10031] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.911911][T10031] usb 7-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 639.922438][T10031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.932123][T10031] usb 7-1: config 0 descriptor?? [ 640.373194][T17740] overlayfs: failed to clone upperpath [ 640.400418][T17739] overlayfs: './file1' not a directory [ 640.464842][T10039] usb 3-1: 0:2 : does not exist [ 640.471585][T10039] usb 3-1: USB disconnect, device number 36 [ 641.244773][T10037] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 641.604780][T10037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.615741][T10037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.625528][T10037] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 641.638469][T10037] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 641.647544][T10037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.656608][T10037] usb 1-1: config 0 descriptor?? [ 642.135858][T10037] plantronics 0003:047F:FFFF.0035: item fetching failed at offset 12/15 [ 642.144496][T10037] plantronics 0003:047F:FFFF.0035: parse failed [ 642.151842][T10037] plantronics: probe of 0003:047F:FFFF.0035 failed with error -22 [ 642.184845][T10031] usbhid 7-1:0.0: can't add hid device: -71 [ 642.190911][T10031] usbhid: probe of 7-1:0.0 failed with error -71 [ 642.198177][T10031] usb 7-1: USB disconnect, device number 16 [ 642.210365][T17788] device wireguard0 entered promiscuous mode [ 642.219045][ T24] kauditd_printk_skb: 391 callbacks suppressed [ 642.219057][ T24] audit: type=1400 audit(2000003557.186:216815): avc: denied { block_suspend } for pid=17785 comm="syz.6.4819" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 642.273057][ T24] audit: type=1400 audit(2000003557.216:216816): avc: denied { prog_load } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 642.293444][ T24] audit: type=1400 audit(2000003557.216:216817): avc: denied { bpf } for pid=17785 comm="syz.6.4819" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 642.314289][ T24] audit: type=1400 audit(2000003557.216:216818): avc: denied { perfmon } for pid=17785 comm="syz.6.4819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 642.335656][ T24] audit: type=1400 audit(2000003557.216:216819): avc: denied { prog_load } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 642.339038][ T2109] usb 1-1: USB disconnect, device number 38 [ 642.355083][T10039] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 642.371240][ T24] audit: type=1400 audit(2000003557.216:216820): avc: denied { prog_run } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 642.393094][ T24] audit: type=1400 audit(2000003557.216:216821): avc: denied { create } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 642.413807][ T24] audit: type=1400 audit(2000003557.216:216822): avc: denied { connect } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 642.444304][ T24] audit: type=1400 audit(2000003557.216:216823): avc: denied { write } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 642.484558][ T24] audit: type=1400 audit(2000003557.216:216824): avc: denied { map_create } for pid=17785 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 642.594814][T10039] usb 3-1: Using ep0 maxpacket: 16 [ 642.714790][T10039] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 642.726841][T10039] usb 3-1: config 0 has no interface number 0 [ 642.744758][T10039] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 642.755078][T10039] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 642.765081][T10039] usb 3-1: config 0 interface 41 has no altsetting 0 [ 642.924780][T10039] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 642.934072][T10039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.946946][T10039] usb 3-1: Product: syz [ 642.951352][T10039] usb 3-1: Manufacturer: syz [ 642.956198][T10039] usb 3-1: SerialNumber: syz [ 642.974999][T10039] usb 3-1: config 0 descriptor?? [ 642.994983][T17781] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 643.004752][T17781] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 643.245014][T17781] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 643.254314][T17781] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 643.284167][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 643.292859][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 643.364249][T17811] device wireguard0 left promiscuous mode [ 643.378066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 643.462392][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 643.471294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 643.480105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 643.491409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.500099][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 643.510216][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.519053][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.299781][ T2103] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.308004][ T2103] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.324747][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.357034][T17835] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 645.604758][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.939973][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'. [ 645.953200][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'. [ 646.044089][T10039] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 646.054598][T10039] CoreChips: probe of 3-1:0.41 failed with error -71 [ 646.062660][T10039] usb 3-1: USB disconnect, device number 37 [ 646.144410][T17856] 9pnet: Insufficient options for proto=fd [ 646.151439][T17856] overlayfs: unrecognized mount option "verity=require" or missing value [ 646.161447][T17856] overlayfs: unrecognized mount option "uuid=null" or missing value [ 646.216171][T17857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4841'. [ 646.224860][ T2103] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 646.234717][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 646.274955][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 646.494835][ T2103] usb 7-1: device descriptor read/64, error -71 [ 646.884734][ T2103] usb 7-1: device descriptor read/64, error -71 [ 647.154874][ T2103] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 647.226177][ T24] kauditd_printk_skb: 434 callbacks suppressed [ 647.226189][ T24] audit: type=1400 audit(2000003562.196:217259): avc: denied { map_create } for pid=17889 comm="syz.0.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.252185][ T24] audit: type=1400 audit(2000003562.196:217260): avc: denied { map_create } for pid=17895 comm="syz.0.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.272205][ T24] audit: type=1400 audit(2000003562.196:217261): avc: denied { perfmon } for pid=17895 comm="syz.0.4853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 647.306854][ T24] audit: type=1400 audit(2000003562.196:217262): avc: denied { map_read map_write } for pid=17895 comm="syz.0.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.431376][ T24] audit: type=1400 audit(2000003562.196:217263): avc: denied { prog_load } for pid=17895 comm="syz.0.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.466241][ T24] audit: type=1400 audit(2000003562.196:217264): avc: denied { bpf } for pid=17895 comm="syz.0.4853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 647.491371][ T24] audit: type=1400 audit(2000003562.216:217265): avc: denied { ioctl } for pid=17844 comm="syz.6.4839" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.517082][ T24] audit: type=1400 audit(2000003562.376:217266): avc: denied { bpf } for pid=17881 comm="syz.9.4851" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 647.539945][ T24] audit: type=1400 audit(2000003562.376:217267): avc: denied { prog_run } for pid=17881 comm="syz.9.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.559904][ T24] audit: type=1400 audit(2000003562.436:217268): avc: denied { prog_load } for pid=17902 comm="syz.9.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.589523][T17912] 9pnet: Insufficient options for proto=fd [ 647.664758][ T2103] usb 7-1: device descriptor read/64, error -71 [ 648.334748][ T2103] usb 7-1: device descriptor read/64, error -71 [ 648.455217][ T2103] usb usb7-port1: attempt power cycle [ 648.820465][T17944] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 648.874738][ T2103] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 649.034768][ T2103] usb 7-1: device descriptor read/8, error -71 [ 649.794733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.824785][ T2103] usb 7-1: device descriptor read/8, error -71 [ 651.164872][ T2102] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 651.468170][T18017] 9pnet: Insufficient options for proto=fd [ 651.733952][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4893'. [ 651.747620][T18028] bridge1: port 1(ip6gretap1) entered blocking state [ 651.754357][T18028] bridge1: port 1(ip6gretap1) entered disabled state [ 651.761623][T18028] device ip6gretap1 entered promiscuous mode [ 651.784808][ T2102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 651.795856][ T2102] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 651.804946][ T2102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.814087][ T2102] usb 3-1: config 0 descriptor?? [ 651.834989][T17992] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 652.295749][ T2102] hid-generic 0003:04F3:0755.0036: unknown main item tag 0x0 [ 652.303202][ T2102] hid-generic 0003:04F3:0755.0036: unknown main item tag 0x0 [ 652.310689][ T2103] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 652.318229][ T2102] hid-generic 0003:04F3:0755.0036: unknown main item tag 0x0 [ 652.325694][ T2102] hid-generic 0003:04F3:0755.0036: unknown main item tag 0x0 [ 652.333076][ T2102] hid-generic 0003:04F3:0755.0036: unknown main item tag 0x0 [ 652.341265][ T2102] hid-generic 0003:04F3:0755.0036: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 652.342284][ T24] kauditd_printk_skb: 343 callbacks suppressed [ 652.342295][ T24] audit: type=1400 audit(2000003567.306:217612): avc: denied { accept } for pid=18026 comm="syz.0.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 652.378829][ T24] audit: type=1400 audit(2000003567.316:217613): avc: denied { ioctl } for pid=18029 comm="syz.6.4894" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.495828][ T24] audit: type=1400 audit(2000003567.466:217614): avc: denied { create } for pid=17989 comm="syz.2.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 652.498848][T17992] udc-core: couldn't find an available UDC or it's busy [ 652.517909][ T24] audit: type=1400 audit(2000003567.466:217615): avc: denied { create } for pid=17989 comm="syz.2.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 652.543182][ T24] audit: type=1400 audit(2000003567.466:217616): avc: denied { getopt } for pid=17989 comm="syz.2.4882" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 652.545610][T17992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 652.567274][ T24] audit: type=1400 audit(2000003567.466:217617): avc: denied { read write } for pid=17989 comm="syz.2.4882" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.582852][ T2102] usb 3-1: USB disconnect, device number 38 [ 652.601413][ T24] audit: type=1400 audit(2000003567.466:217618): avc: denied { open } for pid=17989 comm="syz.2.4882" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.625372][ T24] audit: type=1400 audit(2000003567.466:217619): avc: denied { ioctl } for pid=17989 comm="syz.2.4882" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.651048][ T24] audit: type=1400 audit(2000003567.546:217620): avc: denied { read } for pid=18031 comm="syz.0.4895" dev="nsfs" ino=4026536752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 652.673057][ T24] audit: type=1400 audit(2000003567.546:217621): avc: denied { read open } for pid=18031 comm="syz.0.4895" path="net:[4026536752]" dev="nsfs" ino=4026536752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 652.704833][ T2103] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 652.713309][ T2103] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 652.722235][ T2103] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 652.731397][ T2103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 652.741559][ T2103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 652.820111][T18044] binder: 18043:18044 ioctl c00c6211 0 returned -22 [ 652.917616][T18045] syz.2.4896[18045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.917930][T18045] syz.2.4896[18045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.414749][T10031] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 653.494783][ T2103] usb 7-1: string descriptor 0 read error: -22 [ 653.501154][ T2103] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 653.511099][ T2103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.520317][ T2103] usb 7-1: config 0 descriptor?? [ 653.565039][ T2103] hub 7-1:0.0: bad descriptor, ignoring hub [ 653.571045][ T2103] hub: probe of 7-1:0.0 failed with error -5 [ 653.577842][ T2103] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input66 [ 653.766851][ T2103] usb 7-1: USB disconnect, device number 21 [ 653.804948][T10031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.816012][T10031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.825788][T10031] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 653.834897][T10031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.843823][T10031] usb 1-1: config 0 descriptor?? [ 654.079721][T18068] overlayfs: failed to clone upperpath [ 654.305634][T18052] udc-core: couldn't find an available UDC or it's busy [ 654.312621][T18052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.484964][T10031] usbhid 1-1:0.0: can't add hid device: -71 [ 654.527785][T10031] usbhid: probe of 1-1:0.0 failed with error -71 [ 654.541162][T10031] usb 1-1: USB disconnect, device number 39 [ 654.807408][T18078] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4909'. [ 655.005410][T18090] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4913'. [ 655.085661][T18093] x_tables: duplicate underflow at hook 4 [ 655.742483][ T2102] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 656.409923][T18123] bridge0: port 3(syz_tun) entered blocking state [ 656.416436][T18123] bridge0: port 3(syz_tun) entered disabled state [ 656.423390][T18123] device syz_tun entered promiscuous mode [ 656.429241][T18123] bridge0: port 3(syz_tun) entered blocking state [ 656.435675][T18123] bridge0: port 3(syz_tun) entered forwarding state [ 656.446013][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 656.457994][ T2102] usb 7-1: device descriptor read/64, error -71 [ 656.924726][ T2102] usb 7-1: device descriptor read/64, error -71 [ 657.355826][ T24] kauditd_printk_skb: 479 callbacks suppressed [ 657.355985][ T24] audit: type=1400 audit(2000003572.076:218101): avc: denied { prog_load } for pid=18150 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.409297][ T24] audit: type=1400 audit(2000003572.076:218102): avc: denied { map_create } for pid=18150 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.431688][ T24] audit: type=1400 audit(2000003572.076:218103): avc: denied { bpf } for pid=18150 comm="syz.0.4932" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 657.454198][ T24] audit: type=1400 audit(2000003572.076:218104): avc: denied { map_read map_write } for pid=18150 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.474720][ T24] audit: type=1400 audit(2000003572.076:218105): avc: denied { perfmon } for pid=18150 comm="syz.0.4932" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 657.474888][ T2102] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 657.510857][ T24] audit: type=1400 audit(2000003572.086:218106): avc: denied { prog_run } for pid=18150 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.536342][ T24] audit: type=1400 audit(2000003572.126:218107): avc: denied { module_request } for pid=18150 comm="syz.0.4932" kmod="ipt_ah" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 657.559388][ T24] audit: type=1400 audit(2000003572.136:218108): avc: denied { read write } for pid=18150 comm="syz.0.4932" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 657.588236][ T24] audit: type=1400 audit(2000003572.136:218109): avc: denied { open } for pid=18150 comm="syz.0.4932" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 657.761801][ T24] audit: type=1400 audit(2000003572.356:218110): avc: denied { prog_load } for pid=18152 comm="syz.2.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.814949][ T2102] usb 7-1: device descriptor read/64, error -71 [ 657.951129][T18167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4937'. [ 657.960776][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.967982][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.978838][T18167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4937'. [ 658.093024][T18179] udc-core: couldn't find an available UDC or it's busy [ 658.100552][T18179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 658.204692][ T2102] usb 7-1: device descriptor read/64, error -71 [ 658.246733][T18184] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000001,barrier,delalloc,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro, [ 658.264586][T18184] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.280101][T18184] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 658.288611][T18184] EXT4-fs (loop6): Remounting filesystem read-only [ 658.295181][T18184] EXT4-fs error (device loop6): ext4_dirty_inode:6142: inode #2: comm syz.6.4942: mark_inode_dirty error [ 658.306951][T18184] EXT4-fs error (device loop6) in ext4_do_update_inode:5335: error 27 [ 658.315411][T18184] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #2: comm syz.6.4942: mark_inode_dirty error [ 658.335165][ T2102] usb usb7-port1: attempt power cycle [ 658.344764][T10032] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 658.374732][T10031] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 658.514992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.584758][T10032] usb 3-1: Using ep0 maxpacket: 16 [ 658.644776][T10031] usb 1-1: device descriptor read/64, error -71 [ 658.715725][T18190] loop6: p1 < > p3 [ 658.720461][T18190] loop6: p3 size 134217728 extends beyond EOD, truncated [ 658.796482][T18190] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 658.874792][T10032] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 658.883987][T10032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.892236][T10032] usb 3-1: Product: syz [ 658.896530][T10032] usb 3-1: Manufacturer: syz [ 658.901108][T10032] usb 3-1: SerialNumber: syz [ 658.906835][T10032] usb 3-1: config 0 descriptor?? [ 658.945308][T10032] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 658.953062][T10032] usb 3-1: Detected FT232H [ 659.034737][T10031] usb 1-1: device descriptor read/64, error -71 [ 659.274707][ T2102] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 659.304738][T10031] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 659.374759][T10032] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 659.374780][ T2102] usb 7-1: Using ep0 maxpacket: 16 [ 659.395155][T10032] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 659.402949][T10032] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 659.411880][T10032] usb 3-1: USB disconnect, device number 39 [ 659.419609][T10032] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 659.429315][T10032] ftdi_sio 3-1:0.0: device disconnected [ 659.504818][ T2102] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 659.513902][ T2102] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 659.524148][ T2102] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 659.533993][ T2102] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 33569, setting to 1024 [ 659.545115][ T2102] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 659.555161][ T2102] usb 7-1: config 1 interface 0 has no altsetting 0 [ 659.561810][ T2102] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 659.570859][ T2102] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.574687][T10031] usb 1-1: device descriptor read/64, error -71 [ 659.615200][ T2102] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 659.835816][ T2102] scsi host1: usb-storage 7-1:1.0 [ 660.045274][T10031] usb 1-1: device descriptor read/64, error -71 [ 660.057999][ T2102] usb 7-1: USB disconnect, device number 24 [ 660.164819][T10031] usb usb1-port1: attempt power cycle [ 660.212192][T17837] Bluetooth: hci0: Frame reassembly failed (-84) [ 660.574710][T10031] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 660.677714][T18265] syztnl1: mtu less than device minimum [ 660.729500][T18272] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 660.738746][T18272] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.791701][T10031] usb 1-1: device descriptor read/8, error -71 [ 660.854146][T18281] IPv6: sit1: Disabled Multicast RS [ 661.064733][T10031] usb 1-1: device descriptor read/8, error -71 [ 662.412170][ T309] Bluetooth: hci0: command 0x1003 tx timeout [ 662.419929][ T3150] Bluetooth: hci0: sending frame failed (-49) [ 662.436139][ T24] kauditd_printk_skb: 437 callbacks suppressed [ 662.436152][ T24] audit: type=1400 audit(2000003577.406:218547): avc: denied { map_create } for pid=18315 comm="syz.7.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 662.462176][ T24] audit: type=1400 audit(2000003577.406:218548): avc: denied { bpf } for pid=18315 comm="syz.7.4980" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.483319][ T24] audit: type=1400 audit(2000003577.406:218549): avc: denied { execmem } for pid=18315 comm="syz.7.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 662.512101][ T24] audit: type=1400 audit(2000003577.476:218550): avc: denied { prog_load } for pid=18315 comm="syz.7.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 662.533757][ T24] audit: type=1400 audit(2000003577.476:218551): avc: denied { bpf } for pid=18315 comm="syz.7.4980" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.554806][ T24] audit: type=1400 audit(2000003577.476:218552): avc: denied { perfmon } for pid=18315 comm="syz.7.4980" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.565227][T18316] incfs: Can't find or create .index dir in ./file0 [ 662.576259][ T24] audit: type=1400 audit(2000003577.496:218553): avc: denied { prog_run } for pid=18315 comm="syz.7.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 662.583175][T18316] incfs: mount failed -5 [ 662.601926][ T24] audit: type=1400 audit(2000003577.526:218554): avc: denied { mounton } for pid=18315 comm="syz.7.4980" path="/399/file0" dev="tmpfs" ino=2157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 662.601984][ T24] audit: type=1400 audit(2000003577.526:218555): avc: denied { mount } for pid=18315 comm="syz.7.4980" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 662.651482][ T24] audit: type=1400 audit(2000003577.526:218556): avc: denied { read } for pid=18315 comm="syz.7.4980" dev="nsfs" ino=4026532796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 662.902896][T18332] netlink: 'syz.9.4983': attribute type 13 has an invalid length. [ 662.910986][T18332] netlink: 'syz.9.4983': attribute type 17 has an invalid length. [ 662.919785][T18332] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 662.928314][T18332] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 663.004759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.081924][T18344] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4987'. [ 663.091153][T18344] netlink: 'syz.9.4987': attribute type 1 has an invalid length. [ 663.104817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.124998][ T2102] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 663.323774][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4990'. [ 663.354712][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4990'. [ 663.363677][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4990'. [ 663.484896][ T2102] usb 1-1: config 0 has an invalid interface number: 173 but max is 0 [ 663.493359][ T2102] usb 1-1: config 0 has no interface number 0 [ 663.500064][ T2102] usb 1-1: config 0 interface 173 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 663.511647][ T2102] usb 1-1: config 0 interface 173 altsetting 0 endpoint 0x6 has invalid maxpacket 56499, setting to 64 [ 663.524166][ T2102] usb 1-1: config 0 interface 173 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 663.535439][ T2102] usb 1-1: config 0 interface 173 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 663.546312][ T2102] usb 1-1: config 0 interface 173 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 663.557314][ T2102] usb 1-1: config 0 interface 173 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 663.568557][ T2102] usb 1-1: config 0 interface 173 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 663.744834][ T2102] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=3a.f3 [ 663.753980][ T2102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.763065][ T2102] usb 1-1: Product: syz [ 663.768532][ T2102] usb 1-1: Manufacturer: syz [ 663.773148][ T2102] usb 1-1: SerialNumber: syz [ 663.779632][ T2102] usb 1-1: config 0 descriptor?? [ 663.790030][T18368] IPv6: sit2: Disabled Multicast RS [ 663.849788][T18384] netlink: 'syz.6.4999': attribute type 3 has an invalid length. [ 663.857774][T18384] netlink: 'syz.6.4999': attribute type 3 has an invalid length. [ 663.875429][ T2102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.885396][ T2102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.936287][T18382] overlayfs: failed to clone upperpath [ 663.951324][T18382] tipc: Enabling of bearer rejected, failed to enable media [ 663.994752][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.028622][T10031] usb 1-1: USB disconnect, device number 44 [ 664.434733][T10033] Bluetooth: hci0: command 0x1001 tx timeout [ 664.440938][ T3150] Bluetooth: hci0: sending frame failed (-49) [ 665.734775][T10031] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 666.174758][T10031] usb 7-1: unable to get BOS descriptor or descriptor too short [ 666.214756][T10031] usb 7-1: not running at top speed; connect to a high speed hub [ 666.294748][T10031] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 666.302965][T10031] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.313256][T10031] usb 7-1: config 1 has no interface number 0 [ 666.319560][T10031] usb 7-1: config 1 interface 138 has no altsetting 0 [ 666.340998][T18452] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5019'. [ 666.370440][T18455] syz.0.5020[18455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.370509][T18455] syz.0.5020[18455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.514729][T10033] Bluetooth: hci0: command 0x1009 tx timeout [ 666.532545][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 666.545003][T10031] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 666.554055][T10031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.567488][T10031] usb 7-1: Product: syz [ 666.571709][T10031] usb 7-1: Manufacturer: syz [ 666.582586][T10031] usb 7-1: SerialNumber: syz [ 666.952387][T18475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5025'. [ 667.017717][T10031] usb 7-1: USB disconnect, device number 25 [ 667.604909][ T24] kauditd_printk_skb: 541 callbacks suppressed [ 667.604948][ T24] audit: type=1400 audit(2000003582.506:219098): avc: denied { prog_load } for pid=18488 comm="syz.0.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 667.634817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.864889][T10032] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 667.876967][ T24] audit: type=1400 audit(2000003582.506:219099): avc: denied { bpf } for pid=18488 comm="syz.0.5029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 668.087926][ T24] audit: type=1400 audit(2000003582.506:219100): avc: denied { perfmon } for pid=18488 comm="syz.0.5029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 668.164790][T10032] usb 7-1: Using ep0 maxpacket: 8 [ 668.267884][ T24] audit: type=1400 audit(2000003582.506:219101): avc: denied { prog_run } for pid=18488 comm="syz.0.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 668.292270][ T24] audit: type=1400 audit(2000003582.546:219102): avc: denied { map_create } for pid=18493 comm="syz.6.5030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 668.311891][ T24] audit: type=1400 audit(2000003582.556:219103): avc: denied { read write } for pid=18493 comm="syz.6.5030" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.340487][ T24] audit: type=1400 audit(2000003582.556:219104): avc: denied { open } for pid=18493 comm="syz.6.5030" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.558643][ T24] audit: type=1400 audit(2000003582.556:219105): avc: denied { ioctl } for pid=18493 comm="syz.6.5030" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.726398][T18505] IPv6: sit1: Disabled Multicast RS [ 668.776214][ T24] audit: type=1400 audit(2000003582.906:219106): avc: denied { ioctl } for pid=18493 comm="syz.6.5030" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 668.929346][T18507] netlink: 'syz.7.5034': attribute type 1 has an invalid length. [ 668.981389][ T24] audit: type=1400 audit(2000003582.926:219107): avc: denied { ioctl } for pid=18493 comm="syz.6.5030" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 669.310712][T10032] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.321848][T10032] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.335292][T10032] usb 7-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 669.344334][T10032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.354118][T10032] usb 7-1: config 0 descriptor?? [ 669.936369][T18494] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 669.948116][T18494] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.961937][T18494] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: block 3: comm syz.6.5030: lblock 3 mapped to illegal pblock 3 (length 1) [ 669.976468][T18494] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 669.988782][T18494] EXT4-fs (loop6): This should not happen!! Data will be lost [ 669.988782][T18494] [ 670.054776][T10032] usbhid 7-1:0.0: can't add hid device: -71 [ 670.060830][T10032] usbhid: probe of 7-1:0.0 failed with error -71 [ 670.068027][T10032] usb 7-1: USB disconnect, device number 26 [ 670.157944][T18529] netlink: 'syz.0.5039': attribute type 3 has an invalid length. [ 670.165792][T18529] netlink: 'syz.0.5039': attribute type 3 has an invalid length. [ 670.186747][T18531] syz.0.5040[18531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.186787][T18531] syz.0.5040[18531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.638718][T18549] syz.6.5045[18549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.650356][T18549] syz.6.5045[18549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.115845][ T2103] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 671.414707][ T2103] usb 7-1: device descriptor read/64, error -71 [ 671.814728][ T2103] usb 7-1: device descriptor read/64, error -71 [ 672.004734][ T309] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 672.094740][ T2103] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 672.374739][ T2103] usb 7-1: device descriptor read/64, error -71 [ 672.381574][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.400110][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.409995][ T309] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 672.419102][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.455302][ T309] usb 3-1: config 0 descriptor?? [ 672.616465][ T24] kauditd_printk_skb: 602 callbacks suppressed [ 672.616479][ T24] audit: type=1400 audit(2000003587.586:219710): avc: denied { prog_load } for pid=18592 comm="syz.7.5058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.659375][ T24] audit: type=1400 audit(2000003587.606:219711): avc: denied { ioctl } for pid=18548 comm="syz.6.5045" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.686631][ T24] audit: type=1400 audit(2000003587.606:219712): avc: denied { bpf } for pid=18592 comm="syz.7.5058" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.689409][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5059'. [ 672.709677][ T24] audit: type=1400 audit(2000003587.606:219713): avc: denied { bpf } for pid=18592 comm="syz.7.5058" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.760379][ T24] audit: type=1400 audit(2000003587.616:219714): avc: denied { perfmon } for pid=18592 comm="syz.7.5058" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.781845][ T24] audit: type=1400 audit(2000003587.616:219715): avc: denied { bpf } for pid=18592 comm="syz.7.5058" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.802990][ T24] audit: type=1400 audit(2000003587.616:219716): avc: denied { ioctl } for pid=18548 comm="syz.6.5045" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.804692][ T2103] usb 7-1: device descriptor read/64, error -71 [ 672.831405][ T24] audit: type=1400 audit(2000003587.616:219717): avc: denied { perfmon } for pid=18592 comm="syz.7.5058" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.856404][ T24] audit: type=1400 audit(2000003587.616:219718): avc: denied { perfmon } for pid=18592 comm="syz.7.5058" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.857769][T18603] fuseblk: Unknown parameter '01777777777777777777777' [ 672.878744][ T24] audit: type=1400 audit(2000003587.616:219719): avc: denied { perfmon } for pid=18592 comm="syz.7.5058" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.954832][ T2103] usb usb7-port1: attempt power cycle [ 673.114772][ T309] usbhid 3-1:0.0: can't add hid device: -71 [ 673.120816][ T309] usbhid: probe of 3-1:0.0 failed with error -71 [ 673.129488][ T309] usb 3-1: USB disconnect, device number 40 [ 673.137972][T18610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5062'. [ 673.383553][ T2103] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 673.774719][ T2103] usb 7-1: device descriptor read/8, error -71 [ 673.984803][ T2103] usb 7-1: device descriptor read/8, error -71 [ 674.057986][T18650] device pim6reg1 entered promiscuous mode [ 674.541529][T18661] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 674.549373][T18661] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 674.561748][T18661] F2FS-fs (loop6): invalid crc value [ 674.574568][T18661] F2FS-fs (loop6): Found nat_bits in checkpoint [ 674.685684][T18661] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 674.692900][T18661] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 675.001182][T18704] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5087'. [ 675.164854][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.864418][T13693] kernel read not supported for file [userfaultfd] (pid: 13693 comm: kworker/0:5) [ 676.702676][T18767] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.5106: Invalid inode bitmap blk 4 in block_group 0 [ 676.715975][T18767] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,nogrpid,grpquota,noload,nobarrier,lazytime,,errors=continue [ 676.864788][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 677.001425][T18788] tc_dump_action: action bad kind [ 677.007411][T18787] tc_dump_action: action bad kind [ 677.558361][T18804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18804 comm=syz.2.5114 [ 677.577373][T18804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18804 comm=syz.2.5114 [ 677.587535][T18794] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5110'. [ 677.621759][T18794] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5110'. [ 677.726108][ T24] kauditd_printk_skb: 1292 callbacks suppressed [ 677.726120][ T24] audit: type=1400 audit(2000003592.626:221006): avc: denied { execmem } for pid=18783 comm="syz.6.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 677.766489][ T24] audit: type=1400 audit(2000003592.716:221007): avc: denied { map_create } for pid=18811 comm="syz.2.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.794316][ T24] audit: type=1400 audit(2000003592.716:221008): avc: denied { bpf } for pid=18811 comm="syz.2.5117" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 677.816906][ T24] audit: type=1400 audit(2000003592.726:221009): avc: denied { map_read map_write } for pid=18811 comm="syz.2.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.838780][ T24] audit: type=1400 audit(2000003592.726:221010): avc: denied { prog_load } for pid=18811 comm="syz.2.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.861432][ T24] audit: type=1400 audit(2000003592.726:221011): avc: denied { prog_load } for pid=18797 comm="syz.0.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.897293][T18806] audit: audit_backlog=65 > audit_backlog_limit=64 [ 677.898910][T18807] audit: audit_backlog=65 > audit_backlog_limit=64 [ 677.916972][T18807] audit: audit_lost=2754 audit_rate_limit=0 audit_backlog_limit=64 [ 677.918878][T18806] audit: audit_lost=2755 audit_rate_limit=0 audit_backlog_limit=64 [ 677.946940][T18806] bridge: RTM_NEWNEIGH with invalid ether address [ 678.274831][T18823] futex_wake_op: syz.0.5120 tries to shift op by -1; fix this program [ 678.559391][T18812] FAULT_INJECTION: forcing a failure. [ 678.559391][T18812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.584760][T18812] CPU: 1 PID: 18812 Comm: syz.2.5117 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 678.596156][T18812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 678.606225][T18812] Call Trace: [ 678.609535][T18812] __dump_stack+0x21/0x24 [ 678.613868][T18812] dump_stack_lvl+0x169/0x1d8 [ 678.618553][T18812] ? thaw_kernel_threads+0x220/0x220 [ 678.623940][T18812] ? show_regs_print_info+0x18/0x18 [ 678.629145][T18812] dump_stack+0x15/0x1c [ 678.633295][T18812] should_fail+0x3c1/0x510 [ 678.637704][T18812] should_fail_usercopy+0x1a/0x20 [ 678.642716][T18812] set_fd_set+0x2d/0x80 [ 678.646864][T18812] core_sys_select+0x523/0x650 [ 678.651619][T18812] ? poll_select_set_timeout+0x160/0x160 [ 678.657240][T18812] ? rw_verify_area+0x1c0/0x360 [ 678.662083][T18812] ? sigprocmask+0x1b0/0x1b0 [ 678.666660][T18812] ? __fget_files+0x2c4/0x320 [ 678.671330][T18812] __se_sys_pselect6+0x287/0x310 [ 678.676257][T18812] ? __x64_sys_pselect6+0x100/0x100 [ 678.681471][T18812] ? __ia32_sys_read+0x90/0x90 [ 678.686226][T18812] ? fpu__clear_all+0x20/0x20 [ 678.690888][T18812] __x64_sys_pselect6+0xe5/0x100 [ 678.695821][T18812] do_syscall_64+0x31/0x40 [ 678.700230][T18812] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 678.706109][T18812] RIP: 0033:0x7fce27e5f929 [ 678.710515][T18812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.730196][T18812] RSP: 002b:00007fce264c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 678.738599][T18812] RAX: ffffffffffffffda RBX: 00007fce28086fa0 RCX: 00007fce27e5f929 [ 678.746560][T18812] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 678.754523][T18812] RBP: 00007fce264c8090 R08: 0000000000000000 R09: 0000000000000000 [ 678.762483][T18812] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 678.770444][T18812] R13: 0000000000000000 R14: 00007fce28086fa0 R15: 00007ffe81f6d6f8 [ 678.924570][T18836] device ipip0 entered promiscuous mode [ 680.541755][T18870] device pim6reg1 entered promiscuous mode [ 680.748828][T18881] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 680.762703][T18881] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.813294][T18896] tmpfs: Bad value for 'size' [ 680.837659][T18896] netlink: 'syz.2.5140': attribute type 16 has an invalid length. [ 680.845633][T18896] netlink: 'syz.2.5140': attribute type 17 has an invalid length. [ 680.857855][T18896] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.864946][T18896] bridge0: port 2(bridge_slave_1) entered listening state [ 680.872203][T18896] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.879272][T18896] bridge0: port 1(bridge_slave_0) entered listening state [ 680.909828][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 680.919555][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 680.930992][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 680.940311][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.949691][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.959154][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.968796][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.974716][T13693] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 680.984141][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.146400][T18902] loop6: p1 < > p4 [ 681.151759][T18902] loop6: p4 size 8388608 extends beyond EOD, truncated [ 681.474680][T13693] usb 1-1: Using ep0 maxpacket: 32 [ 681.595233][T13693] usb 1-1: config 128 has an invalid interface number: 199 but max is 0 [ 681.606719][T13693] usb 1-1: config 128 has no interface number 0 [ 681.618542][T13693] usb 1-1: New USB device found, idVendor=0bda, idProduct=817b, bcdDevice=b7.7c [ 681.628875][T13693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.964558][T13693] usb 1-1: string descriptor 0 read error: -71 [ 681.978168][T13693] usb 1-1: USB disconnect, device number 45 [ 682.020508][T18922] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5147'. [ 682.054165][T18922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 682.345659][T18929] loop6: p1 < > p2 p3 < p5 > p4 [ 682.350704][T18929] loop6: partition table partially beyond EOD, truncated [ 682.364981][T18929] loop6: p1 start 4278190080 is beyond EOD, truncated [ 682.372004][T18929] loop6: p2 start 16908800 is beyond EOD, truncated [ 682.402302][T18929] loop6: p4 start 11326 is beyond EOD, truncated [ 682.415852][T18929] loop6: p5 start 16908800 is beyond EOD, truncated [ 682.609442][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5152'. [ 682.735328][ T24] kauditd_printk_skb: 1155 callbacks suppressed [ 682.735341][ T24] audit: type=1400 audit(2000003853.701:222165): avc: denied { perfmon } for pid=18941 comm="syz.6.5154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 682.769947][T18945] tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 682.795918][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5155'. [ 682.814922][ T24] audit: type=1400 audit(2000003853.701:222166): avc: denied { bpf } for pid=18941 comm="syz.6.5154" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 682.904712][ T24] audit: type=1400 audit(2000003853.701:222167): avc: denied { perfmon } for pid=18941 comm="syz.6.5154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 682.944731][ T24] audit: type=1400 audit(2000003853.701:222168): avc: denied { perfmon } for pid=18941 comm="syz.6.5154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 682.993263][T18947] sch_fq: defrate 0 ignored. [ 683.015093][ T24] audit: type=1400 audit(2000003853.701:222169): avc: denied { perfmon } for pid=18941 comm="syz.6.5154" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.017894][T18952] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.050779][T18951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.050939][T18935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.058595][T18951] audit: audit_lost=2756 audit_rate_limit=0 audit_backlog_limit=64 [ 683.064150][T18948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5156'. [ 683.073736][T18951] audit: backlog limit exceeded [ 683.821358][T18965] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 684.079988][T18981] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 684.145886][T18972] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5160: inode #2214592512: comm syz.6.5160: iget: illegal inode # [ 684.160621][T18972] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5160: error while reading EA inode 2214592512 err=-117 [ 684.175744][T18972] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5160: inode #2214592512: comm syz.6.5160: iget: illegal inode # [ 684.190389][T18972] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5160: error while reading EA inode 2214592512 err=-117 [ 684.204236][T18972] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.5160: inode #1: comm syz.6.5160: iget: illegal inode # [ 684.218023][T18972] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.5160: error while reading EA inode 1 err=-117 [ 684.231045][T18972] EXT4-fs (loop6): 1 orphan inode deleted [ 684.236854][T18972] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,auto_da_alloc=0x0000000000000008,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue [ 685.114717][ T2130] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 685.227605][T10039] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 685.504864][T10039] usb 7-1: device descriptor read/64, error -71 [ 685.583342][T19015] overlayfs: unrecognized mount option "measure" or missing value [ 685.615054][T19017] syz.9.5177[19017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 685.615381][T19017] syz.9.5177[19017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 685.675278][ T2130] usb 3-1: config 18 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.714706][ T2130] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 685.726292][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.894724][T10039] usb 7-1: device descriptor read/64, error -71 [ 686.314823][T10039] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 686.627917][T10039] usb 7-1: device descriptor read/64, error -71 [ 686.924711][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 686.924737][ T2130] usbhid 3-1:18.0: can't add hid device: -71 [ 686.954783][ T2130] usbhid: probe of 3-1:18.0 failed with error -71 [ 686.962383][ T2130] usb 3-1: USB disconnect, device number 41 [ 687.024688][T10039] usb 7-1: device descriptor read/64, error -71 [ 687.144938][T10039] usb usb7-port1: attempt power cycle [ 687.554769][T10039] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 687.735333][T10039] usb 7-1: device descriptor read/8, error -71 [ 687.750192][ T24] kauditd_printk_skb: 1196 callbacks suppressed [ 687.750206][ T24] audit: type=1400 audit(2000003858.711:223314): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.788404][ T24] audit: type=1400 audit(2000003858.741:223315): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.816236][ T24] audit: type=1400 audit(2000003858.741:223316): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.843634][ T24] audit: type=1400 audit(2000003858.771:223317): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.866816][ T24] audit: type=1400 audit(2000003858.771:223318): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.890308][ T24] audit: type=1400 audit(2000003858.801:223319): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.913187][ T24] audit: type=1400 audit(2000003858.801:223320): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.934236][ T24] audit: type=1400 audit(2000003858.831:223321): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 687.955292][ T24] audit: type=1400 audit(2000003858.851:223322): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 688.014777][ T24] audit: type=1400 audit(2000003858.851:223323): avc: denied { accept } for pid=19069 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 688.103404][T19103] overlayfs: failed to resolve './file1': -2 [ 688.156667][T19106] x_tables: duplicate underflow at hook 4 [ 688.278376][T17526] Bluetooth: hci0: Frame reassembly failed (-84) [ 688.554726][T10039] usb 7-1: device descriptor read/8, error -71 [ 688.584685][ T2103] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 689.005364][ T2103] usb 3-1: unable to get BOS descriptor or descriptor too short [ 689.095281][ T2103] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.114712][ T2103] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.147841][ T2103] usb 3-1: config 1 interface 0 has no altsetting 0 [ 689.178117][T19135] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 689.244401][T19135] EXT4-fs (loop6): 1 orphan inode deleted [ 689.253531][T19135] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,data_err=ignore,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,norecovery,delalloc,quota, [ 689.302594][T19135] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.335919][ T2103] usb 3-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.40 [ 689.354715][ T2103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.369753][ T2103] usb 3-1: Manufacturer: á°Š [ 689.384628][ T2103] usb 3-1: SerialNumber: syz [ 689.413185][T19088] ================================================================== [ 689.421292][T19088] BUG: KASAN: slab-out-of-bounds in unaccount_page_cache_page+0x9e0/0xac0 [ 689.429791][T19088] Read of size 4 at addr ffff888115ef8470 by task syz.9.5192/19088 [ 689.437668][T19088] [ 689.439996][T19088] CPU: 1 PID: 19088 Comm: syz.9.5192 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 689.451340][T19088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.461382][T19088] Call Trace: [ 689.464664][T19088] __dump_stack+0x21/0x24 [ 689.468987][T19088] dump_stack_lvl+0x169/0x1d8 [ 689.473655][T19088] ? show_regs_print_info+0x18/0x18 [ 689.478839][T19088] ? thaw_kernel_threads+0x220/0x220 [ 689.484113][T19088] print_address_description+0x7f/0x2c0 [ 689.489660][T19088] ? unaccount_page_cache_page+0x9e0/0xac0 [ 689.495452][T19088] kasan_report+0xe2/0x130 [ 689.499883][T19088] ? unaccount_page_cache_page+0x9e0/0xac0 [ 689.505765][T19088] __asan_report_load4_noabort+0x14/0x20 [ 689.511382][T19088] unaccount_page_cache_page+0x9e0/0xac0 [ 689.517004][T19088] __delete_from_page_cache+0xc4/0x460 [ 689.522447][T19088] ? memset+0x35/0x40 [ 689.526418][T19088] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 689.533428][T19088] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 689.538878][T19088] ? _raw_spin_lock+0xe0/0xe0 [ 689.543544][T19088] ? __kasan_check_read+0x11/0x20 [ 689.548551][T19088] ? workingset_eviction+0x3dc/0x940 [ 689.553820][T19088] ? __kasan_check_read+0x11/0x20 [ 689.558835][T19088] __remove_mapping+0x562/0x690 [ 689.563682][T19088] shrink_page_list+0x2109/0x4120 [ 689.568695][T19088] ? __this_cpu_preempt_check+0x13/0x20 [ 689.574232][T19088] ? shrink_page_list+0x681/0x4120 [ 689.579336][T19088] ? reclaim_clean_pages_from_list+0x740/0x740 [ 689.585478][T19088] ? shrink_inactive_list+0xe80/0xe80 [ 689.590836][T19088] ? lru_add_drain_cpu+0x554/0x6b0 [ 689.595938][T19088] ? _raw_spin_lock_irq+0x8f/0xe0 [ 689.600951][T19088] ? __count_memcg_events+0x89/0x210 [ 689.606225][T19088] shrink_inactive_list+0x4f4/0xe80 [ 689.611409][T19088] ? should_run_aging+0x440/0x440 [ 689.616418][T19088] ? blk_flush_plug_list+0x3ec/0x430 [ 689.621691][T19088] ? __kasan_check_read+0x11/0x20 [ 689.626700][T19088] ? __kasan_check_read+0x11/0x20 [ 689.631709][T19088] ? lruvec_lru_size+0x230/0x250 [ 689.636637][T19088] ? blk_start_plug+0x5a/0x170 [ 689.641388][T19088] shrink_lruvec+0x2246/0x2770 [ 689.646138][T19088] ? do_shrink_slab+0x104/0x830 [ 689.650976][T19088] ? __init_rwsem+0x1c0/0x1c0 [ 689.655663][T19088] ? radix_tree_lookup+0x183/0x1d0 [ 689.660759][T19088] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 689.666289][T19088] ? shrink_slab+0x56f/0x720 [ 689.670873][T19088] ? drop_slab_node+0x140/0x140 [ 689.675735][T19088] ? __kasan_check_read+0x11/0x20 [ 689.680753][T19088] shrink_node+0xf0c/0x2690 [ 689.685250][T19088] ? ktime_get+0x10e/0x140 [ 689.689662][T19088] do_try_to_free_pages+0x5db/0x1560 [ 689.695109][T19088] ? try_to_free_pages+0xb70/0xb70 [ 689.700207][T19088] ? sched_clock_cpu+0x1b/0x3d0 [ 689.705051][T19088] try_to_free_mem_cgroup_pages+0x233/0x5b0 [ 689.710968][T19088] ? shrink_lruvec+0x2770/0x2770 [ 689.715905][T19088] ? _raw_spin_unlock_irq+0x4e/0x70 [ 689.721092][T19088] ? psi_memstall_enter+0xff/0x150 [ 689.726191][T19088] try_charge+0x42b/0x14e0 [ 689.730595][T19088] ? __memcg_kmem_charge+0x140/0x140 [ 689.735874][T19088] ? percpu_counter_add_batch+0x13c/0x160 [ 689.741584][T19088] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 689.747115][T19088] __mem_cgroup_charge+0x14c/0x6d0 [ 689.752211][T19088] shmem_add_to_page_cache+0x55e/0xe10 [ 689.757662][T19088] ? shmem_alloc_page+0x300/0x300 [ 689.762671][T19088] ? _raw_spin_lock_irqsave+0x110/0x110 [ 689.768203][T19088] ? find_lock_entry+0x4b/0x200 [ 689.773044][T19088] ? lru_cache_add+0x164/0x380 [ 689.777797][T19088] ? shmem_getpage_gfp+0x8f3/0x2110 [ 689.782980][T19088] shmem_getpage_gfp+0x8e8/0x2110 [ 689.788006][T19088] shmem_write_begin+0xce/0x1b0 [ 689.792842][T19088] generic_perform_write+0x2be/0x510 [ 689.798121][T19088] ? atime_needs_update+0x5b0/0x5b0 [ 689.803326][T19088] ? grab_cache_page_write_begin+0xb0/0xb0 [ 689.809210][T19088] ? file_remove_privs+0x580/0x580 [ 689.814306][T19088] ? __kasan_check_write+0x14/0x20 [ 689.819402][T19088] ? down_write+0xac/0x110 [ 689.823895][T19088] __generic_file_write_iter+0x24b/0x480 [ 689.829600][T19088] ? generic_write_checks+0x3d4/0x480 [ 689.834959][T19088] generic_file_write_iter+0xa9/0x1d0 [ 689.840318][T19088] __kernel_write+0x55a/0x910 [ 689.844986][T19088] ? vfs_read+0xa10/0xa10 [ 689.849303][T19088] ? populate_vma_page_range+0xf0/0xf0 [ 689.854746][T19088] ? __kasan_check_write+0x14/0x20 [ 689.859843][T19088] ? get_dump_page+0x46b/0x5b0 [ 689.864601][T19088] dump_emit+0x240/0x360 [ 689.868832][T19088] ? wait_for_dump_helpers+0x390/0x390 [ 689.874287][T19088] dump_user_range+0x6a/0x1a0 [ 689.878951][T19088] elf_core_dump+0x278a/0x2bc0 [ 689.883719][T19088] ? load_elf_binary+0x2890/0x2890 [ 689.888818][T19088] ? __fsnotify_parent+0x5ff/0x6c0 [ 689.893913][T19088] ? shmem_unused_huge_scan+0xa0/0xa0 [ 689.899277][T19088] ? do_truncate+0x1ad/0x210 [ 689.903851][T19088] ? putname+0xfe/0x150 [ 689.905279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.908008][T19088] ? __kasan_check_read+0x11/0x20 [ 689.920479][T19088] ? __ia32_sys_unshare+0x40/0x40 [ 689.925518][T19088] do_coredump+0x1ac9/0x27f0 [ 689.930109][T19088] ? simple_acl_create+0x1c0/0x1c0 [ 689.935217][T19088] ? debug_smp_processor_id+0x17/0x20 [ 689.940589][T19088] ? __irq_exit_rcu+0x40/0x150 [ 689.945347][T19088] ? irq_exit_rcu+0x9/0x10 [ 689.949753][T19088] ? sysvec_irq_work+0xc8/0xd0 [ 689.954507][T19088] ? _raw_spin_unlock_irq+0x49/0x70 [ 689.959705][T19088] get_signal+0xf23/0x12e0 [ 689.964120][T19088] arch_do_signal_or_restart+0xbf/0x10f0 [ 689.969738][T19088] ? __send_signal+0x8b8/0xb80 [ 689.974514][T19088] ? send_signal+0x479/0x5b0 [ 689.979112][T19088] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 689.984744][T19088] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 689.990553][T19088] ? force_sig+0xb5/0x100 [ 689.994872][T19088] ? send_sig+0x70/0x70 [ 689.999022][T19088] exit_to_user_mode_loop+0xa2/0xe0 [ 690.004213][T19088] irqentry_exit_to_user_mode+0x4e/0x80 [ 690.009810][T19088] irqentry_exit+0x12/0x60 [ 690.014236][T19088] exc_general_protection+0x1ca/0x250 [ 690.019619][T19088] ? asm_exc_general_protection+0x8/0x30 [ 690.025246][T19088] asm_exc_general_protection+0x1e/0x30 [ 690.030782][T19088] RIP: 0033:0x7f65cc7b1931 [ 690.035358][T19088] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 690.054956][T19088] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 690.061010][T19088] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 690.068968][T19088] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 690.076929][T19088] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 690.084892][T19088] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 690.092855][T19088] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 690.100823][T19088] [ 690.103143][T19088] Allocated by task 15125: [ 690.107551][T19088] __kasan_kmalloc+0xda/0x110 [ 690.112219][T19088] __kmalloc+0x1a7/0x330 [ 690.116452][T19088] __register_sysctl_table+0xeb/0x1250 [ 690.121899][T19088] register_net_sysctl+0x2c/0x40 [ 690.126824][T19088] __devinet_sysctl_register+0x2c4/0x390 [ 690.132444][T19088] devinet_sysctl_register+0x169/0x1e0 [ 690.137986][T19088] inetdev_init+0x273/0x480 [ 690.142496][T19088] inetdev_event+0x1f8/0x1030 [ 690.147172][T19088] raw_notifier_call_chain+0x90/0x100 [ 690.152536][T19088] call_netdevice_notifiers+0x111/0x190 [ 690.158069][T19088] register_netdevice+0x1043/0x13c0 [ 690.163257][T19088] veth_newlink+0x641/0xbb0 [ 690.167746][T19088] rtnl_newlink+0x11bd/0x1640 [ 690.172409][T19088] rtnetlink_rcv_msg+0x9db/0xb90 [ 690.177333][T19088] netlink_rcv_skb+0x1e0/0x430 [ 690.182082][T19088] rtnetlink_rcv+0x1c/0x20 [ 690.186484][T19088] netlink_unicast+0x87c/0xa40 [ 690.191233][T19088] netlink_sendmsg+0x88d/0xb30 [ 690.195981][T19088] __sys_sendto+0x41d/0x580 [ 690.200470][T19088] __x64_sys_sendto+0xe5/0x100 [ 690.205311][T19088] do_syscall_64+0x31/0x40 [ 690.209716][T19088] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 690.215590][T19088] [ 690.217913][T19088] Last potentially related work creation: [ 690.223621][T19088] kasan_save_stack+0x3a/0x60 [ 690.228311][T19088] __kasan_record_aux_stack+0xd2/0x100 [ 690.233757][T19088] kasan_record_aux_stack_noalloc+0xb/0x10 [ 690.239550][T19088] kvfree_call_rcu+0x10c/0x620 [ 690.244386][T19088] drop_sysctl_table+0x2ef/0x410 [ 690.249310][T19088] unregister_sysctl_table+0x75/0x120 [ 690.254669][T19088] unregister_net_sysctl_table+0x15/0x20 [ 690.260291][T19088] inetdev_event+0x79d/0x1030 [ 690.264956][T19088] raw_notifier_call_chain+0x90/0x100 [ 690.270317][T19088] unregister_netdevice_many+0xf8b/0x1980 [ 690.276026][T19088] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 690.281296][T19088] cleanup_net+0x5fb/0xb70 [ 690.285700][T19088] process_one_work+0x6e1/0xba0 [ 690.290539][T19088] worker_thread+0xa6a/0x13b0 [ 690.295206][T19088] kthread+0x346/0x3d0 [ 690.299264][T19088] ret_from_fork+0x1f/0x30 [ 690.303660][T19088] [ 690.305975][T19088] Second to last potentially related work creation: [ 690.312653][T19088] kasan_save_stack+0x3a/0x60 [ 690.317315][T19088] __kasan_record_aux_stack+0xd2/0x100 [ 690.322810][T19088] kasan_record_aux_stack_noalloc+0xb/0x10 [ 690.328602][T19088] insert_work+0x52/0x310 [ 690.332920][T19088] __queue_work+0x923/0xca0 [ 690.337407][T19088] queue_work_on+0xd5/0x130 [ 690.341897][T19088] destroy_super_rcu+0xd1/0xe0 [ 690.346665][T19088] rcu_do_batch+0x4df/0xa80 [ 690.351150][T19088] rcu_core+0x55f/0xd60 [ 690.355296][T19088] rcu_core_si+0x9/0x10 [ 690.359439][T19088] __do_softirq+0x255/0x563 [ 690.363920][T19088] [ 690.366240][T19088] The buggy address belongs to the object at ffff888115ef8000 [ 690.366240][T19088] which belongs to the cache kmalloc-2k of size 2048 [ 690.380366][T19088] The buggy address is located 1136 bytes inside of [ 690.380366][T19088] 2048-byte region [ffff888115ef8000, ffff888115ef8800) [ 690.393790][T19088] The buggy address belongs to the page: [ 690.399411][T19088] page:ffffea000457be00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115ef8 [ 690.409630][T19088] head:ffffea000457be00 order:3 compound_mapcount:0 compound_pincount:0 [ 690.417934][T19088] flags: 0x4000000000010200(slab|head) [ 690.423387][T19088] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042d80 [ 690.431959][T19088] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 690.440524][T19088] page dumped because: kasan: bad access detected [ 690.446922][T19088] page_owner tracks the page as allocated [ 690.452629][T19088] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 133, ts 257360469632, free_ts 257279437611 [ 690.472575][T19088] prep_new_page+0x179/0x180 [ 690.477164][T19088] get_page_from_freelist+0x2235/0x23d0 [ 690.482700][T19088] __alloc_pages_nodemask+0x268/0x5f0 [ 690.488060][T19088] new_slab+0x84/0x3f0 [ 690.492131][T19088] ___slab_alloc+0x2a6/0x450 [ 690.496717][T19088] __slab_alloc+0x63/0xa0 [ 690.501151][T19088] __kmalloc_track_caller+0x1ef/0x320 [ 690.506548][T19088] __alloc_skb+0xdc/0x520 [ 690.510881][T19088] audit_log_start+0x3df/0x860 [ 690.515633][T19088] common_lsm_audit+0xd3/0x17f0 [ 690.520470][T19088] slow_avc_audit+0x1ac/0x220 [ 690.525134][T19088] avc_has_perm+0x1ca/0x360 [ 690.529625][T19088] selinux_socket_recvmsg+0x208/0x2e0 [ 690.534990][T19088] security_socket_recvmsg+0x77/0xb0 [ 690.540259][T19088] ____sys_recvmsg+0x1f6/0x580 [ 690.545012][T19088] ___sys_recvmsg+0x1af/0x4f0 [ 690.549758][T19088] page last free stack trace: [ 690.554422][T19088] __free_pages_ok+0x7fc/0x820 [ 690.559179][T19088] __free_pages+0xdd/0x380 [ 690.563583][T19088] __free_slab+0xcf/0x190 [ 690.567898][T19088] unfreeze_partials+0x15f/0x190 [ 690.572825][T19088] put_cpu_partial+0xc1/0x180 [ 690.577491][T19088] __slab_free+0x2c9/0x3a0 [ 690.581893][T19088] ___cache_free+0x111/0x130 [ 690.586475][T19088] qlink_free+0x50/0x90 [ 690.590719][T19088] qlist_free_all+0x5f/0xb0 [ 690.595210][T19088] kasan_quarantine_reduce+0x14a/0x160 [ 690.600654][T19088] __kasan_slab_alloc+0x2f/0xf0 [ 690.605576][T19088] slab_post_alloc_hook+0x5d/0x2f0 [ 690.610674][T19088] kmem_cache_alloc+0x165/0x2e0 [ 690.615526][T19088] __alloc_skb+0x9e/0x520 [ 690.619861][T19088] alloc_skb_with_frags+0xa2/0x560 [ 690.624981][T19088] sock_alloc_send_pskb+0x853/0x980 [ 690.630162][T19088] [ 690.632474][T19088] Memory state around the buggy address: [ 690.638098][T19088] ffff888115ef8300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.646147][T19088] ffff888115ef8380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.654196][T19088] >ffff888115ef8400: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 690.662241][T19088] ^ [ 690.669944][T19088] ffff888115ef8480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 690.677997][T19088] ffff888115ef8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 690.686040][T19088] ================================================================== [ 690.694082][T19088] Disabling lock debugging due to kernel taint [ 690.700432][ T2130] Bluetooth: hci0: command 0x1003 tx timeout [ 690.707095][ T3150] Bluetooth: hci0: sending frame failed (-49) [ 691.124755][ T2103] usbhid 3-1:1.0: can't add hid device: -71 [ 691.130861][ T2103] usbhid: probe of 3-1:1.0 failed with error -71 [ 691.145891][ T2103] usb 3-1: USB disconnect, device number 42 [ 691.264998][T10039] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 691.504904][T10039] usb 7-1: Using ep0 maxpacket: 16 [ 691.624766][T10039] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.643025][T10039] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.655430][T10039] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 691.676715][T10039] usb 7-1: config 0 interface 0 has no altsetting 0 [ 691.683817][T10039] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 691.696771][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.710535][T10039] usb 7-1: config 0 descriptor?? [ 692.114076][T19099] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 692.123940][T19099] CPU: 1 PID: 19099 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 692.135305][T19099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.145356][T19099] Call Trace: [ 692.148641][T19099] __dump_stack+0x21/0x24 [ 692.152962][T19099] dump_stack_lvl+0x169/0x1d8 [ 692.157647][T19099] ? show_regs_print_info+0x18/0x18 [ 692.162868][T19099] ? ___ratelimit+0x3d1/0x560 [ 692.167730][T19099] ? __kasan_check_write+0x14/0x20 [ 692.172843][T19099] ? _raw_spin_lock+0x8e/0xe0 [ 692.177542][T19099] dump_stack+0x15/0x1c [ 692.181708][T19099] dump_header+0xdd/0x650 [ 692.186050][T19099] oom_kill_process+0x1fa/0x2c0 [ 692.190905][T19099] out_of_memory+0x94a/0xd70 [ 692.195488][T19099] ? unregister_oom_notifier+0x20/0x20 [ 692.200942][T19099] ? mutex_lock_killable+0x8c/0xe0 [ 692.206052][T19099] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 692.212554][T19099] mem_cgroup_out_of_memory+0x260/0x310 [ 692.218096][T19099] ? mem_cgroup_oom_trylock+0x350/0x350 [ 692.223813][T19099] ? _raw_spin_lock+0x8e/0xe0 [ 692.228502][T19099] ? _raw_spin_trylock_bh+0x130/0x130 [ 692.233874][T19099] ? _raw_spin_unlock+0x4d/0x70 [ 692.238729][T19099] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 692.244274][T19099] ? _raw_spin_unlock_irq+0x4e/0x70 [ 692.249470][T19099] try_charge+0xf61/0x14e0 [ 692.253881][T19099] ? __memcg_kmem_charge+0x140/0x140 [ 692.259158][T19099] ? percpu_counter_add_batch+0x13c/0x160 [ 692.264883][T19099] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 692.270425][T19099] __mem_cgroup_charge+0x14c/0x6d0 [ 692.275529][T19099] shmem_add_to_page_cache+0x55e/0xe10 [ 692.280984][T19099] ? shmem_alloc_page+0x300/0x300 [ 692.286029][T19099] ? _raw_spin_lock_irqsave+0x110/0x110 [ 692.291564][T19099] ? find_lock_entry+0x4b/0x200 [ 692.296403][T19099] ? lru_cache_add+0x164/0x380 [ 692.301154][T19099] ? shmem_getpage_gfp+0x8f3/0x2110 [ 692.306342][T19099] shmem_getpage_gfp+0x8e8/0x2110 [ 692.311361][T19099] shmem_write_begin+0xce/0x1b0 [ 692.316203][T19099] generic_perform_write+0x2be/0x510 [ 692.321476][T19099] ? atime_needs_update+0x5b0/0x5b0 [ 692.326678][T19099] ? grab_cache_page_write_begin+0xb0/0xb0 [ 692.332483][T19099] ? file_remove_privs+0x580/0x580 [ 692.337592][T19099] ? __kasan_check_write+0x14/0x20 [ 692.342699][T19099] ? down_write+0xac/0x110 [ 692.347110][T19099] __generic_file_write_iter+0x24b/0x480 [ 692.352731][T19099] ? generic_write_checks+0x3d4/0x480 [ 692.358094][T19099] generic_file_write_iter+0xa9/0x1d0 [ 692.363453][T19099] __kernel_write+0x55a/0x910 [ 692.368123][T19099] ? vfs_read+0xa10/0xa10 [ 692.372443][T19099] ? populate_vma_page_range+0xf0/0xf0 [ 692.377899][T19099] ? __kasan_check_write+0x14/0x20 [ 692.383011][T19099] ? get_dump_page+0x46b/0x5b0 [ 692.387772][T19099] dump_emit+0x240/0x360 [ 692.392006][T19099] ? wait_for_dump_helpers+0x390/0x390 [ 692.397457][T19099] dump_user_range+0x6a/0x1a0 [ 692.402124][T19099] elf_core_dump+0x278a/0x2bc0 [ 692.406878][T19099] ? load_elf_binary+0x2890/0x2890 [ 692.411978][T19099] ? __fsnotify_parent+0x5ff/0x6c0 [ 692.417064][T19099] ? shmem_unused_huge_scan+0xa0/0xa0 [ 692.422416][T19099] ? do_truncate+0x1ad/0x210 [ 692.426984][T19099] ? putname+0xfe/0x150 [ 692.431118][T19099] ? __kasan_check_read+0x11/0x20 [ 692.436129][T19099] ? __ia32_sys_unshare+0x40/0x40 [ 692.441128][T19099] do_coredump+0x1ac9/0x27f0 [ 692.445700][T19099] ? simple_acl_create+0x1c0/0x1c0 [ 692.450790][T19099] ? debug_smp_processor_id+0x17/0x20 [ 692.456138][T19099] ? __irq_exit_rcu+0x40/0x150 [ 692.460879][T19099] ? irq_exit_rcu+0x9/0x10 [ 692.465274][T19099] ? sysvec_irq_work+0xc8/0xd0 [ 692.470020][T19099] ? _raw_spin_unlock_irq+0x49/0x70 [ 692.475196][T19099] get_signal+0xf23/0x12e0 [ 692.479603][T19099] arch_do_signal_or_restart+0xbf/0x10f0 [ 692.485214][T19099] ? __send_signal+0x8b8/0xb80 [ 692.489955][T19099] ? send_signal+0x479/0x5b0 [ 692.494522][T19099] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 692.500130][T19099] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 692.505917][T19099] ? force_sig+0xb5/0x100 [ 692.510221][T19099] ? send_sig+0x70/0x70 [ 692.514351][T19099] exit_to_user_mode_loop+0xa2/0xe0 [ 692.519526][T19099] irqentry_exit_to_user_mode+0x4e/0x80 [ 692.525485][T19099] irqentry_exit+0x12/0x60 [ 692.529991][T19099] exc_general_protection+0x1ca/0x250 [ 692.535369][T19099] ? asm_exc_general_protection+0x8/0x30 [ 692.540988][T19099] asm_exc_general_protection+0x1e/0x30 [ 692.546522][T19099] RIP: 0033:0x7f65cc7b1931 [ 692.550919][T19099] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 692.570507][T19099] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 692.576560][T19099] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 692.584530][T19099] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 692.592525][T19099] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 692.600515][T19099] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 692.608506][T19099] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 692.624746][T19099] memory: usage 307200kB, limit 307200kB, failcnt 10704 [ 692.625366][T10039] hid (null): global environment stack underflow [ 692.631735][T19099] memory+swap: usage 426732kB, limit 9007199254740988kB, failcnt 0 [ 692.631754][T19099] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 692.660365][T19099] Memory cgroup stats for /syz9: [ 692.660496][T19099] anon 319488 [ 692.660496][T19099] file 308723712 [ 692.660496][T19099] kernel_stack 0 [ 692.660496][T19099] percpu 0 [ 692.660496][T19099] sock 0 [ 692.660496][T19099] shmem 308723712 [ 692.660496][T19099] file_mapped 135168 [ 692.660496][T19099] file_dirty 0 [ 692.660496][T19099] file_writeback 0 [ 692.660496][T19099] anon_thp 0 [ 692.660496][T19099] inactive_anon 313253888 [ 692.660496][T19099] active_anon 1081344 [ 692.660496][T19099] inactive_file 77824 [ 692.660496][T19099] active_file 114688 [ 692.660496][T19099] unevictable 86016 [ 692.660496][T19099] slab_reclaimable 0 [ 692.660496][T19099] slab_unreclaimable 0 [ 692.660496][T19099] slab 0 [ 692.660496][T19099] workingset_refault_anon 165 [ 692.660496][T19099] workingset_refault_file 0 [ 692.660496][T19099] workingset_activate_anon 165 [ 692.660496][T19099] workingset_activate_file 0 [ 692.660496][T19099] workingset_restore_anon 0 [ 692.660496][T19099] workingset_restore_file 0 [ 692.754296][T19099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4293,pid=15933,uid=0 [ 692.769454][ T2103] Bluetooth: hci0: command 0x1001 tx timeout [ 692.775526][ T3150] Bluetooth: hci0: sending frame failed (-49) [ 692.781663][T19099] Memory cgroup out of memory: Killed process 15933 (syz.9.4293) total-vm:93612kB, anon-rss:956kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 692.800363][ T27] oom_reaper: reaped process 15933 (syz.9.4293), now anon-rss:0kB, file-rss:20160kB, shmem-rss:0kB [ 692.854421][T19085] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 692.864553][T19085] CPU: 0 PID: 19085 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 692.875925][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.885995][T19085] Call Trace: [ 692.889297][T19085] __dump_stack+0x21/0x24 [ 692.893629][T19085] dump_stack_lvl+0x169/0x1d8 [ 692.898309][T19085] ? show_regs_print_info+0x18/0x18 [ 692.903512][T19085] ? ___ratelimit+0x3d1/0x560 [ 692.908196][T19085] ? __kasan_check_write+0x14/0x20 [ 692.913397][T19085] ? _raw_spin_lock+0x8e/0xe0 [ 692.918074][T19085] dump_stack+0x15/0x1c [ 692.922236][T19085] dump_header+0xdd/0x650 [ 692.926575][T19085] oom_kill_process+0x1fa/0x2c0 [ 692.931411][T19085] out_of_memory+0x94a/0xd70 [ 692.935990][T19085] ? unregister_oom_notifier+0x20/0x20 [ 692.941440][T19085] ? mutex_lock_killable+0x8c/0xe0 [ 692.946541][T19085] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 692.953057][T19085] mem_cgroup_out_of_memory+0x260/0x310 [ 692.958614][T19085] ? mem_cgroup_oom_trylock+0x350/0x350 [ 692.964158][T19085] ? _raw_spin_lock+0x8e/0xe0 [ 692.968830][T19085] ? _raw_spin_trylock_bh+0x130/0x130 [ 692.974195][T19085] ? _raw_spin_unlock+0x4d/0x70 [ 692.979033][T19085] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 692.984565][T19085] ? _raw_spin_unlock_irq+0x4e/0x70 [ 692.989756][T19085] try_charge+0xf61/0x14e0 [ 692.994164][T19085] ? __memcg_kmem_charge+0x140/0x140 [ 692.999437][T19085] ? percpu_counter_add_batch+0x13c/0x160 [ 693.005146][T19085] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 693.010697][T19085] __mem_cgroup_charge+0x14c/0x6d0 [ 693.015812][T19085] shmem_add_to_page_cache+0x55e/0xe10 [ 693.021286][T19085] ? shmem_alloc_page+0x300/0x300 [ 693.026310][T19085] ? _raw_spin_lock_irqsave+0x110/0x110 [ 693.031852][T19085] ? find_lock_entry+0x4b/0x200 [ 693.036699][T19085] ? lru_cache_add+0x164/0x380 [ 693.041452][T19085] ? shmem_getpage_gfp+0x8f3/0x2110 [ 693.046638][T19085] shmem_getpage_gfp+0x8e8/0x2110 [ 693.051661][T19085] shmem_write_begin+0xce/0x1b0 [ 693.056506][T19085] generic_perform_write+0x2be/0x510 [ 693.061797][T19085] ? atime_needs_update+0x5b0/0x5b0 [ 693.066985][T19085] ? grab_cache_page_write_begin+0xb0/0xb0 [ 693.072778][T19085] ? file_remove_privs+0x580/0x580 [ 693.077881][T19085] ? __kasan_check_write+0x14/0x20 [ 693.082981][T19085] ? down_write+0xac/0x110 [ 693.087391][T19085] __generic_file_write_iter+0x24b/0x480 [ 693.093012][T19085] ? generic_write_checks+0x3d4/0x480 [ 693.098371][T19085] generic_file_write_iter+0xa9/0x1d0 [ 693.103734][T19085] __kernel_write+0x55a/0x910 [ 693.108399][T19085] ? vfs_read+0xa10/0xa10 [ 693.112717][T19085] ? populate_vma_page_range+0xf0/0xf0 [ 693.118162][T19085] ? __kasan_check_write+0x14/0x20 [ 693.123259][T19085] ? get_dump_page+0x46b/0x5b0 [ 693.128013][T19085] dump_emit+0x240/0x360 [ 693.132245][T19085] ? wait_for_dump_helpers+0x390/0x390 [ 693.137698][T19085] dump_user_range+0x6a/0x1a0 [ 693.142360][T19085] elf_core_dump+0x278a/0x2bc0 [ 693.147118][T19085] ? load_elf_binary+0x2890/0x2890 [ 693.152215][T19085] ? __fsnotify_parent+0x5ff/0x6c0 [ 693.157318][T19085] ? shmem_unused_huge_scan+0xa0/0xa0 [ 693.162690][T19085] ? do_truncate+0x1ad/0x210 [ 693.167266][T19085] ? putname+0xfe/0x150 [ 693.171408][T19085] ? __kasan_check_read+0x11/0x20 [ 693.176421][T19085] ? __ia32_sys_unshare+0x40/0x40 [ 693.181437][T19085] do_coredump+0x1ac9/0x27f0 [ 693.186017][T19085] ? simple_acl_create+0x1c0/0x1c0 [ 693.191113][T19085] ? bpf_trace_run1+0x200/0x200 [ 693.195953][T19085] ? kmem_cache_free+0x100/0x2d0 [ 693.200877][T19085] ? ____kasan_slab_free+0x130/0x160 [ 693.206159][T19085] ? get_signal+0xb98/0x12e0 [ 693.210736][T19085] ? get_signal+0xb98/0x12e0 [ 693.215314][T19085] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 693.221126][T19085] ? kmem_cache_free+0x2ac/0x2d0 [ 693.226054][T19085] get_signal+0xf23/0x12e0 [ 693.230462][T19085] arch_do_signal_or_restart+0xbf/0x10f0 [ 693.236084][T19085] ? __send_signal+0x8b8/0xb80 [ 693.240845][T19085] ? send_signal+0x479/0x5b0 [ 693.245424][T19085] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 693.251043][T19085] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 693.256838][T19085] ? force_sig+0xb5/0x100 [ 693.261155][T19085] ? send_sig+0x70/0x70 [ 693.265304][T19085] exit_to_user_mode_loop+0xa2/0xe0 [ 693.270491][T19085] irqentry_exit_to_user_mode+0x4e/0x80 [ 693.276022][T19085] irqentry_exit+0x12/0x60 [ 693.280425][T19085] exc_general_protection+0x1ca/0x250 [ 693.285790][T19085] ? asm_exc_general_protection+0x8/0x30 [ 693.291411][T19085] asm_exc_general_protection+0x1e/0x30 [ 693.296944][T19085] RIP: 0033:0x7f65cc7b1931 [ 693.301348][T19085] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 693.320939][T19085] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 693.326994][T19085] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 693.334953][T19085] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 693.342918][T19085] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 693.350882][T19085] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 693.358845][T19085] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 693.371543][T19085] memory: usage 307200kB, limit 307200kB, failcnt 10908 [ 693.416425][T19085] memory+swap: usage 426644kB, limit 9007199254740988kB, failcnt 0 [ 693.424338][T19085] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.432300][T19085] Memory cgroup stats for /syz9: [ 693.432422][T19085] anon 319488 [ 693.432422][T19085] file 308723712 [ 693.432422][T19085] kernel_stack 0 [ 693.432422][T19085] percpu 0 [ 693.432422][T19085] sock 0 [ 693.432422][T19085] shmem 308723712 [ 693.432422][T19085] file_mapped 135168 [ 693.432422][T19085] file_dirty 0 [ 693.432422][T19085] file_writeback 0 [ 693.432422][T19085] anon_thp 0 [ 693.432422][T19085] inactive_anon 313253888 [ 693.432422][T19085] active_anon 1216512 [ 693.432422][T19085] inactive_file 77824 [ 693.432422][T19085] active_file 114688 [ 693.432422][T19085] unevictable 86016 [ 693.432422][T19085] slab_reclaimable 0 [ 693.432422][T19085] slab_unreclaimable 0 [ 693.432422][T19085] slab 0 [ 693.432422][T19085] workingset_refault_anon 165 [ 693.432422][T19085] workingset_refault_file 0 [ 693.432422][T19085] workingset_activate_anon 165 [ 693.432422][T19085] workingset_activate_file 0 [ 693.432422][T19085] workingset_restore_anon 0 [ 693.432422][T19085] workingset_restore_file 0 [ 693.459099][ T2103] usb 7-1: USB disconnect, device number 35 [ 693.526876][T19085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4292,pid=15928,uid=0 [ 693.547188][T19085] Memory cgroup out of memory: Killed process 15928 (syz.9.4292) total-vm:93612kB, anon-rss:960kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 693.574711][T19107] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 693.584290][T19107] CPU: 1 PID: 19107 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 693.595659][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 693.602426][ T24] kauditd_printk_skb: 308 callbacks suppressed [ 693.602438][ T24] audit: type=1400 audit(2000003864.541:223632): avc: denied { read write } for pid=17101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.605714][T19107] Call Trace: [ 693.605733][T19107] __dump_stack+0x21/0x24 [ 693.605743][T19107] dump_stack_lvl+0x169/0x1d8 [ 693.605762][T19107] ? show_regs_print_info+0x18/0x18 [ 693.625036][ T24] audit: type=1400 audit(2000003864.541:223633): avc: denied { read write open } for pid=17101 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.636283][T19107] ? ___ratelimit+0x3d1/0x560 [ 693.636297][T19107] ? __kasan_check_write+0x14/0x20 [ 693.636310][T19107] ? _raw_spin_lock+0x8e/0xe0 [ 693.636322][T19107] dump_stack+0x15/0x1c [ 693.636331][T19107] dump_header+0xdd/0x650 [ 693.636350][T19107] oom_kill_process+0x1fa/0x2c0 [ 693.651247][ T24] audit: type=1400 audit(2000003864.601:223634): avc: denied { ioctl } for pid=17101 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.653822][T19107] out_of_memory+0x94a/0xd70 [ 693.653839][T19107] ? unregister_oom_notifier+0x20/0x20 [ 693.742694][T19107] ? mutex_lock_killable+0xd3/0xe0 [ 693.747793][T19107] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 693.754278][T19107] mem_cgroup_out_of_memory+0x260/0x310 [ 693.759810][T19107] ? mem_cgroup_oom_trylock+0x350/0x350 [ 693.765335][T19107] ? _raw_spin_lock+0x8e/0xe0 [ 693.769993][T19107] ? _raw_spin_trylock_bh+0x130/0x130 [ 693.775345][T19107] ? _raw_spin_unlock+0x4d/0x70 [ 693.780176][T19107] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 693.785974][T19107] ? _raw_spin_unlock_irq+0x4e/0x70 [ 693.791168][T19107] try_charge+0xf61/0x14e0 [ 693.795574][T19107] ? __memcg_kmem_charge+0x140/0x140 [ 693.800843][T19107] ? percpu_counter_add_batch+0x13c/0x160 [ 693.806544][T19107] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 693.812076][T19107] __mem_cgroup_charge+0x14c/0x6d0 [ 693.817170][T19107] shmem_add_to_page_cache+0x55e/0xe10 [ 693.822608][T19107] ? shmem_alloc_page+0x300/0x300 [ 693.827614][T19107] ? _raw_spin_lock_irqsave+0x110/0x110 [ 693.833141][T19107] ? find_lock_entry+0x4b/0x200 [ 693.837971][T19107] ? lru_cache_add+0x164/0x380 [ 693.842710][T19107] ? shmem_getpage_gfp+0x8f3/0x2110 [ 693.847890][T19107] shmem_getpage_gfp+0x8e8/0x2110 [ 693.852898][T19107] shmem_write_begin+0xce/0x1b0 [ 693.857731][T19107] generic_perform_write+0x2be/0x510 [ 693.862995][T19107] ? atime_needs_update+0x5b0/0x5b0 [ 693.868174][T19107] ? grab_cache_page_write_begin+0xb0/0xb0 [ 693.873959][T19107] ? file_remove_privs+0x580/0x580 [ 693.879047][T19107] ? __kasan_check_write+0x14/0x20 [ 693.884224][T19107] ? down_write+0xac/0x110 [ 693.888619][T19107] __generic_file_write_iter+0x24b/0x480 [ 693.894230][T19107] ? generic_write_checks+0x3d4/0x480 [ 693.899601][T19107] generic_file_write_iter+0xa9/0x1d0 [ 693.904962][T19107] __kernel_write+0x55a/0x910 [ 693.909624][T19107] ? vfs_read+0xa10/0xa10 [ 693.913947][T19107] ? populate_vma_page_range+0xf0/0xf0 [ 693.919395][T19107] ? __kasan_check_write+0x14/0x20 [ 693.924491][T19107] ? get_dump_page+0x46b/0x5b0 [ 693.929246][T19107] dump_emit+0x240/0x360 [ 693.933474][T19107] ? wait_for_dump_helpers+0x390/0x390 [ 693.938919][T19107] dump_user_range+0x6a/0x1a0 [ 693.943589][T19107] elf_core_dump+0x278a/0x2bc0 [ 693.948341][T19107] ? load_elf_binary+0x2890/0x2890 [ 693.953436][T19107] ? __fsnotify_parent+0x5ff/0x6c0 [ 693.958532][T19107] ? shmem_unused_huge_scan+0xa0/0xa0 [ 693.963898][T19107] ? do_truncate+0x1ad/0x210 [ 693.968558][T19107] ? putname+0xfe/0x150 [ 693.972722][T19107] ? __kasan_check_read+0x11/0x20 [ 693.977748][T19107] ? __ia32_sys_unshare+0x40/0x40 [ 693.982760][T19107] do_coredump+0x1ac9/0x27f0 [ 693.987341][T19107] ? simple_acl_create+0x1c0/0x1c0 [ 693.992438][T19107] ? debug_smp_processor_id+0x17/0x20 [ 693.997797][T19107] ? preempt_schedule+0xa7/0xb0 [ 694.002635][T19107] ? schedule_preempt_disabled+0x20/0x20 [ 694.008253][T19107] ? sysvec_irq_work+0xc8/0xd0 [ 694.013009][T19107] ? preempt_schedule_thunk+0x16/0x18 [ 694.018371][T19107] get_signal+0xf23/0x12e0 [ 694.022783][T19107] arch_do_signal_or_restart+0xbf/0x10f0 [ 694.028402][T19107] ? __send_signal+0x8b8/0xb80 [ 694.033157][T19107] ? send_signal+0x479/0x5b0 [ 694.037733][T19107] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 694.043477][T19107] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 694.049301][T19107] ? force_sig+0xb5/0x100 [ 694.053629][T19107] ? send_sig+0x70/0x70 [ 694.057777][T19107] exit_to_user_mode_loop+0xa2/0xe0 [ 694.062967][T19107] irqentry_exit_to_user_mode+0x4e/0x80 [ 694.068502][T19107] irqentry_exit+0x12/0x60 [ 694.072908][T19107] exc_general_protection+0x1ca/0x250 [ 694.078270][T19107] ? asm_exc_general_protection+0x8/0x30 [ 694.083890][T19107] asm_exc_general_protection+0x1e/0x30 [ 694.089423][T19107] RIP: 0033:0x7f65cc7b1931 [ 694.093829][T19107] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 694.113424][T19107] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 694.119480][T19107] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 694.127439][T19107] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 694.135399][T19107] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 694.143356][T19107] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 694.151313][T19107] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 694.161673][T19107] memory: usage 307200kB, limit 307200kB, failcnt 11184 [ 694.168660][T19107] memory+swap: usage 426748kB, limit 9007199254740988kB, failcnt 0 [ 694.176728][T19107] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 694.183576][T19107] Memory cgroup stats for /syz9: [ 694.183689][T19107] anon 319488 [ 694.183689][T19107] file 308723712 [ 694.183689][T19107] kernel_stack 0 [ 694.183689][T19107] percpu 0 [ 694.183689][T19107] sock 0 [ 694.183689][T19107] shmem 308723712 [ 694.183689][T19107] file_mapped 135168 [ 694.183689][T19107] file_dirty 0 [ 694.183689][T19107] file_writeback 0 [ 694.183689][T19107] anon_thp 0 [ 694.183689][T19107] inactive_anon 306438144 [ 694.183689][T19107] active_anon 7974912 [ 694.183689][T19107] inactive_file 77824 [ 694.183689][T19107] active_file 114688 [ 694.183689][T19107] unevictable 86016 [ 694.183689][T19107] slab_reclaimable 0 [ 694.183689][T19107] slab_unreclaimable 0 [ 694.183689][T19107] slab 0 [ 694.183689][T19107] workingset_refault_anon 165 [ 694.183689][T19107] workingset_refault_file 0 [ 694.183689][T19107] workingset_activate_anon 165 [ 694.183689][T19107] workingset_activate_file 0 [ 694.183689][T19107] workingset_restore_anon 0 [ 694.183689][T19107] workingset_restore_file 0 [ 694.278505][T19107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5192,pid=19095,uid=0 [ 694.294292][T19107] Memory cgroup out of memory: Killed process 19095 (syz.9.5192) total-vm:89904kB, anon-rss:968kB, file-rss:49924kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 694.315662][T19094] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 694.361237][T19094] CPU: 0 PID: 19094 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 694.372628][T19094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.382698][T19094] Call Trace: [ 694.386003][T19094] __dump_stack+0x21/0x24 [ 694.390349][T19094] dump_stack_lvl+0x169/0x1d8 [ 694.395042][T19094] ? show_regs_print_info+0x18/0x18 [ 694.400251][T19094] ? ___ratelimit+0x3d1/0x560 [ 694.404936][T19094] ? __kasan_check_write+0x14/0x20 [ 694.410062][T19094] ? _raw_spin_lock+0x8e/0xe0 [ 694.414754][T19094] dump_stack+0x15/0x1c [ 694.418921][T19094] dump_header+0xdd/0x650 [ 694.423264][T19094] oom_kill_process+0x1fa/0x2c0 [ 694.428130][T19094] out_of_memory+0x94a/0xd70 [ 694.432725][T19094] ? unregister_oom_notifier+0x20/0x20 [ 694.438191][T19094] ? mutex_lock_killable+0xd3/0xe0 [ 694.443314][T19094] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 694.449839][T19094] mem_cgroup_out_of_memory+0x260/0x310 [ 694.455413][T19094] ? mem_cgroup_oom_trylock+0x350/0x350 [ 694.460973][T19094] ? _raw_spin_lock+0x8e/0xe0 [ 694.465668][T19094] ? _raw_spin_trylock_bh+0x130/0x130 [ 694.471052][T19094] ? _raw_spin_unlock+0x4d/0x70 [ 694.475918][T19094] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 694.481470][T19094] ? _raw_spin_unlock_irq+0x4e/0x70 [ 694.486675][T19094] try_charge+0xf61/0x14e0 [ 694.491109][T19094] ? __memcg_kmem_charge+0x140/0x140 [ 694.496409][T19094] ? percpu_counter_add_batch+0x13c/0x160 [ 694.502142][T19094] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 694.507705][T19094] __mem_cgroup_charge+0x14c/0x6d0 [ 694.512834][T19094] shmem_add_to_page_cache+0x55e/0xe10 [ 694.518317][T19094] ? shmem_alloc_page+0x300/0x300 [ 694.523352][T19094] ? _raw_spin_lock_irqsave+0x110/0x110 [ 694.528911][T19094] ? find_lock_entry+0x4b/0x200 [ 694.533764][T19094] ? lru_cache_add+0x164/0x380 [ 694.538535][T19094] ? shmem_getpage_gfp+0x8f3/0x2110 [ 694.543743][T19094] shmem_getpage_gfp+0x8e8/0x2110 [ 694.548784][T19094] shmem_write_begin+0xce/0x1b0 [ 694.553651][T19094] generic_perform_write+0x2be/0x510 [ 694.558948][T19094] ? atime_needs_update+0x5b0/0x5b0 [ 694.564162][T19094] ? grab_cache_page_write_begin+0xb0/0xb0 [ 694.569991][T19094] ? file_remove_privs+0x580/0x580 [ 694.575101][T19094] ? __kasan_check_write+0x14/0x20 [ 694.580201][T19094] ? down_write+0xac/0x110 [ 694.584609][T19094] __generic_file_write_iter+0x24b/0x480 [ 694.590234][T19094] ? generic_write_checks+0x3d4/0x480 [ 694.595595][T19094] generic_file_write_iter+0xa9/0x1d0 [ 694.600954][T19094] __kernel_write+0x55a/0x910 [ 694.605616][T19094] ? vfs_read+0xa10/0xa10 [ 694.609931][T19094] ? populate_vma_page_range+0xf0/0xf0 [ 694.615376][T19094] ? __kasan_check_write+0x14/0x20 [ 694.620476][T19094] ? get_dump_page+0x46b/0x5b0 [ 694.625234][T19094] dump_emit+0x240/0x360 [ 694.629468][T19094] ? wait_for_dump_helpers+0x390/0x390 [ 694.634917][T19094] ? dump_user_range+0xea/0x1a0 [ 694.639757][T19094] dump_user_range+0x6a/0x1a0 [ 694.644420][T19094] elf_core_dump+0x278a/0x2bc0 [ 694.649170][T19094] ? load_elf_binary+0x2890/0x2890 [ 694.654270][T19094] ? __fsnotify_parent+0x5ff/0x6c0 [ 694.659368][T19094] ? shmem_unused_huge_scan+0xa0/0xa0 [ 694.664735][T19094] ? do_truncate+0x1ad/0x210 [ 694.669309][T19094] ? putname+0xfe/0x150 [ 694.673454][T19094] ? __kasan_check_read+0x11/0x20 [ 694.678462][T19094] ? __ia32_sys_unshare+0x40/0x40 [ 694.683475][T19094] do_coredump+0x1ac9/0x27f0 [ 694.688054][T19094] ? simple_acl_create+0x1c0/0x1c0 [ 694.693154][T19094] ? debug_smp_processor_id+0x17/0x20 [ 694.698515][T19094] ? preempt_schedule+0xa7/0xb0 [ 694.703356][T19094] ? schedule_preempt_disabled+0x20/0x20 [ 694.708975][T19094] ? sysvec_irq_work+0xc8/0xd0 [ 694.713727][T19094] ? preempt_schedule_thunk+0x16/0x18 [ 694.719260][T19094] get_signal+0xf23/0x12e0 [ 694.723666][T19094] arch_do_signal_or_restart+0xbf/0x10f0 [ 694.729286][T19094] ? __send_signal+0x8b8/0xb80 [ 694.734040][T19094] ? send_signal+0x479/0x5b0 [ 694.738617][T19094] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 694.744234][T19094] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 694.750029][T19094] ? force_sig+0xb5/0x100 [ 694.754341][T19094] ? send_sig+0x70/0x70 [ 694.758488][T19094] exit_to_user_mode_loop+0xa2/0xe0 [ 694.763672][T19094] irqentry_exit_to_user_mode+0x4e/0x80 [ 694.769207][T19094] irqentry_exit+0x12/0x60 [ 694.773613][T19094] exc_general_protection+0x1ca/0x250 [ 694.778975][T19094] ? asm_exc_general_protection+0x8/0x30 [ 694.784631][T19094] asm_exc_general_protection+0x1e/0x30 [ 694.790175][T19094] RIP: 0033:0x7f65cc7b1931 [ 694.794581][T19094] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 694.814185][T19094] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 694.820252][T19094] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 694.828227][T19094] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 694.836192][T19094] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 694.844155][T19094] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 694.852123][T19094] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 694.861063][T19094] memory: usage 307152kB, limit 307200kB, failcnt 11378 [ 694.864516][T13694] Bluetooth: hci0: command 0x1009 tx timeout [ 694.868512][T19094] memory+swap: usage 423908kB, limit 9007199254740988kB, failcnt 0 [ 694.883203][T19094] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 694.891172][T19094] Memory cgroup stats for /syz9: [ 694.891326][T19094] anon 319488 [ 694.891326][T19094] file 307642368 [ 694.891326][T19094] kernel_stack 0 [ 694.891326][T19094] percpu 0 [ 694.891326][T19094] sock 0 [ 694.891326][T19094] shmem 307642368 [ 694.891326][T19094] file_mapped 135168 [ 694.891326][T19094] file_dirty 0 [ 694.891326][T19094] file_writeback 0 [ 694.891326][T19094] anon_thp 0 [ 694.891326][T19094] inactive_anon 305385472 [ 694.891326][T19094] active_anon 8110080 [ 694.891326][T19094] inactive_file 77824 [ 694.891326][T19094] active_file 114688 [ 694.891326][T19094] unevictable 86016 [ 694.891326][T19094] slab_reclaimable 0 [ 694.891326][T19094] slab_unreclaimable 0 [ 694.891326][T19094] slab 0 [ 694.891326][T19094] workingset_refault_anon 165 [ 694.891326][T19094] workingset_refault_file 33 [ 694.891326][T19094] workingset_activate_anon 165 [ 694.891326][T19094] workingset_activate_file 33 [ 694.891326][T19094] workingset_restore_anon 0 [ 694.891326][T19094] workingset_restore_file 0 [ 694.986392][T19094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5192,pid=19077,uid=0 [ 695.007203][T19094] Memory cgroup out of memory: Killed process 19077 (syz.9.5192) total-vm:89904kB, anon-rss:968kB, file-rss:45760kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 695.024417][ T27] oom_reaper: reaped process 19077 (syz.9.5192), now anon-rss:0kB, file-rss:45696kB, shmem-rss:0kB [ 695.027148][T19075] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 695.050111][T19075] CPU: 1 PID: 19075 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 695.061490][T19075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 695.071551][T19075] Call Trace: [ 695.074852][T19075] __dump_stack+0x21/0x24 [ 695.079184][T19075] dump_stack_lvl+0x169/0x1d8 [ 695.083869][T19075] ? show_regs_print_info+0x18/0x18 [ 695.089073][T19075] ? ___ratelimit+0x3d1/0x560 [ 695.093750][T19075] ? __kasan_check_write+0x14/0x20 [ 695.098860][T19075] ? _raw_spin_lock+0x8e/0xe0 [ 695.103521][T19075] dump_stack+0x15/0x1c [ 695.107656][T19075] dump_header+0xdd/0x650 [ 695.111980][T19075] oom_kill_process+0x1fa/0x2c0 [ 695.116902][T19075] out_of_memory+0x94a/0xd70 [ 695.121501][T19075] ? unregister_oom_notifier+0x20/0x20 [ 695.126954][T19075] ? mutex_lock_killable+0xd3/0xe0 [ 695.132068][T19075] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 695.138568][T19075] mem_cgroup_out_of_memory+0x260/0x310 [ 695.144100][T19075] ? mem_cgroup_oom_trylock+0x350/0x350 [ 695.149629][T19075] ? _raw_spin_lock+0x8e/0xe0 [ 695.154288][T19075] ? _raw_spin_trylock_bh+0x130/0x130 [ 695.159640][T19075] ? _raw_spin_unlock+0x4d/0x70 [ 695.164468][T19075] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 695.169992][T19075] ? _raw_spin_unlock_irq+0x4e/0x70 [ 695.175171][T19075] try_charge+0xf61/0x14e0 [ 695.179568][T19075] ? __memcg_kmem_charge+0x140/0x140 [ 695.184841][T19075] ? percpu_counter_add_batch+0x13c/0x160 [ 695.190538][T19075] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 695.196065][T19075] __mem_cgroup_charge+0x14c/0x6d0 [ 695.201159][T19075] shmem_add_to_page_cache+0x55e/0xe10 [ 695.206599][T19075] ? shmem_alloc_page+0x300/0x300 [ 695.211605][T19075] ? _raw_spin_lock_irqsave+0x110/0x110 [ 695.217131][T19075] ? find_lock_entry+0x4b/0x200 [ 695.221962][T19075] ? lru_cache_add+0x164/0x380 [ 695.226702][T19075] ? shmem_getpage_gfp+0x8f3/0x2110 [ 695.231901][T19075] shmem_getpage_gfp+0x8e8/0x2110 [ 695.236924][T19075] shmem_write_begin+0xce/0x1b0 [ 695.241757][T19075] generic_perform_write+0x2be/0x510 [ 695.247021][T19075] ? atime_needs_update+0x5b0/0x5b0 [ 695.252221][T19075] ? grab_cache_page_write_begin+0xb0/0xb0 [ 695.258011][T19075] ? file_remove_privs+0x580/0x580 [ 695.263111][T19075] ? __kasan_check_write+0x14/0x20 [ 695.268204][T19075] ? down_write+0xac/0x110 [ 695.272601][T19075] __generic_file_write_iter+0x24b/0x480 [ 695.278213][T19075] ? generic_write_checks+0x3d4/0x480 [ 695.283563][T19075] generic_file_write_iter+0xa9/0x1d0 [ 695.288921][T19075] __kernel_write+0x55a/0x910 [ 695.293595][T19075] ? vfs_read+0xa10/0xa10 [ 695.297913][T19075] ? populate_vma_page_range+0xf0/0xf0 [ 695.303360][T19075] ? __kasan_check_write+0x14/0x20 [ 695.308452][T19075] ? get_dump_page+0x46b/0x5b0 [ 695.313205][T19075] dump_emit+0x240/0x360 [ 695.317433][T19075] ? wait_for_dump_helpers+0x390/0x390 [ 695.322879][T19075] dump_user_range+0x6a/0x1a0 [ 695.327536][T19075] elf_core_dump+0x278a/0x2bc0 [ 695.332306][T19075] ? load_elf_binary+0x2890/0x2890 [ 695.337398][T19075] ? __fsnotify_parent+0x5ff/0x6c0 [ 695.342492][T19075] ? shmem_unused_huge_scan+0xa0/0xa0 [ 695.347881][T19075] ? do_truncate+0x1ad/0x210 [ 695.352451][T19075] ? putname+0xfe/0x150 [ 695.356587][T19075] ? __kasan_check_read+0x11/0x20 [ 695.361592][T19075] ? __ia32_sys_unshare+0x40/0x40 [ 695.366597][T19075] do_coredump+0x1ac9/0x27f0 [ 695.371168][T19075] ? simple_acl_create+0x1c0/0x1c0 [ 695.376259][T19075] ? bpf_trace_run2+0xb8/0x200 [ 695.381012][T19075] ? get_signal+0xb98/0x12e0 [ 695.385585][T19075] ? ____kasan_slab_free+0x130/0x160 [ 695.390958][T19075] ? kmem_cache_free+0x2ac/0x2d0 [ 695.395874][T19075] get_signal+0xf23/0x12e0 [ 695.400272][T19075] arch_do_signal_or_restart+0xbf/0x10f0 [ 695.405891][T19075] ? __send_signal+0x8b8/0xb80 [ 695.410636][T19075] ? send_signal+0x479/0x5b0 [ 695.415219][T19075] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 695.420832][T19075] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 695.426618][T19075] ? force_sig+0xb5/0x100 [ 695.430924][T19075] ? send_sig+0x70/0x70 [ 695.435063][T19075] exit_to_user_mode_loop+0xa2/0xe0 [ 695.440252][T19075] irqentry_exit_to_user_mode+0x4e/0x80 [ 695.445794][T19075] irqentry_exit+0x12/0x60 [ 695.450277][T19075] exc_general_protection+0x1ca/0x250 [ 695.455631][T19075] ? asm_exc_general_protection+0x8/0x30 [ 695.461246][T19075] asm_exc_general_protection+0x1e/0x30 [ 695.466780][T19075] RIP: 0033:0x7f65cc7b1931 [ 695.471178][T19075] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 695.490765][T19075] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 695.496815][T19075] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 695.504771][T19075] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 695.512811][T19075] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 695.520768][T19075] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 695.528730][T19075] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 695.538336][T19075] memory: usage 293084kB, limit 307200kB, failcnt 11777 [ 695.545624][T19075] memory+swap: usage 400200kB, limit 9007199254740988kB, failcnt 0 [ 695.553521][T19075] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 695.560425][T19075] Memory cgroup stats for /syz9: [ 695.560543][T19075] anon 319488 [ 695.560543][T19075] file 294395904 [ 695.560543][T19075] kernel_stack 0 [ 695.560543][T19075] percpu 0 [ 695.560543][T19075] sock 0 [ 695.560543][T19075] shmem 294260736 [ 695.560543][T19075] file_mapped 135168 [ 695.560543][T19075] file_dirty 0 [ 695.560543][T19075] file_writeback 0 [ 695.560543][T19075] anon_thp 0 [ 695.560543][T19075] inactive_anon 291799040 [ 695.560543][T19075] active_anon 8380416 [ 695.560543][T19075] inactive_file 77824 [ 695.560543][T19075] active_file 114688 [ 695.560543][T19075] unevictable 86016 [ 695.560543][T19075] slab_reclaimable 0 [ 695.560543][T19075] slab_unreclaimable 0 [ 695.560543][T19075] slab 0 [ 695.560543][T19075] workingset_refault_anon 165 [ 695.560543][T19075] workingset_refault_file 33 [ 695.560543][T19075] workingset_activate_anon 165 [ 695.560543][T19075] workingset_activate_file 33 [ 695.560543][T19075] workingset_restore_anon 0 [ 695.560543][T19075] workingset_restore_file 0 [ 695.666525][T19075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5192,pid=19087,uid=0 [ 695.681495][T19075] Memory cgroup out of memory: Killed process 19087 (syz.9.5192) total-vm:89904kB, anon-rss:984kB, file-rss:53508kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 696.074559][T19078] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 696.164687][T19078] CPU: 1 PID: 19078 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 696.176079][T19078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.186139][T19078] Call Trace: [ 696.189441][T19078] __dump_stack+0x21/0x24 [ 696.193776][T19078] dump_stack_lvl+0x169/0x1d8 [ 696.198454][T19078] ? show_regs_print_info+0x18/0x18 [ 696.203654][T19078] ? ___ratelimit+0x3d1/0x560 [ 696.208339][T19078] ? __kasan_check_write+0x14/0x20 [ 696.213460][T19078] ? _raw_spin_lock+0x8e/0xe0 [ 696.218144][T19078] dump_stack+0x15/0x1c [ 696.222293][T19078] dump_header+0xdd/0x650 [ 696.226616][T19078] oom_kill_process+0x1fa/0x2c0 [ 696.231457][T19078] out_of_memory+0x94a/0xd70 [ 696.236034][T19078] ? unregister_oom_notifier+0x20/0x20 [ 696.241482][T19078] ? mutex_lock_killable+0x8c/0xe0 [ 696.246580][T19078] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 696.253069][T19078] mem_cgroup_out_of_memory+0x260/0x310 [ 696.258606][T19078] ? mem_cgroup_oom_trylock+0x350/0x350 [ 696.264137][T19078] ? _raw_spin_lock+0x8e/0xe0 [ 696.268803][T19078] ? _raw_spin_trylock_bh+0x130/0x130 [ 696.274170][T19078] ? _raw_spin_unlock+0x4d/0x70 [ 696.279013][T19078] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 696.284546][T19078] ? _raw_spin_unlock_irq+0x4e/0x70 [ 696.289732][T19078] try_charge+0xf61/0x14e0 [ 696.294145][T19078] ? __memcg_kmem_charge+0x140/0x140 [ 696.299417][T19078] ? percpu_counter_add_batch+0x13c/0x160 [ 696.305128][T19078] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 696.310662][T19078] __mem_cgroup_charge+0x14c/0x6d0 [ 696.315788][T19078] shmem_add_to_page_cache+0x55e/0xe10 [ 696.321239][T19078] ? shmem_alloc_page+0x300/0x300 [ 696.326252][T19078] ? _raw_spin_lock_irqsave+0x110/0x110 [ 696.331790][T19078] ? find_lock_entry+0x4b/0x200 [ 696.336647][T19078] ? lru_cache_add+0x164/0x380 [ 696.341399][T19078] ? shmem_getpage_gfp+0x8f3/0x2110 [ 696.346581][T19078] shmem_getpage_gfp+0x8e8/0x2110 [ 696.351594][T19078] ? __kasan_check_write+0x14/0x20 [ 696.356796][T19078] shmem_write_begin+0xce/0x1b0 [ 696.361640][T19078] generic_perform_write+0x2be/0x510 [ 696.366919][T19078] ? preempt_count_add+0x90/0x1b0 [ 696.371935][T19078] ? grab_cache_page_write_begin+0xb0/0xb0 [ 696.377733][T19078] ? file_remove_privs+0x580/0x580 [ 696.382835][T19078] ? __kasan_check_write+0x14/0x20 [ 696.387941][T19078] ? down_write+0xac/0x110 [ 696.392353][T19078] __generic_file_write_iter+0x24b/0x480 [ 696.397973][T19078] ? generic_write_checks+0x3d4/0x480 [ 696.403334][T19078] generic_file_write_iter+0xa9/0x1d0 [ 696.408700][T19078] __kernel_write+0x55a/0x910 [ 696.413369][T19078] ? vfs_read+0xa10/0xa10 [ 696.417704][T19078] ? populate_vma_page_range+0xf0/0xf0 [ 696.423151][T19078] ? __kasan_check_write+0x14/0x20 [ 696.428248][T19078] ? get_dump_page+0x46b/0x5b0 [ 696.433004][T19078] dump_emit+0x240/0x360 [ 696.437235][T19078] ? wait_for_dump_helpers+0x390/0x390 [ 696.442686][T19078] ? dump_user_range+0xea/0x1a0 [ 696.447525][T19078] dump_user_range+0x6a/0x1a0 [ 696.452188][T19078] elf_core_dump+0x278a/0x2bc0 [ 696.456945][T19078] ? load_elf_binary+0x2890/0x2890 [ 696.462043][T19078] ? __fsnotify_parent+0x5ff/0x6c0 [ 696.467142][T19078] ? shmem_unused_huge_scan+0xa0/0xa0 [ 696.472515][T19078] ? do_truncate+0x1ad/0x210 [ 696.477091][T19078] ? putname+0xfe/0x150 [ 696.481237][T19078] ? __kasan_check_read+0x11/0x20 [ 696.486251][T19078] ? __ia32_sys_unshare+0x40/0x40 [ 696.491264][T19078] do_coredump+0x1ac9/0x27f0 [ 696.495856][T19078] ? simple_acl_create+0x1c0/0x1c0 [ 696.500962][T19078] ? bpf_trace_run2+0xb8/0x200 [ 696.505715][T19078] ? get_signal+0xb98/0x12e0 [ 696.510294][T19078] ? ____kasan_slab_free+0x130/0x160 [ 696.515568][T19078] ? kmem_cache_free+0x2ac/0x2d0 [ 696.520499][T19078] get_signal+0xf23/0x12e0 [ 696.524907][T19078] arch_do_signal_or_restart+0xbf/0x10f0 [ 696.530526][T19078] ? __send_signal+0x8b8/0xb80 [ 696.535277][T19078] ? send_signal+0x479/0x5b0 [ 696.539859][T19078] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 696.545485][T19078] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 696.551276][T19078] ? force_sig+0xb5/0x100 [ 696.555589][T19078] ? send_sig+0x70/0x70 [ 696.559733][T19078] exit_to_user_mode_loop+0xa2/0xe0 [ 696.564920][T19078] irqentry_exit_to_user_mode+0x4e/0x80 [ 696.570449][T19078] irqentry_exit+0x12/0x60 [ 696.574940][T19078] exc_general_protection+0x1ca/0x250 [ 696.580301][T19078] ? asm_exc_general_protection+0x8/0x30 [ 696.585918][T19078] asm_exc_general_protection+0x1e/0x30 [ 696.591446][T19078] RIP: 0033:0x7f65cc7b1931 [ 696.595851][T19078] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 696.615625][T19078] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 696.621681][T19078] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 696.629638][T19078] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 696.637598][T19078] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 696.645574][T19078] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 696.653533][T19078] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 696.661731][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 696.668833][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 696.701680][T19078] memory: usage 301500kB, limit 307200kB, failcnt 13853 [ 696.709271][T19078] memory+swap: usage 421324kB, limit 9007199254740988kB, failcnt 0 [ 696.718688][T19078] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 696.726314][T19078] Memory cgroup stats for /syz9: [ 696.726427][T19078] anon 319488 [ 696.726427][T19078] file 305614848 [ 696.726427][T19078] kernel_stack 0 [ 696.726427][T19078] percpu 0 [ 696.726427][T19078] sock 0 [ 696.726427][T19078] shmem 305614848 [ 696.726427][T19078] file_mapped 135168 [ 696.726427][T19078] file_dirty 0 [ 696.726427][T19078] file_writeback 0 [ 696.726427][T19078] anon_thp 0 [ 696.726427][T19078] inactive_anon 303599616 [ 696.726427][T19078] active_anon 8380416 [ 696.726427][T19078] inactive_file 77824 [ 696.726427][T19078] active_file 114688 [ 696.726427][T19078] unevictable 86016 [ 696.726427][T19078] slab_reclaimable 0 [ 696.726427][T19078] slab_unreclaimable 0 [ 696.726427][T19078] slab 0 [ 696.726427][T19078] workingset_refault_anon 165 [ 696.726427][T19078] workingset_refault_file 33 [ 696.726427][T19078] workingset_activate_anon 165 [ 696.726427][T19078] workingset_activate_file 33 [ 696.726427][T19078] workingset_restore_anon 0 [ 696.726427][T19078] workingset_restore_file 0 [ 696.820387][T19078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5192,pid=19098,uid=0 [ 696.835464][T19078] Memory cgroup out of memory: Killed process 19098 (syz.9.5192) total-vm:89904kB, anon-rss:968kB, file-rss:49984kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 696.852855][ T27] oom_reaper: reaped process 19098 (syz.9.5192), now anon-rss:0kB, file-rss:53248kB, shmem-rss:0kB [ 696.863829][T19108] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 696.873432][T19108] CPU: 1 PID: 19108 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 696.884805][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.894955][T19108] Call Trace: [ 696.898258][T19108] __dump_stack+0x21/0x24 [ 696.902593][T19108] dump_stack_lvl+0x169/0x1d8 [ 696.907376][T19108] ? show_regs_print_info+0x18/0x18 [ 696.912576][T19108] ? ___ratelimit+0x3d1/0x560 [ 696.917264][T19108] ? __kasan_check_write+0x14/0x20 [ 696.922383][T19108] ? _raw_spin_lock+0x8e/0xe0 [ 696.927070][T19108] dump_stack+0x15/0x1c [ 696.931261][T19108] dump_header+0xdd/0x650 [ 696.935585][T19108] oom_kill_process+0x1fa/0x2c0 [ 696.940431][T19108] out_of_memory+0x94a/0xd70 [ 696.945028][T19108] ? unregister_oom_notifier+0x20/0x20 [ 696.950492][T19108] ? mutex_lock_killable+0xd3/0xe0 [ 696.955600][T19108] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 696.962088][T19108] mem_cgroup_out_of_memory+0x260/0x310 [ 696.967621][T19108] ? mem_cgroup_oom_trylock+0x350/0x350 [ 696.973171][T19108] ? _raw_spin_lock+0x8e/0xe0 [ 696.977834][T19108] ? _raw_spin_trylock_bh+0x130/0x130 [ 696.983188][T19108] ? _raw_spin_unlock+0x4d/0x70 [ 696.988038][T19108] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 696.993595][T19108] ? _raw_spin_unlock_irq+0x4e/0x70 [ 696.994728][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 1 [ 696.998801][T19108] try_charge+0xf61/0x14e0 [ 696.998820][T19108] ? __memcg_kmem_charge+0x140/0x140 [ 697.016978][T19108] ? percpu_counter_add_batch+0x13c/0x160 [ 697.022705][T19108] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 697.025440][ T24] audit: type=1400 audit(2000003867.961:223635): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 697.028252][T19108] __mem_cgroup_charge+0x14c/0x6d0 [ 697.055313][T19108] shmem_add_to_page_cache+0x55e/0xe10 [ 697.057764][ T24] audit: type=1400 audit(2000003867.961:223636): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.060782][T19108] ? shmem_alloc_page+0x300/0x300 [ 697.060802][T19108] ? _raw_spin_lock_irqsave+0x110/0x110 [ 697.084133][ T24] audit: type=1400 audit(2000003867.961:223637): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 697.087319][T19108] ? find_lock_entry+0x4b/0x200 [ 697.087330][T19108] ? lru_cache_add+0x164/0x380 [ 697.087346][T19108] ? shmem_getpage_gfp+0x8f3/0x2110 [ 697.093979][ T24] audit: type=1400 audit(2000003867.961:223638): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 697.115086][T19108] shmem_getpage_gfp+0x8e8/0x2110 [ 697.115109][T19108] shmem_write_begin+0xce/0x1b0 [ 697.123307][ T24] audit: type=1400 audit(2000003867.961:223639): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 697.124700][T19108] generic_perform_write+0x2be/0x510 [ 697.124712][T19108] ? preempt_count_add+0x90/0x1b0 [ 697.124728][T19108] ? grab_cache_page_write_begin+0xb0/0xb0 [ 697.201835][T19108] ? file_remove_privs+0x580/0x580 [ 697.206937][T19108] ? __kasan_check_write+0x14/0x20 [ 697.212038][T19108] ? down_write+0xac/0x110 [ 697.216442][T19108] __generic_file_write_iter+0x24b/0x480 [ 697.222062][T19108] ? generic_write_checks+0x3d4/0x480 [ 697.227509][T19108] generic_file_write_iter+0xa9/0x1d0 [ 697.232878][T19108] __kernel_write+0x55a/0x910 [ 697.237544][T19108] ? vfs_read+0xa10/0xa10 [ 697.241864][T19108] ? populate_vma_page_range+0xf0/0xf0 [ 697.247314][T19108] ? __kasan_check_write+0x14/0x20 [ 697.252409][T19108] ? get_dump_page+0x46b/0x5b0 [ 697.257172][T19108] dump_emit+0x240/0x360 [ 697.261409][T19108] ? wait_for_dump_helpers+0x390/0x390 [ 697.266854][T19108] dump_user_range+0x6a/0x1a0 [ 697.271518][T19108] elf_core_dump+0x278a/0x2bc0 [ 697.276268][T19108] ? load_elf_binary+0x2890/0x2890 [ 697.281367][T19108] ? __fsnotify_parent+0x5ff/0x6c0 [ 697.286726][T19108] ? shmem_unused_huge_scan+0xa0/0xa0 [ 697.292096][T19108] ? do_truncate+0x1ad/0x210 [ 697.296670][T19108] ? putname+0xfe/0x150 [ 697.300812][T19108] ? __kasan_check_read+0x11/0x20 [ 697.305824][T19108] ? __ia32_sys_unshare+0x40/0x40 [ 697.310839][T19108] do_coredump+0x1ac9/0x27f0 [ 697.315419][T19108] ? simple_acl_create+0x1c0/0x1c0 [ 697.320517][T19108] ? debug_smp_processor_id+0x17/0x20 [ 697.325880][T19108] ? preempt_schedule+0xa7/0xb0 [ 697.330716][T19108] ? schedule_preempt_disabled+0x20/0x20 [ 697.336338][T19108] ? sysvec_irq_work+0xc8/0xd0 [ 697.341091][T19108] ? preempt_schedule_thunk+0x16/0x18 [ 697.346450][T19108] get_signal+0xf23/0x12e0 [ 697.350856][T19108] arch_do_signal_or_restart+0xbf/0x10f0 [ 697.356476][T19108] ? __send_signal+0x8b8/0xb80 [ 697.361367][T19108] ? send_signal+0x479/0x5b0 [ 697.365968][T19108] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 697.371601][T19108] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 697.377399][T19108] ? force_sig+0xb5/0x100 [ 697.381717][T19108] ? send_sig+0x70/0x70 [ 697.385860][T19108] exit_to_user_mode_loop+0xa2/0xe0 [ 697.391046][T19108] irqentry_exit_to_user_mode+0x4e/0x80 [ 697.396576][T19108] irqentry_exit+0x12/0x60 [ 697.400987][T19108] exc_general_protection+0x1ca/0x250 [ 697.406344][T19108] ? asm_exc_general_protection+0x8/0x30 [ 697.411963][T19108] asm_exc_general_protection+0x1e/0x30 [ 697.417497][T19108] RIP: 0033:0x7f65cc7b1931 [ 697.421905][T19108] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 697.441529][T19108] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 697.447586][T19108] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 697.455545][T19108] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 697.463507][T19108] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 697.471467][T19108] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 697.479427][T19108] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 697.488384][T19108] memory: usage 279948kB, limit 307200kB, failcnt 13948 [ 697.495374][T19108] memory+swap: usage 393468kB, limit 9007199254740988kB, failcnt 0 [ 697.503259][T19108] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 697.510158][T19108] Memory cgroup stats for /syz9: [ 697.510280][T19108] anon 319488 [ 697.510280][T19108] file 280473600 [ 697.510280][T19108] kernel_stack 0 [ 697.510280][T19108] percpu 0 [ 697.510280][T19108] sock 0 [ 697.510280][T19108] shmem 280608768 [ 697.510280][T19108] file_mapped 135168 [ 697.510280][T19108] file_dirty 0 [ 697.510280][T19108] file_writeback 0 [ 697.510280][T19108] anon_thp 0 [ 697.510280][T19108] inactive_anon 279404544 [ 697.510280][T19108] active_anon 7163904 [ 697.510280][T19108] inactive_file 77824 [ 697.510280][T19108] active_file 114688 [ 697.510280][T19108] unevictable 86016 [ 697.510280][T19108] slab_reclaimable 0 [ 697.510280][T19108] slab_unreclaimable 0 [ 697.510280][T19108] slab 0 [ 697.510280][T19108] workingset_refault_anon 165 [ 697.510280][T19108] workingset_refault_file 33 [ 697.510280][T19108] workingset_activate_anon 165 [ 697.510280][T19108] workingset_activate_file 33 [ 697.510280][T19108] workingset_restore_anon 0 [ 697.510280][T19108] workingset_restore_file 0 [ 697.604291][T19108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5192,pid=19097,uid=0 [ 697.619311][T19108] Memory cgroup out of memory: Killed process 19097 (syz.9.5192) total-vm:89904kB, anon-rss:968kB, file-rss:49984kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 697.636481][ T27] oom_reaper: reaped process 19097 (syz.9.5192), now anon-rss:0kB, file-rss:53056kB, shmem-rss:0kB [ 697.988918][T19089] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 698.010161][T19089] CPU: 0 PID: 19089 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 698.021557][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.031644][T19089] Call Trace: [ 698.034939][T19089] __dump_stack+0x21/0x24 [ 698.039270][T19089] dump_stack_lvl+0x169/0x1d8 [ 698.043943][T19089] ? show_regs_print_info+0x18/0x18 [ 698.049135][T19089] ? ___ratelimit+0x3d1/0x560 [ 698.053805][T19089] ? _raw_spin_lock+0x8e/0xe0 [ 698.058486][T19089] dump_stack+0x15/0x1c [ 698.062659][T19089] dump_header+0xdd/0x650 [ 698.066990][T19089] oom_kill_process+0x1fa/0x2c0 [ 698.071845][T19089] out_of_memory+0x94a/0xd70 [ 698.076433][T19089] ? unregister_oom_notifier+0x20/0x20 [ 698.081882][T19089] ? mutex_lock_killable+0x8c/0xe0 [ 698.086989][T19089] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 698.093490][T19089] mem_cgroup_out_of_memory+0x260/0x310 [ 698.099036][T19089] ? mem_cgroup_oom_trylock+0x350/0x350 [ 698.104586][T19089] ? _raw_spin_lock+0x8e/0xe0 [ 698.109269][T19089] ? _raw_spin_trylock_bh+0x130/0x130 [ 698.114647][T19089] ? _raw_spin_unlock+0x4d/0x70 [ 698.119764][T19089] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 698.125305][T19089] ? _raw_spin_unlock_irq+0x4e/0x70 [ 698.130483][T19089] try_charge+0xf61/0x14e0 [ 698.134881][T19089] ? __memcg_kmem_charge+0x140/0x140 [ 698.140144][T19089] ? percpu_counter_add_batch+0x13c/0x160 [ 698.145846][T19089] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 698.151370][T19089] __mem_cgroup_charge+0x14c/0x6d0 [ 698.156462][T19089] shmem_add_to_page_cache+0x55e/0xe10 [ 698.161918][T19089] ? shmem_alloc_page+0x300/0x300 [ 698.166926][T19089] ? _raw_spin_lock_irqsave+0x110/0x110 [ 698.172466][T19089] ? find_lock_entry+0x4b/0x200 [ 698.177296][T19089] ? lru_cache_add+0x164/0x380 [ 698.182038][T19089] ? shmem_getpage_gfp+0x8f3/0x2110 [ 698.187214][T19089] shmem_getpage_gfp+0x8e8/0x2110 [ 698.192226][T19089] shmem_write_begin+0xce/0x1b0 [ 698.197059][T19089] generic_perform_write+0x2be/0x510 [ 698.202324][T19089] ? atime_needs_update+0x5b0/0x5b0 [ 698.207505][T19089] ? grab_cache_page_write_begin+0xb0/0xb0 [ 698.213293][T19089] ? file_remove_privs+0x580/0x580 [ 698.218383][T19089] ? __kasan_check_write+0x14/0x20 [ 698.223645][T19089] ? down_write+0xac/0x110 [ 698.228041][T19089] __generic_file_write_iter+0x24b/0x480 [ 698.233654][T19089] ? generic_write_checks+0x3d4/0x480 [ 698.239093][T19089] generic_file_write_iter+0xa9/0x1d0 [ 698.244442][T19089] __kernel_write+0x55a/0x910 [ 698.249096][T19089] ? vfs_read+0xa10/0xa10 [ 698.253405][T19089] ? populate_vma_page_range+0xf0/0xf0 [ 698.258843][T19089] ? __kasan_check_write+0x14/0x20 [ 698.263932][T19089] ? get_dump_page+0x46b/0x5b0 [ 698.268677][T19089] dump_emit+0x240/0x360 [ 698.272908][T19089] ? wait_for_dump_helpers+0x390/0x390 [ 698.278348][T19089] ? dump_user_range+0x125/0x1a0 [ 698.283275][T19089] dump_user_range+0x6a/0x1a0 [ 698.287932][T19089] elf_core_dump+0x278a/0x2bc0 [ 698.292673][T19089] ? load_elf_binary+0x2890/0x2890 [ 698.297768][T19089] ? __fsnotify_parent+0x5ff/0x6c0 [ 698.302859][T19089] ? shmem_unused_huge_scan+0xa0/0xa0 [ 698.308214][T19089] ? do_truncate+0x1ad/0x210 [ 698.312782][T19089] ? putname+0xfe/0x150 [ 698.316921][T19089] ? __kasan_check_read+0x11/0x20 [ 698.321948][T19089] ? __ia32_sys_unshare+0x40/0x40 [ 698.326974][T19089] do_coredump+0x1ac9/0x27f0 [ 698.331558][T19089] ? simple_acl_create+0x1c0/0x1c0 [ 698.336652][T19089] ? debug_smp_processor_id+0x17/0x20 [ 698.342009][T19089] ? __irq_exit_rcu+0x40/0x150 [ 698.346772][T19089] ? irq_exit_rcu+0x9/0x10 [ 698.351185][T19089] ? sysvec_irq_work+0xc8/0xd0 [ 698.355942][T19089] ? _raw_spin_unlock_irq+0x49/0x70 [ 698.361127][T19089] get_signal+0xf23/0x12e0 [ 698.365582][T19089] arch_do_signal_or_restart+0xbf/0x10f0 [ 698.371201][T19089] ? __send_signal+0x8b8/0xb80 [ 698.375948][T19089] ? send_signal+0x479/0x5b0 [ 698.380544][T19089] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 698.386155][T19089] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 698.391939][T19089] ? force_sig+0xb5/0x100 [ 698.396246][T19089] ? send_sig+0x70/0x70 [ 698.400380][T19089] exit_to_user_mode_loop+0xa2/0xe0 [ 698.405557][T19089] irqentry_exit_to_user_mode+0x4e/0x80 [ 698.411079][T19089] irqentry_exit+0x12/0x60 [ 698.415475][T19089] exc_general_protection+0x1ca/0x250 [ 698.420825][T19089] ? asm_exc_general_protection+0x8/0x30 [ 698.426434][T19089] asm_exc_general_protection+0x1e/0x30 [ 698.431959][T19089] RIP: 0033:0x7f65cc7b1931 [ 698.436360][T19089] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 698.455947][T19089] RSP: 002b:0000200000000290 EFLAGS: 00010217 [ 698.461994][T19089] RAX: 0000000000000000 RBX: 00007f65cc9d9080 RCX: 00007f65cc7b1929 [ 698.469949][T19089] RDX: 0000200000000140 RSI: 0000200000000290 RDI: 0000000000000000 [ 698.477901][T19089] RBP: 00007f65cc833b39 R08: 0000200000000300 R09: 0000200000000300 [ 698.485858][T19089] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 698.493809][T19089] R13: 0000000000000000 R14: 00007f65cc9d9080 R15: 00007ffddfbc3128 [ 698.502698][T19089] memory: usage 290652kB, limit 307200kB, failcnt 15153 [ 698.509776][T19089] memory+swap: usage 409096kB, limit 9007199254740988kB, failcnt 0 [ 698.517729][T19089] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.524570][T19089] Memory cgroup stats for /syz9: [ 698.524949][T19089] anon 319488 [ 698.524949][T19089] file 290881536 [ 698.524949][T19089] kernel_stack 0 [ 698.524949][T19089] percpu 0 [ 698.524949][T19089] sock 0 [ 698.524949][T19089] shmem 290881536 [ 698.524949][T19089] file_mapped 135168 [ 698.524949][T19089] file_dirty 0 [ 698.524949][T19089] file_writeback 0 [ 698.524949][T19089] anon_thp 0 [ 698.524949][T19089] inactive_anon 290086912 [ 698.524949][T19089] active_anon 7299072 [ 698.524949][T19089] inactive_file 77824 [ 698.524949][T19089] active_file 114688 [ 698.524949][T19089] unevictable 86016 [ 698.524949][T19089] slab_reclaimable 0 [ 698.524949][T19089] slab_unreclaimable 0 [ 698.524949][T19089] slab 0 [ 698.524949][T19089] workingset_refault_anon 165 [ 698.524949][T19089] workingset_refault_file 33 [ 698.524949][T19089] workingset_activate_anon 165 [ 698.524949][T19089] workingset_activate_file 33 [ 698.524949][T19089] workingset_restore_anon 0 [ 698.524949][T19089] workingset_restore_file 0 [ 698.618913][T19089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5192,pid=19085,uid=0 [ 698.633841][T19089] Memory cgroup out of memory: Killed process 19085 (syz.9.5192) total-vm:89904kB, anon-rss:992kB, file-rss:53508kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 698.651029][ T27] oom_reaper: reaped process 19085 (syz.9.5192), now anon-rss:0kB, file-rss:53444kB, shmem-rss:0kB [ 698.844409][ T24] audit: type=1400 audit(2000003869.801:223640): avc: denied { read write } for pid=10447 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.883282][ T24] audit: type=1400 audit(2000003869.831:223641): avc: denied { read write open } for pid=10447 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.900465][T19107] syz.9.5192 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 698.911999][ T24] audit: type=1400 audit(2000003869.831:223642): avc: denied { ioctl } for pid=10447 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.004699][T19107] CPU: 0 PID: 19107 Comm: syz.9.5192 Tainted: G B W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 699.016099][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.026157][T19107] Call Trace: [ 699.029452][T19107] __dump_stack+0x21/0x24 [ 699.033785][T19107] dump_stack_lvl+0x169/0x1d8 [ 699.038465][T19107] ? show_regs_print_info+0x18/0x18 [ 699.043667][T19107] ? ___ratelimit+0x3d1/0x560 [ 699.048344][T19107] ? __kasan_check_write+0x14/0x20 [ 699.053450][T19107] ? _raw_spin_lock+0x8e/0xe0 [ 699.058129][T19107] dump_stack+0x15/0x1c [ 699.062290][T19107] dump_header+0xdd/0x650 [ 699.066624][T19107] oom_kill_process+0x1fa/0x2c0 [ 699.071473][T19107] out_of_memory+0x94a/0xd70 [ 699.076058][T19107] ? unregister_oom_notifier+0x20/0x20 [ 699.081506][T19107] ? mutex_lock_killable+0x8c/0xe0 [ 699.086607][T19107] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 699.093097][T19107] mem_cgroup_out_of_memory+0x260/0x310 [ 699.098634][T19107] ? mem_cgroup_oom_trylock+0x350/0x350 [ 699.104170][T19107] ? _raw_spin_lock+0x8e/0xe0 [ 699.108840][T19107] ? _raw_spin_trylock_bh+0x130/0x130 [ 699.114203][T19107] ? _raw_spin_unlock+0x4d/0x70 [ 699.119045][T19107] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 699.124576][T19107] ? _raw_spin_unlock_irq+0x4e/0x70 [ 699.129765][T19107] try_charge+0xf61/0x14e0 [ 699.134171][T19107] ? __memcg_kmem_charge+0x140/0x140 [ 699.139447][T19107] ? percpu_counter_add_batch+0x13c/0x160 [ 699.145172][T19107] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 699.150707][T19107] __mem_cgroup_charge+0x14c/0x6d0 [ 699.155812][T19107] shmem_add_to_page_cache+0x55e/0xe10 [ 699.161570][T19107] ? shmem_alloc_page+0x300/0x300 [ 699.166605][T19107] ? _raw_spin_lock_irqsave+0x110/0x110 [ 699.172152][T19107] ? find_lock_entry+0x4b/0x200 [ 699.176993][T19107] ? lru_cache_add+0x164/0x380 [ 699.181745][T19107] ? shmem_getpage_gfp+0x8f3/0x2110 [ 699.186933][T19107] shmem_getpage_gfp+0x8e8/0x2110 [ 699.191955][T19107] shmem_write_begin+0xce/0x1b0 [ 699.196795][T19107] generic_perform_write+0x2be/0x510 [ 699.202071][T19107] ? atime_needs_update+0x5b0/0x5b0 [ 699.207259][T19107] ? grab_cache_page_write_begin+0xb0/0xb0 [ 699.213057][T19107] ? file_remove_privs+0x580/0x580 [ 699.218163][T19107] ? __kasan_check_write+0x14/0x20 [ 699.223262][T19107] ? down_write+0xac/0x110 [ 699.227669][T19107] __generic_file_write_iter+0x24b/0x480 [ 699.233293][T19107] ? generic_write_checks+0x3d4/0x480 [ 699.238653][T19107] generic_file_write_iter+0xa9/0x1d0 [ 699.244014][T19107] __kernel_write+0x55a/0x910 [ 699.248782][T19107] ? vfs_read+0xa10/0xa10 [ 699.253104][T19107] ? populate_vma_page_range+0xf0/0xf0 [ 699.258552][T19107] ? __kasan_check_write+0x14/0x20 [ 699.263650][T19107] ? get_dump_page+0x46b/0x5b0 [ 699.268922][T19107] dump_emit+0x240/0x360 [ 699.273154][T19107] ? wait_for_dump_helpers+0x390/0x390 [ 699.278603][T19107] dump_user_range+0x6a/0x1a0 [ 699.283271][T19107] elf_core_dump+0x278a/0x2bc0 [ 699.288111][T19107] ? load_elf_binary+0x2890/0x2890 [ 699.293214][T19107] ? __fsnotify_parent+0x5ff/0x6c0 [ 699.298312][T19107] ? shmem_unused_huge_scan+0xa0/0xa0 [ 699.303683][T19107] ? do_truncate+0x1ad/0x210 [ 699.308262][T19107] ? putname+0xfe/0x150 [ 699.312406][T19107] ? __kasan_check_read+0x11/0x20 [ 699.317422][T19107] ? __ia32_sys_unshare+0x40/0x40 [ 699.322438][T19107] do_coredump+0x1ac9/0x27f0 [ 699.327021][T19107] ? simple_acl_create+0x1c0/0x1c0 [ 699.332123][T19107] ? debug_smp_processor_id+0x17/0x20 [ 699.337483][T19107] ? preempt_schedule+0xa7/0xb0 [ 699.342321][T19107] ? schedule_preempt_disabled+0x20/0x20 [ 699.347938][T19107] ? sysvec_irq_work+0xc8/0xd0 [ 699.352701][T19107] ? preempt_schedule_thunk+0x16/0x18 [ 699.358060][T19107] get_signal+0xf23/0x12e0 [ 699.362903][T19107] arch_do_signal_or_restart+0xbf/0x10f0 [ 699.368526][T19107] ? __send_signal+0x8b8/0xb80 [ 699.373278][T19107] ? send_signal+0x479/0x5b0 [ 699.377855][T19107] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 699.383478][T19107] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 699.389272][T19107] ? force_sig+0xb5/0x100 [ 699.393598][T19107] ? send_sig+0x70/0x70 [ 699.397845][T19107] exit_to_user_mode_loop+0xa2/0xe0 [ 699.403033][T19107] irqentry_exit_to_user_mode+0x4e/0x80 [ 699.408563][T19107] irqentry_exit+0x12/0x60 [ 699.412968][T19107] exc_general_protection+0x1ca/0x250 [ 699.418328][T19107] ? asm_exc_general_protection+0x8/0x30 [ 699.423945][T19107] asm_exc_general_protection+0x1e/0x30 [ 699.429478][T19107] RIP: 0033:0x7f65cc7b1931 [ 699.433882][T19107] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f