last executing test programs:

3m26.285262924s ago: executing program 4 (id=287):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x18, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c"}]}}}}}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
close(0x3)
r7 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\x80\'\xe9\xc8\xacxd\x11\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19y`\xb7\x9b\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g\xb8\xb1K\b\xfb8\x9a\x13\xd6{!K\v\x15\xf24\x94\xc1\x18\x1c?\x82\xf1\xceC\n\"\xc4\xf0 ^H\x9f\xb4\xdb\xa6\xe5\x85\x00\x039\xb08~\xf5\xd9v\xb5\xb1l\xc7\xd3`.lP\x99>\x8d\x92IE\x90\x18\xaa\xa3/@}\xa6H\x8d\x1cr3\xf9t\x8d\tG\xaa6\x9a}\x95\xeb\xed\x7f7\xd2qwZ\xfcP\x16\x91\xc6\xf4#\xf0\xcc\x9c>\xba>n\xba|\x86\x1d\xe8\xbb\x02\x1c\r\x7f\x8b!W9\xcd\x123\xc9\x18\x93\xae[\xf1?\xff\xdd\xd8\xa9\x81\b\xdf\xbbP\v\x9a\x9e\xc5v\x9d\xcf\xa2v\x9f\x84\x19gg\x9f \xe8\x18q`\x86|\x1f\x1bL\xe9\xd3RgY\xe1 \xdc#?>o6\x8d\x8e\x05\xf2}\xf1\xbc\x12\xac\x1b\xad\xc7\x82\x84', 0x1)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = gettid()
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r10, 0x3)
accept4(r10, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x20024090)
ftruncate(r7, 0x80079a0)
splice(r3, 0x0, r6, 0x0, 0x13, 0x8)
pipe2$9p(&(0x7f0000000180), 0x0)

3m23.235692757s ago: executing program 4 (id=334):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x5eab, &(0x7f00000004c0)={0x0, 0x4f5f, 0x4000, 0x2, 0x1c9}, &(0x7f0000000540), &(0x7f0000000600))
r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xf59e, 0x400, 0xffffdffd, 0x32e, 0x0, r1}, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000005c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x2)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000000000043cc", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r5, @ANYRESOCT=r1, @ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r7], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x4, @loopback}}, 0x0, 0x0, 0x134, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
close_range(r10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000000))
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(r13)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0))
syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140), &(0x7f0000000200))

3m23.135037617s ago: executing program 4 (id=335):
openat$snapshot(0xffffffffffffff9c, 0x0, 0x841, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x110, 0xffffffffffffffff, 0x101d0000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

3m23.011335049s ago: executing program 4 (id=338):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r1, 0x400, 0x2)
r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f0000000640)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r3, 0x0, r6, 0x0, 0xa85, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xa}}, './file0/file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
fsync(r9)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)

3m22.619360005s ago: executing program 4 (id=342):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
unlinkat(r3, &(0x7f0000000400)='./file1\x00', 0x200)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
chroot(&(0x7f0000000200)='./file1\x00')
sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f0000000540)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x80, 0x0}, 0x88c0)

3m21.546736155s ago: executing program 4 (id=356):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000640)={0x0, 0x0, 0x8, 0x5, 0x1ff, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) (fail_nth: 2)

3m21.465640562s ago: executing program 32 (id=356):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000640)={0x0, 0x0, 0x8, 0x5, 0x1ff, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) (fail_nth: 2)

3m7.015299987s ago: executing program 0 (id=530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0'}, 0xb)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x600, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3m6.700232756s ago: executing program 0 (id=532):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x10, 0x0, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, {[@hopopts={0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0xfff7}]}]}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5)
fchdir(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x8000000010, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r9}, 0x10)
write(r7, &(0x7f00000002c0)="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", 0xfc)

3m6.540913101s ago: executing program 0 (id=536):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000005c0)=ANY=[])

3m6.406942094s ago: executing program 0 (id=539):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x10, 0x80800)
ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodioread_nolock}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
dup(r0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2f, 0xd, 0xb1, {0x12, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xc, 0x1}, {0x0, @local, 0x7f, 0xff24, [0xde43, 0xff]}, @hdata="da98b44b034c34fe96dd9d2d765d8e9c22ded7f05b41359c1d607f654ccaef71f318811cea81c4b0136efce2ac0fef7a2d93f4c1", {0x0, @remote, 0x100, 0x3, [0x800, 0x3ff]}, 0xff80000000, 0x7}, 0x1, [0x80000000]}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='start_task_reaping\x00', r3, 0x0, 0x8001}, 0x18)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="76b3720173dc786a534dc39e28481bab62eeb8020f1cb31e0bb402a0032271651806d5c562bb04bbca4326f2936feb1b7eed0b0e8fba5e7442c856d5d49681fbd4c325ff057e0800"/85], 0x3c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
clock_getres(0x6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="421c000059580000800c0001006d6163766c616e003000028008000300010000000a000400000000000000000008000700f7ffffff080001000d0000000800030002000000140003007866726d3000"/89], 0x74}, 0x1, 0x0, 0x0, 0x24048014}, 0x20004000)

3m5.723865548s ago: executing program 0 (id=547):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r0=>0x0, 0x2f, 0x7, 0x10, 0xd, 0x2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8727, 0x10, 0x9660, 0x40}}) (async)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.latency\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000680)=0xffffffffffffffff, 0x12) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}]}, {0x0, [0x5f, 0x61, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61, 0x0, 0x0, 0x2000000}, 0x28) (async)
ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x100, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000004) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x10) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) (async)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r11 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async)
close(r11) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @multicast1, <r12=>0x0}, &(0x7f0000000500)=0xc)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000600)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20064050) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000640)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xef}, 0x94)

3m5.533828105s ago: executing program 0 (id=549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000005c0)=ANY=[])

3m5.506972988s ago: executing program 33 (id=549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000005c0)=ANY=[])

2m43.77432165s ago: executing program 6 (id=791):
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(0x0, 0x0)
pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000)
fallocate(r0, 0x0, 0x11, 0x9)

2m43.742641243s ago: executing program 6 (id=794):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x90, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000580)="$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")
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffc45, &(0x7f00000002c0)=0x8000002)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000040), 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x18)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={<r9=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800699e00000000000000000100000018110000", @ANYRES32, @ANYRESDEC=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2468, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
r10 = syz_io_uring_setup(0x3ee3, &(0x7f00000004c0)={0x0, 0x5352, 0x40, 0x2000, 0xfffffffc, 0x0, r7}, &(0x7f0000ffe000), &(0x7f0000000540))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x2, &(0x7f0000000180), 0xfe)

2m42.722519138s ago: executing program 6 (id=801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
read(r2, &(0x7f00000002c0)=""/200, 0x39)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0)
pipe2$9p(&(0x7f0000001900)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r5)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
keyctl$read(0xb, 0x0, &(0x7f0000000280)=""/26, 0x1a)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x18)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r10, 0x8, 0xffffffff, 0x25dfdbfe, {0x3}}, 0xfffffffffffffeed}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

2m42.609184848s ago: executing program 6 (id=802):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x10000, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171)
fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsold}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x1, 0x43a, &(0x7f0000001100)="$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")
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='netlink_extack\x00', r7, 0x0, 0x7}, 0xfffffffffffffe7f)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r8, 0x0) (async)
r9 = syz_pidfd_open(r8, 0x0)
fcntl$setlease(r9, 0x400, 0x1) (async)
fcntl$setlease(r9, 0x400, 0x1)
syz_pidfd_open(r8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRES64=r6, @ANYRESHEX=r6, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRES64=r6, @ANYRESHEX=r6, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000180)={'wg2\x00', 0x800})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
semget(0x1, 0x2, 0x4c4) (async)
semget(0x1, 0x2, 0x4c4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11, <r12=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r13}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

2m42.206617386s ago: executing program 6 (id=804):
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(0x0, 0x0)
pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000)
fallocate(r0, 0x0, 0x11, 0x9)

2m40.434043061s ago: executing program 6 (id=823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)

2m40.360776437s ago: executing program 34 (id=823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)

3.913212755s ago: executing program 3 (id=2991):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0x18)
syz_open_procfs(0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138)
write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4)

3.874466659s ago: executing program 3 (id=2993):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x10000000000, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0xfc, 0xffdffffc, 0x1000000}}, 0xe8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x3d)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket(0x10, 0x3, 0x9)
r4 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)

3.841066122s ago: executing program 3 (id=2994):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000400)="790ee710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

3.833672883s ago: executing program 3 (id=2995):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000200000000950000000000000080673e4b23598158bbf8672ce8aaf4549744a2fa59f5651b089ff01b4027f237ca4a4436af98aa7bb3e8beca2e8c2079ef2cba2d1a740a485272ce7169939ae7f8f06617866d9b385e63d10a00000024f01a"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
setrlimit(0xc, &(0x7f0000000280)={0x9, 0x1})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
move_pages(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000001300)=[0x2], 0x0, 0x2)
unshare(0x6a040000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44)

3.127061579s ago: executing program 3 (id=3003):
r0 = socket(0xa, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x9, 0xe, 0x1, 0x3, 0x3, 0x8001, 0x7, 0x80, 0x7ff, 0x7ff, 0xc18e, 0x9, 0x7, 0x1, 0x100000000]}, &(0x7f00000008c0)=0x100)

2.672411631s ago: executing program 3 (id=3017):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r3)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, 0x0, 0x44000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r3, 0x0, 0xdb34be2aa1fd2b75)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3434}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xa}, @NFC_ATTR_VENDOR_DATA={0x89, 0x1f, "421420d2e53bfea9932c2702d9a579d14c41e8d68e9d2f709e87c21d06565fc76605f6b151a668417175c564d69e5398e636d66636b3e4ee50ed0f9114106d25c3305926ade98c78dcb78384910883ee61eebe82ea920b665273683545e20435e048146cd1483315e2f136c591829670885a1dc25272043b4b581fe7c9cee3b3c1aa0d7730"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x81}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4c000}, 0x4)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000400)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20)

2.609343877s ago: executing program 35 (id=3017):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r3)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, 0x0, 0x44000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r3, 0x0, 0xdb34be2aa1fd2b75)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3434}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xa}, @NFC_ATTR_VENDOR_DATA={0x89, 0x1f, "421420d2e53bfea9932c2702d9a579d14c41e8d68e9d2f709e87c21d06565fc76605f6b151a668417175c564d69e5398e636d66636b3e4ee50ed0f9114106d25c3305926ade98c78dcb78384910883ee61eebe82ea920b665273683545e20435e048146cd1483315e2f136c591829670885a1dc25272043b4b581fe7c9cee3b3c1aa0d7730"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x81}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4c000}, 0x4)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000400)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20)

1.689837912s ago: executing program 2 (id=3048):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800)

1.626000448s ago: executing program 2 (id=3051):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
read$snapshot(r2, 0x0, 0xffffffbf)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
sched_getaffinity(0x0, 0x8, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x14)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

1.479563962s ago: executing program 2 (id=3053):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.455698264s ago: executing program 2 (id=3054):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000009780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000afc8a00000c0a01"], 0x8b44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)

1.409272309s ago: executing program 2 (id=3056):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002600)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x20000000241e400)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
socket$unix(0x1, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.335376355s ago: executing program 1 (id=3060):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file2\x00', 0x0, &(0x7f0000000700)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0xac7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@mblk_io_submit}]}, 0x1, 0x44a, &(0x7f0000000880)="$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")

1.265088982s ago: executing program 1 (id=3062):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.264513222s ago: executing program 7 (id=3063):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
read$snapshot(r2, 0x0, 0xffffffbf)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
sched_getaffinity(0x0, 0x8, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x14)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

1.216138747s ago: executing program 1 (id=3064):
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x0, "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", 0x2, 0x7, 0x4, 0xff, 0x7, 0x47, 0xd}}}, 0x128)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x9)
ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000280))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x8820}, 0x2)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu>=0||!')

1.186514449s ago: executing program 7 (id=3066):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000009780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000afc8a00000c0a01"], 0x8b44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)

1.160925772s ago: executing program 1 (id=3067):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
unlink(&(0x7f0000000100)='./file0/file1\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)

1.152317512s ago: executing program 7 (id=3068):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r2, &(0x7f0000000040)="0600", 0x2)
getpid()
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x4)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

1.07076978s ago: executing program 7 (id=3069):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

1.07052785s ago: executing program 5 (id=3070):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800)

1.045437722s ago: executing program 7 (id=3071):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xa7ba)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0040000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0)

1.039944573s ago: executing program 2 (id=3072):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xc42fdc898599c5a)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'bond0\x00', 0x4}, 0x18)
syz_emit_ethernet(0x2a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000000e00)="$eJzs3MtvG0UYAPBv7Th9k1DKo6WFQEFUPJImfdADB4pA4gASEhyKOIUkrUrdBjVBolUFhUM5okrcEUck/gIulAsCTkhc4Y6QIpQLhZPR2rupm9hJnPjR4t9P2nbGM9bMt7tjj2d3E0DfGkn/SSJ2RsRvETFUy95eYaT2383FK1P/LF6ZSqJSefOvpFrv78UrU3nV/H07aplKZZV2r70TMVkuz1zM8mPz598fm7t0+bmz5yfPzJyZuTBx4sTRIwcGj08ca0ucu9K+7vtodv/eV9++/vrUqevv/vRN2t+dWXl9HO0yUtu7DT3Z7sZ6bFddOhnoYUdoSTEi0sNVqo7/oSjGtqWyoXjl0552DuioSqVQ2dK8+GoF+B9LJ+q5Yi87AnRZ/kWf/v7Nty5NPe4ICydjaR3jZrbVSgaikNUpZb+ROmEkIk5d/ffLdIsOrUMAANS7cTIinm00/yvEA3X17smuDQ1HxL0RsTsi7ouIPRFxf0S17oMR8VCL7S+/QrJy/lMZ2lBg65TO/17Irm3dPv/LZ38xXMxyu6rxl5LTZ8szh7N9cihKW9L8+CptfP/yr583K6uf/6Vb2n4+F8z68efAsgW66cn5yc3EXG/hk4h9A43iT5bmvOn8eG9E7NtgG2ef/np/s7K1419FGyblla8inqod/6uxLP5c0vT65PjzxyeOjW2N8szhsfysWOnnX6690az9TcXfBgs3KrG94fm/FP9wsjVi7tLlc9XrtXOtt3Ht98+a/qbZ6Pk/mLxVTQ9mr304OT9/cTxiMHlt5esTt96b5/P66fl/6GDj8b87bu2JhyMiPYkPRMQjEfFo1vfHIuLxiDi4Svw/vvTEe63Hv8qqfBul8U+vdfyj/vi3niie++Hb1uPPpcf/aDV1KHtlPZ9/6+3gZvYdAAAA3C0K1Xvgk8LoUrpQGB2t3cO/J7YXyrNz88+cnv3gwnTtXvnhKBXyla6huvXQ8WxtOM9PLMsfydaNvyhuq+ZHp2bL070OHvrcjibjP/VHsde9AzrO81rQv4x/6F/GP/Qv4x/6l/EP/avR+P+4B/0Aum+N7/9t3eoH0H3m/9C/jH/oX8Y/9KWmz8YXNvXIfyuJdT+r3/ZEkkR0vdHOJr4b3Nzfalh/Igp3SMh3feLFqCVK0bDOQKcHyJaGRb3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiP/wIAAP//DNPfQw==")
r6 = socket$unix(0x1, 0x2, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000005c0)={0x2, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000140ade0000000000000000000a000003140000001100010000000000000000000500000aa363e937377ad64b486e00e4947663efc084797fb527c97864ac718f6cced060547e16aea52183ffffebc90987eca10645350b110d18c2349df1c452c2aeffbdc86b"], 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008800)
unshare(0x2c020400)
socket$nl_generic(0x10, 0x3, 0x10)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
unshare(0x8020200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000340))
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000011a2fa25f85625d6094b9d1a14157e58a7ee3cd56622ae898ac63668fbd2522e2ea6ad6f64e5c2dd1876b1fbe8db0b68c59b19c4edf7884e292318febebfbd9ee0ba9395be5c28643b24882664d418d1453815f3351b802116856a9a27fa5b787e05f5b3deb92a05bedcac3d49bfeb101e280d28254fd1716440e5b9ff3e7c3fca1763c4ccf0b5526036b90a1040735f577dd1049"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4)

1.014096665s ago: executing program 5 (id=3073):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000040000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="7ef94a473e47d22cd8b730f3cdce40a911c2b4383c71896357559a7b5d94364a7c5a29151c0638dd8c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000009780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000afc8a00000c0a01"], 0x8b44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)

870.306229ms ago: executing program 5 (id=3074):
r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18)
syz_open_procfs(0x0, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138)
write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4)

748.12317ms ago: executing program 7 (id=3075):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1})
r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740), 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1})
io_uring_enter(r1, 0x66ab, 0x4, 0x2, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
r5 = dup(0xffffffffffffffff)
acct(&(0x7f0000000000)='./file0\x00')
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x40, 0x6}, &(0x7f0000000240), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)

737.429211ms ago: executing program 5 (id=3076):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
read$snapshot(r2, 0x0, 0xffffffbf)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
sched_getaffinity(0x0, 0x8, &(0x7f00000000c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x14)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

690.729885ms ago: executing program 5 (id=3077):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000009780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000afc8a00000c0a01"], 0x8b44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)

623.528852ms ago: executing program 5 (id=3078):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18)
syz_emit_ethernet(0x2a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000000e00)="$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")
r4 = socket$unix(0x1, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008800)
unshare(0x2c020400)
socket$nl_generic(0x10, 0x3, 0x10)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000340))
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4)

162.791435ms ago: executing program 1 (id=3079):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000011}, 0x100448d1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', r1, 0x4000, r1}, 0x18)

0s ago: executing program 1 (id=3080):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

kernel console output (not intermixed with test programs):

5]  should_failslab+0x8c/0xb0
[  233.994715][T11195]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  233.994742][T11195]  ? __alloc_skb+0x2ff/0x4b0
[  233.994896][T11195]  __alloc_skb+0x2ff/0x4b0
[  233.994961][T11195]  ? __alloc_skb+0x228/0x4b0
[  233.994992][T11195]  rtmsg_ifinfo_build_skb+0x5f/0x1b0
[  233.995022][T11195]  ? mutex_unlock+0x4f/0x90
[  233.995130][T11195]  rtmsg_ifinfo+0x6d/0x110
[  233.995171][T11195]  netif_close_many+0x14b/0x2d0
[  233.995198][T11195]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  233.995308][T11195]  unregister_netdevice_many_notify+0x4f4/0x16d0
[  233.995349][T11195]  ? __list_add_valid_or_report+0x38/0xe0
[  233.995386][T11195]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  233.995423][T11195]  rtnl_dellink+0x3e1/0x5c0
[  233.995488][T11195]  ? css_rstat_updated+0xbb/0x280
[  233.995597][T11195]  ? selinux_capable+0x31/0x40
[  233.995621][T11195]  ? security_capable+0x83/0x90
[  233.995665][T11195]  ? ns_capable+0x7d/0xb0
[  233.995703][T11195]  ? __pfx_rtnl_dellink+0x10/0x10
[  233.995728][T11195]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  233.995780][T11195]  netlink_rcv_skb+0x123/0x220
[  233.995834][T11195]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  233.995940][T11195]  rtnetlink_rcv+0x1c/0x30
[  233.995972][T11195]  netlink_unicast+0x5c0/0x690
[  233.996042][T11195]  netlink_sendmsg+0x58b/0x6b0
[  233.996086][T11195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.996120][T11195]  __sock_sendmsg+0x145/0x180
[  233.996158][T11195]  ____sys_sendmsg+0x31e/0x4a0
[  233.996247][T11195]  ___sys_sendmsg+0x17b/0x1d0
[  233.996308][T11195]  __x64_sys_sendmsg+0xd4/0x160
[  233.996432][T11195]  x64_sys_call+0x17ba/0x3000
[  233.996458][T11195]  do_syscall_64+0xca/0x2b0
[  233.996495][T11195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.996581][T11195] RIP: 0033:0x7ff8aceff749
[  233.996603][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.996659][T11195] RSP: 002b:00007ff8ab95f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.996682][T11195] RAX: ffffffffffffffda RBX: 00007ff8ad155fa0 RCX: 00007ff8aceff749
[  233.996700][T11195] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000005
[  233.996716][T11195] RBP: 00007ff8ab95f090 R08: 0000000000000000 R09: 0000000000000000
[  233.996795][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.996808][T11195] R13: 00007ff8ad156038 R14: 00007ff8ad155fa0 R15: 00007fff6c92d218
[  233.996829][T11195]  </TASK>
[  234.291263][    C1] vcan0: j1939_tp_rxtimer: 0xffff888136d5c400: rx timeout, send abort
[  234.362637][T11200] loop2: detected capacity change from 0 to 1024
[  234.374111][T11202] loop3: detected capacity change from 0 to 512
[  234.390653][T11200] EXT4-fs: Ignoring removed orlov option
[  234.397498][T11202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  234.413802][T11200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.430018][T11202] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2355: invalid indirect mapped block 4294967295 (level 0)
[  234.467730][T11202] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2355: invalid indirect mapped block 4294967295 (level 1)
[  234.513330][T11202] EXT4-fs (loop3): 1 orphan inode deleted
[  234.520251][T11202] EXT4-fs (loop3): 1 truncate cleaned up
[  234.547502][T11202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.600607][T11212] FAULT_INJECTION: forcing a failure.
[  234.600607][T11212] name failslab, interval 1, probability 0, space 0, times 0
[  234.613948][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.7.2358 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  234.613976][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  234.613989][T11212] Call Trace:
[  234.613995][T11212]  <TASK>
[  234.614002][T11212]  __dump_stack+0x1d/0x30
[  234.614041][T11212]  dump_stack_lvl+0x95/0xd0
[  234.614068][T11212]  dump_stack+0x15/0x1b
[  234.614093][T11212]  should_fail_ex+0x265/0x280
[  234.614164][T11212]  should_failslab+0x8c/0xb0
[  234.614188][T11212]  kmem_cache_alloc_noprof+0x69/0x4b0
[  234.614216][T11212]  ? alloc_empty_file+0x76/0x200
[  234.614253][T11212]  alloc_empty_file+0x76/0x200
[  234.614338][T11212]  alloc_file_pseudo+0xc6/0x160
[  234.614378][T11212]  __shmem_file_setup+0x1de/0x210
[  234.614436][T11212]  shmem_file_setup+0x3b/0x50
[  234.614471][T11212]  __se_sys_memfd_create+0x2f7/0x6b0
[  234.614526][T11212]  __x64_sys_memfd_create+0x31/0x40
[  234.614569][T11212]  x64_sys_call+0x28cb/0x3000
[  234.614624][T11212]  do_syscall_64+0xca/0x2b0
[  234.614661][T11212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.614688][T11212] RIP: 0033:0x7ff8aceff749
[  234.614708][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.614759][T11212] RSP: 002b:00007ff8ab95ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  234.614784][T11212] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007ff8aceff749
[  234.614800][T11212] RDX: 00007ff8ab95eef0 RSI: 0000000000000000 RDI: 00007ff8acf84960
[  234.614816][T11212] RBP: 0000200000000bc0 R08: 00007ff8ab95ebb7 R09: 00007ff8ab95ee40
[  234.614832][T11212] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  234.614848][T11212] R13: 00007ff8ab95eef0 R14: 00007ff8ab95eeb0 R15: 0000200000000680
[  234.614872][T11212]  </TASK>
[  234.615897][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.835307][T11222] loop3: detected capacity change from 0 to 1024
[  234.850802][T11222] EXT4-fs: Ignoring removed mblk_io_submit option
[  234.859084][T11222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  234.869291][T11222] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  234.881627][T11222] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.2359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  234.908950][T11222] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2359: couldn't read orphan inode 11 (err -117)
[  234.919921][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  234.924304][ T3645] Bluetooth: hci1: command 0x1003 tx timeout
[  234.935469][T11222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.200155][   T29] kauditd_printk_skb: 186 callbacks suppressed
[  235.200177][   T29] audit: type=1400 audit(1767298148.406:18791): avc:  denied  { accept } for  pid=11238 comm="syz.1.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  235.212530][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.253779][   T29] audit: type=1326 audit(1767298148.406:18792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.277707][   T29] audit: type=1326 audit(1767298148.406:18793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.301354][   T29] audit: type=1326 audit(1767298148.406:18794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.325886][   T29] audit: type=1326 audit(1767298148.406:18795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.349930][   T29] audit: type=1326 audit(1767298148.406:18796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.374044][   T29] audit: type=1326 audit(1767298148.406:18797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.388834][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'.
[  235.398126][   T29] audit: type=1326 audit(1767298148.406:18798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.431352][   T29] audit: type=1326 audit(1767298148.406:18799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.455436][   T29] audit: type=1326 audit(1767298148.406:18800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.1.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  235.513630][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.706278][T11261] loop5: detected capacity change from 0 to 1024
[  235.713345][T11261] EXT4-fs: Ignoring removed orlov option
[  235.725385][T11261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.879408][T11273] loop2: detected capacity change from 0 to 1024
[  235.913817][T11273] EXT4-fs: Ignoring removed mblk_io_submit option
[  235.939182][T11273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  235.976481][T11275] $H�: renamed from bond0 (while UP)
[  236.003602][T11273] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  236.017122][T11275] $H�: entered promiscuous mode
[  236.022307][T11275] bond_slave_0: entered promiscuous mode
[  236.028191][T11275] bond_slave_1: entered promiscuous mode
[  236.074432][T11273] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2384: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  236.240827][T11273] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2384: couldn't read orphan inode 11 (err -117)
[  236.334603][T11273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.550547][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.590974][ T5773] Bluetooth: hci0: Frame reassembly failed (-84)
[  236.597088][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.627961][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.874085][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881448b9000: rx timeout, send abort
[  236.919117][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.929766][T11304] loop5: detected capacity change from 0 to 2048
[  236.951889][T11304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  237.025387][T11310] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.036485][T11312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11312 comm=syz.7.2399
[  237.252095][T11318] loop7: detected capacity change from 0 to 2048
[  237.292286][T11318] Alternate GPT is invalid, using primary GPT.
[  237.298918][T11318]  loop7: p2 p3 p7
[  237.311211][T11319] netlink: 'syz.2.2398': attribute type 12 has an invalid length.
[  237.319201][T11319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2398'.
[  237.336638][T11310] loop2: detected capacity change from 0 to 32768
[  237.369697][T11319] netlink: 'syz.2.2398': attribute type 1 has an invalid length.
[  237.377707][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881448b9200: rx timeout, send abort
[  237.386055][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881448b9000: abort rx timeout. Force session deactivation
[  237.396324][T11319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2398'.
[  237.439837][T11310]  loop2: p1 p2 p3 < p5 p6 >
[  237.455396][T11310] loop2: p2 size 16775168 extends beyond EOD, truncated
[  237.503698][T11310] loop2: p5 start 4294970168 is beyond EOD, truncated
[  237.707819][T11336] loop7: detected capacity change from 0 to 1024
[  237.714922][T11336] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.723152][T11336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  237.739558][T11336] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.753049][T11336] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.2407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  237.771986][T11336] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2407: couldn't read orphan inode 11 (err -117)
[  237.807245][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  237.817235][T11336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.874650][T11350] loop5: detected capacity change from 0 to 1764
[  237.877787][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881448b9200: abort rx timeout. Force session deactivation
[  238.464103][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.599550][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  238.724132][T11405] loop3: detected capacity change from 0 to 2048
[  238.784870][T11405]  loop3: p1 < > p4
[  238.812021][T11405] loop3: p4 size 8388608 extends beyond EOD, truncated
[  238.842332][T11413] loop5: detected capacity change from 0 to 2048
[  238.901311][T11413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  239.448130][T11455] IPv6: sit1: Disabled Multicast RS
[  239.767585][T11445] Set syz1 is full, maxelem 65536 reached
[  239.779609][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  239.830781][  T141] Bluetooth: hci0: Frame reassembly failed (-84)
[  239.842232][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.863353][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.890495][T11486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2446'.
[  239.947278][T11483] xt_hashlimit: max too large, truncated to 1048576
[  239.991596][T11495] $H�: renamed from bond0 (while UP)
[  240.000282][T11495] $H�: entered promiscuous mode
[  240.064175][T11498] loop7: detected capacity change from 0 to 2048
[  240.091110][T11498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  240.125728][T11513] loop5: detected capacity change from 0 to 1024
[  240.133201][T11513] EXT4-fs: Ignoring removed nomblk_io_submit option
[  240.135774][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2455'.
[  240.176631][T11513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.209703][   T29] kauditd_printk_skb: 887 callbacks suppressed
[  240.209721][   T29] audit: type=1326 audit(1767298153.416:19688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.241243][   T29] audit: type=1326 audit(1767298153.416:19689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.265462][   T29] audit: type=1326 audit(1767298153.416:19690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.266319][T11513] netlink: '': attribute type 30 has an invalid length.
[  240.289550][   T29] audit: type=1326 audit(1767298153.416:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.289647][   T29] audit: type=1326 audit(1767298153.416:19692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.344813][   T29] audit: type=1326 audit(1767298153.416:19693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.368840][   T29] audit: type=1326 audit(1767298153.416:19694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.392873][   T29] audit: type=1326 audit(1767298153.416:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.416784][   T29] audit: type=1326 audit(1767298153.416:19696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.440835][   T29] audit: type=1326 audit(1767298153.416:19697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  240.517062][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.692081][T11542] loop5: detected capacity change from 0 to 512
[  240.712466][T11542] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  240.721009][T11542] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  240.730458][T11542] System zones: 0-1, 15-15, 18-18, 34-34
[  240.736334][T11542] EXT4-fs (loop5): orphan cleanup on readonly fs
[  240.743029][T11542] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  240.758025][T11542] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  240.765856][T11542] EXT4-fs (loop5): 1 truncate cleaned up
[  240.773161][T11542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  240.798632][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.946884][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  241.232856][T11562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.241932][T11562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.359379][T11546] Set syz1 is full, maxelem 65536 reached
[  241.846528][T11592] netlink: 'syz.7.2485': attribute type 1 has an invalid length.
[  241.860949][T11592] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2485'.
[  241.880372][ T3646] Bluetooth: hci0: command 0x1003 tx timeout
[  241.886545][ T3645] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  241.971799][T11597] FAULT_INJECTION: forcing a failure.
[  241.971799][T11597] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  241.986180][T11597] CPU: 1 UID: 0 PID: 11597 Comm: syz.5.2486 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  241.986211][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  241.986297][T11597] Call Trace:
[  241.986305][T11597]  <TASK>
[  241.986314][T11597]  __dump_stack+0x1d/0x30
[  241.986349][T11597]  dump_stack_lvl+0x95/0xd0
[  241.986377][T11597]  dump_stack+0x15/0x1b
[  241.986404][T11597]  should_fail_ex+0x265/0x280
[  241.986489][T11597]  should_fail_alloc_page+0xf2/0x100
[  241.986520][T11597]  __alloc_frozen_pages_noprof+0x109/0x360
[  241.986561][T11597]  alloc_pages_mpol+0xb3/0x260
[  241.986674][T11597]  folio_alloc_mpol_noprof+0x39/0x80
[  241.986713][T11597]  shmem_get_folio_gfp+0x3cf/0xd50
[  241.986853][T11597]  shmem_fault+0xf6/0x250
[  241.986883][T11597]  __do_fault+0xbc/0x200
[  241.986901][T11597]  handle_mm_fault+0xfab/0x2c60
[  241.986939][T11597]  ? mt_find+0x21b/0x330
[  241.986976][T11597]  do_user_addr_fault+0x3fe/0x1080
[  241.987100][T11597]  exc_page_fault+0x62/0xa0
[  241.987138][T11597]  asm_exc_page_fault+0x26/0x30
[  241.987164][T11597] RIP: 0010:__get_user_8+0x14/0x30
[  241.987194][T11597] Code: ca e9 d0 0a 02 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90
[  241.987268][T11597] RSP: 0018:ffffc90003e67ea0 EFLAGS: 00050287
[  241.987296][T11597] RAX: 0000200000004200 RBX: 0000200000004200 RCX: ffff888146a2e300
[  241.987313][T11597] RDX: 00007ffffffff000 RSI: 0000200000004200 RDI: 0000000000000008
[  241.987331][T11597] RBP: ffffc90003e67f48 R08: 0001c90003e67fc7 R09: 0000000000000000
[  241.987348][T11597] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888146a2e300
[  241.987431][T11597] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000000
[  241.987469][T11597]  __se_sys_io_setup+0x1d/0x1b0
[  241.987504][T11597]  __x64_sys_io_setup+0x31/0x40
[  241.987564][T11597]  x64_sys_call+0x2a8e/0x3000
[  241.987656][T11597]  do_syscall_64+0xca/0x2b0
[  241.987698][T11597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.987724][T11597] RIP: 0033:0x7fa2e6bff749
[  241.987745][T11597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.987775][T11597] RSP: 002b:00007fa2e5646038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  241.987794][T11597] RAX: ffffffffffffffda RBX: 00007fa2e6e56090 RCX: 00007fa2e6bff749
[  241.987810][T11597] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000000000000008
[  241.987902][T11597] RBP: 00007fa2e5646090 R08: 0000000000000000 R09: 0000000000000000
[  241.987915][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.988001][T11597] R13: 00007fa2e6e56128 R14: 00007fa2e6e56090 R15: 00007ffceb706648
[  241.988049][T11597]  </TASK>
[  242.359550][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  242.643950][T11624] loop2: detected capacity change from 0 to 512
[  242.652676][T11624] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  242.800681][T11634] loop7: detected capacity change from 0 to 8192
[  242.856397][T11634] netlink: 'syz.7.2500': attribute type 1 has an invalid length.
[  242.866037][T11634] netlink: 'syz.7.2500': attribute type 4 has an invalid length.
[  242.874967][T11634] netlink: 15234 bytes leftover after parsing attributes in process `syz.7.2500'.
[  243.077377][T11648] IPv6: Can't replace route, no match found
[  243.131929][T11659] loop3: detected capacity change from 0 to 128
[  243.348964][T11659] bio_check_eod: 205 callbacks suppressed
[  243.349004][T11659] syz.3.2510: attempt to access beyond end of device
[  243.349004][T11659] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  243.370587][T11659] syz.3.2510: attempt to access beyond end of device
[  243.370587][T11659] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  243.385689][T11659] syz.3.2510: attempt to access beyond end of device
[  243.385689][T11659] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  243.402955][T11659] syz.3.2510: attempt to access beyond end of device
[  243.402955][T11659] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  243.417759][T11659] syz.3.2510: attempt to access beyond end of device
[  243.417759][T11659] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  243.420872][T11675] $H�: renamed from bond0 (while UP)
[  243.440309][T11675] $H�: entered promiscuous mode
[  243.445872][T11675] bond_slave_0: entered promiscuous mode
[  243.451907][T11675] bond_slave_1: entered promiscuous mode
[  243.455903][T11659] syz.3.2510: attempt to access beyond end of device
[  243.455903][T11659] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  243.483567][T11659] syz.3.2510: attempt to access beyond end of device
[  243.483567][T11659] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  243.498556][T11659] syz.3.2510: attempt to access beyond end of device
[  243.498556][T11659] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  243.514825][T11659] syz.3.2510: attempt to access beyond end of device
[  243.514825][T11659] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  243.529425][T11659] syz.3.2510: attempt to access beyond end of device
[  243.529425][T11659] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  243.682334][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2522'.
[  243.704845][T11691] loop7: detected capacity change from 0 to 2048
[  243.727266][T11691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  243.800424][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  243.924883][T11710] loop3: detected capacity change from 0 to 512
[  243.953211][T11710] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2527: Failed to acquire dquot type 1
[  243.967538][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'.
[  243.977534][T11717] netlink: 'syz.2.2528': attribute type 30 has an invalid length.
[  243.985886][T11717] netlink: 'syz.2.2528': attribute type 29 has an invalid length.
[  243.993881][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'.
[  244.000122][T11710] EXT4-fs (loop3): 1 truncate cleaned up
[  244.011666][T11710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.024490][T11710] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.038601][T11720] loop2: detected capacity change from 0 to 128
[  244.052840][T11718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2532'.
[  244.098514][T11717] Buffer I/O error on dev loop2, logical block 79, lost async page write
[  244.117374][T11717] Buffer I/O error on dev loop2, logical block 80, lost async page write
[  244.130228][T11717] Buffer I/O error on dev loop2, logical block 83, lost async page write
[  244.139970][T11717] Buffer I/O error on dev loop2, logical block 84, lost async page write
[  244.149170][T11717] Buffer I/O error on dev loop2, logical block 95, lost async page write
[  244.159022][T11717] Buffer I/O error on dev loop2, logical block 96, lost async page write
[  244.197917][T11717] Buffer I/O error on dev loop2, logical block 99, lost async page write
[  244.234758][T11717] Buffer I/O error on dev loop2, logical block 100, lost async page write
[  244.271587][T11717] Buffer I/O error on dev loop2, logical block 119, lost async page write
[  244.299884][T11717] Buffer I/O error on dev loop2, logical block 120, lost async page write
[  244.411468][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.486563][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'.
[  244.495748][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'.
[  244.975717][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'.
[  245.171071][T11779] loop7: detected capacity change from 0 to 2048
[  245.181707][T11779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.237451][   T29] kauditd_printk_skb: 759 callbacks suppressed
[  245.237468][   T29] audit: type=1326 audit(1767298158.436:20454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.268714][   T29] audit: type=1326 audit(1767298158.466:20455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.287509][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.295671][   T29] audit: type=1326 audit(1767298158.466:20456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.326438][   T29] audit: type=1326 audit(1767298158.466:20457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.351743][   T29] audit: type=1326 audit(1767298158.466:20458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.375955][   T29] audit: type=1326 audit(1767298158.466:20459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.400455][   T29] audit: type=1326 audit(1767298158.466:20460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.424309][   T29] audit: type=1326 audit(1767298158.466:20461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.448260][   T29] audit: type=1326 audit(1767298158.466:20462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.473256][   T29] audit: type=1326 audit(1767298158.466:20463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.5.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e6bff749 code=0x7ffc0000
[  245.796630][T11791] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11791 comm=syz.1.2554
[  245.810218][T11741] Set syz1 is full, maxelem 65536 reached
[  245.869440][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.878510][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.904608][T11795] loop3: detected capacity change from 0 to 128
[  246.486186][T11817] netlink: 'syz.5.2564': attribute type 10 has an invalid length.
[  246.494462][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2564'.
[  246.513590][T11819] loop3: detected capacity change from 0 to 1024
[  246.524106][T11819] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2565: Failed to acquire dquot type 0
[  246.540281][T11817] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  246.557521][T11819] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  246.577471][T11819] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2565: corrupted inode contents
[  246.600561][T11819] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.2565: mark_inode_dirty error
[  246.623923][T11819] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2565: corrupted inode contents
[  246.636622][T11819] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2565: mark_inode_dirty error
[  246.648469][T11819] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2565: corrupted inode contents
[  246.662904][T11819] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  246.672456][T11819] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2565: corrupted inode contents
[  246.685193][T11819] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.2565: mark_inode_dirty error
[  246.696830][T11819] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  246.707716][T11819] EXT4-fs (loop3): 1 truncate cleaned up
[  246.714026][T11819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.728823][T11825] loop5: detected capacity change from 0 to 1024
[  246.736641][T11825] EXT4-fs: Ignoring removed mblk_io_submit option
[  246.744000][T11825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  246.753928][T11825] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  246.755222][T11819] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.775935][T11825] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.2566: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  246.795795][T11825] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2566: couldn't read orphan inode 11 (err -117)
[  246.809114][T11825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.809225][T11827] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  246.831497][T11827] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  246.842336][T11827] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  246.903973][T11819] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.922041][T11829] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11829 comm=syz.1.2567
[  246.931364][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  246.934869][ T3645] Bluetooth: hci0: command 0x1003 tx timeout
[  246.992312][T11819] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.080837][T11819] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.197952][T11843] IPv6: Can't replace route, no match found
[  247.236035][  T141] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.249101][  T141] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.257633][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.268852][  T141] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.284110][  T141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.460446][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.469700][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.624384][T11857] infiniband syz1: set down
[  247.628959][T11857] infiniband syz1: added veth0_to_bond
[  247.641187][T11857] RDS/IB: syz1: added
[  247.645353][T11857] smc: adding ib device syz1 with port count 1
[  247.651709][T11857] smc:    ib device syz1 port 1 has no pnetid
[  247.656577][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'.
[  247.667502][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'.
[  247.703093][T11861] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11861 comm=syz.7.2578
[  247.777274][T11865] lo speed is unknown, defaulting to 1000
[  248.242809][T11895] FAULT_INJECTION: forcing a failure.
[  248.242809][T11895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.256286][T11895] CPU: 1 UID: 0 PID: 11895 Comm: syz.5.2591 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  248.256321][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  248.256343][T11895] Call Trace:
[  248.256353][T11895]  <TASK>
[  248.256364][T11895]  __dump_stack+0x1d/0x30
[  248.256398][T11895]  dump_stack_lvl+0x95/0xd0
[  248.256427][T11895]  dump_stack+0x15/0x1b
[  248.256549][T11895]  should_fail_ex+0x265/0x280
[  248.256581][T11895]  should_fail+0xb/0x20
[  248.256608][T11895]  should_fail_usercopy+0x1a/0x20
[  248.256702][T11895]  _copy_to_user+0x20/0xa0
[  248.256739][T11895]  simple_read_from_buffer+0xb5/0x130
[  248.256780][T11895]  proc_fail_nth_read+0x10e/0x150
[  248.256813][T11895]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  248.256844][T11895]  vfs_read+0x1a8/0x770
[  248.256867][T11895]  ? __rcu_read_unlock+0x4f/0x70
[  248.256952][T11895]  ? __fget_files+0x184/0x1c0
[  248.256983][T11895]  ? mutex_lock+0x58/0x90
[  248.257019][T11895]  ksys_read+0xda/0x1a0
[  248.257050][T11895]  __x64_sys_read+0x40/0x50
[  248.257069][T11895]  x64_sys_call+0x2889/0x3000
[  248.257151][T11895]  do_syscall_64+0xca/0x2b0
[  248.257244][T11895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.257338][T11895] RIP: 0033:0x7fa2e6bfe15c
[  248.257355][T11895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  248.257376][T11895] RSP: 002b:00007fa2e5667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  248.257398][T11895] RAX: ffffffffffffffda RBX: 00007fa2e6e55fa0 RCX: 00007fa2e6bfe15c
[  248.257413][T11895] RDX: 000000000000000f RSI: 00007fa2e56670a0 RDI: 0000000000000004
[  248.257425][T11895] RBP: 00007fa2e5667090 R08: 0000000000000000 R09: 0000000000000000
[  248.257437][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.257468][T11895] R13: 00007fa2e6e56038 R14: 00007fa2e6e55fa0 R15: 00007ffceb706648
[  248.257489][T11895]  </TASK>
[  248.529338][T11898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.537991][T11898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.799572][T11906] ������: renamed from vlan0 (while UP)
[  248.805839][T11906] FAULT_INJECTION: forcing a failure.
[  248.805839][T11906] name failslab, interval 1, probability 0, space 0, times 0
[  248.818632][T11906] CPU: 0 UID: 0 PID: 11906 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  248.818735][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  248.818751][T11906] Call Trace:
[  248.818758][T11906]  <TASK>
[  248.818768][T11906]  __dump_stack+0x1d/0x30
[  248.818848][T11906]  dump_stack_lvl+0x95/0xd0
[  248.818925][T11906]  dump_stack+0x15/0x1b
[  248.818948][T11906]  should_fail_ex+0x265/0x280
[  248.818980][T11906]  should_failslab+0x8c/0xb0
[  248.819011][T11906]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[  248.819106][T11906]  ? kstrdup_const+0x3e/0x50
[  248.819124][T11906]  ? sprintf+0x88/0xb0
[  248.819188][T11906]  kstrdup+0x3e/0xd0
[  248.819305][T11906]  kstrdup_const+0x3e/0x50
[  248.819322][T11906]  kobject_rename+0x16f/0x350
[  248.819349][T11906]  ? sysfs_rename_link_ns+0x106/0x120
[  248.819406][T11906]  device_rename+0x11f/0x180
[  248.819438][T11906]  netif_change_name+0x1d7/0x720
[  248.819486][T11906]  ? trace_reschedule_exit+0xd/0xc0
[  248.819555][T11906]  dev_change_name+0xc0/0x170
[  248.819585][T11906]  dev_ifsioc+0x302/0xaa0
[  248.819666][T11906]  ? mutex_lock+0x58/0x90
[  248.819700][T11906]  dev_ioctl+0x4a7/0x960
[  248.819750][T11906]  sock_do_ioctl+0x197/0x220
[  248.819815][T11906]  sock_ioctl+0x41b/0x610
[  248.819859][T11906]  ? __pfx_sock_ioctl+0x10/0x10
[  248.819950][T11906]  __se_sys_ioctl+0xce/0x140
[  248.819993][T11906]  __x64_sys_ioctl+0x43/0x50
[  248.820028][T11906]  x64_sys_call+0x14b0/0x3000
[  248.820102][T11906]  do_syscall_64+0xca/0x2b0
[  248.820139][T11906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.820162][T11906] RIP: 0033:0x7ff8aceff749
[  248.820180][T11906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.820231][T11906] RSP: 002b:00007ff8ab95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  248.820250][T11906] RAX: ffffffffffffffda RBX: 00007ff8ad155fa0 RCX: 00007ff8aceff749
[  248.820266][T11906] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007
[  248.820278][T11906] RBP: 00007ff8ab95f090 R08: 0000000000000000 R09: 0000000000000000
[  248.820290][T11906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.820365][T11906] R13: 00007ff8ad156038 R14: 00007ff8ad155fa0 R15: 00007fff6c92d218
[  248.820391][T11906]  </TASK>
[  249.236853][    T9] hid_parser_main: 22 callbacks suppressed
[  249.236878][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.250716][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.258135][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.265628][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.273500][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.281031][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.288950][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.296504][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.303971][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.311486][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  249.325586][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  249.499591][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.532054][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'.
[  249.560207][T11926] loop5: detected capacity change from 0 to 512
[  249.567857][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'.
[  249.702448][T11926] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2601: Failed to acquire dquot type 1
[  249.743989][T11926] EXT4-fs (loop5): 1 truncate cleaned up
[  249.753421][T11935] netlink: 'syz.3.2604': attribute type 13 has an invalid length.
[  249.831243][T11926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.852249][T11926] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.867899][T11935] tipc: Resetting bearer <eth:team0>
[  250.483326][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.499661][   T29] kauditd_printk_skb: 344 callbacks suppressed
[  250.499677][   T29] audit: type=1400 audit(1767298163.706:20804): avc:  denied  { create } for  pid=11948 comm="syz.7.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  250.536858][   T29] audit: type=1400 audit(1767298163.736:20805): avc:  denied  { setopt } for  pid=11948 comm="syz.7.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  250.556910][   T29] audit: type=1400 audit(1767298163.736:20806): avc:  denied  { getopt } for  pid=11948 comm="syz.7.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  250.576677][   T29] audit: type=1400 audit(1767298163.736:20807): avc:  denied  { create } for  pid=11948 comm="syz.7.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  250.596523][   T29] audit: type=1400 audit(1767298163.736:20808): avc:  denied  { write } for  pid=11948 comm="syz.7.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  250.644266][T11953] netlink: 'syz.5.2611': attribute type 4 has an invalid length.
[  250.656728][   T29] audit: type=1400 audit(1767298163.856:20809): avc:  denied  { create } for  pid=11954 comm="syz.7.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  250.688162][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2611'.
[  250.699962][T11955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=11955 comm=syz.7.2612
[  250.721715][   T29] audit: type=1400 audit(1767298163.886:20810): avc:  denied  { bind } for  pid=11954 comm="syz.7.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  250.742287][   T29] audit: type=1400 audit(1767298163.896:20811): avc:  denied  { setopt } for  pid=11954 comm="syz.7.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  250.762968][   T29] audit: type=1400 audit(1767298163.896:20812): avc:  denied  { create } for  pid=11954 comm="syz.7.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  250.782784][   T29] audit: type=1400 audit(1767298163.906:20813): avc:  denied  { write } for  pid=11954 comm="syz.7.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  251.017140][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.034452][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.092192][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2611'.
[  251.103474][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2615'.
[  251.200182][T11395] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.201870][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'.
[  251.210173][T11395] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.228107][T11970] hsr_slave_0: left promiscuous mode
[  251.234932][T11970] hsr_slave_1: left promiscuous mode
[  251.273860][T11395] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.283113][T11395] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.344341][T11395] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.352936][T11395] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.368337][T11977] loop2: detected capacity change from 0 to 512
[  251.383206][T11977] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2619: EA inode hash validation failed
[  251.409957][T11395] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.419298][T11395] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.429709][T11977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2619: corrupted inode contents
[  251.462676][T11977] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.2619: mark_inode_dirty error
[  251.491143][T11977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2619: corrupted inode contents
[  251.492398][T11981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.503998][T11977] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.2619: mark_inode_dirty error
[  251.524968][T11977] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.2619: mark inode dirty (error -117)
[  251.538302][T11977] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117)
[  251.547860][T11981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.558326][T11977] EXT4-fs (loop2): 1 orphan inode deleted
[  251.568601][T11977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.706360][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.741995][T11983] loop2: detected capacity change from 0 to 512
[  251.749346][T11983] EXT4-fs: Ignoring removed mblk_io_submit option
[  251.813109][T11983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  251.828765][T11987] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=11987 comm=syz.5.2623
[  251.851223][T11983] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2621: bg 0: block 280: padding at end of block bitmap is not set
[  251.889721][T11983] EXT4-fs (loop2): Remounting filesystem read-only
[  251.902586][T11983] EXT4-fs (loop2): 1 truncate cleaned up
[  251.909037][T11983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.934300][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.963921][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'.
[  251.987564][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2628'.
[  252.099136][T12006] FAULT_INJECTION: forcing a failure.
[  252.099136][T12006] name failslab, interval 1, probability 0, space 0, times 0
[  252.112421][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.7.2632 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  252.112537][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.112624][T12006] Call Trace:
[  252.112633][T12006]  <TASK>
[  252.112644][T12006]  __dump_stack+0x1d/0x30
[  252.112686][T12006]  dump_stack_lvl+0x95/0xd0
[  252.112716][T12006]  dump_stack+0x15/0x1b
[  252.112745][T12006]  should_fail_ex+0x265/0x280
[  252.112828][T12006]  should_failslab+0x8c/0xb0
[  252.112907][T12006]  __kmalloc_node_noprof+0xbe/0x5c0
[  252.112934][T12006]  ? __vmalloc_node_range_noprof+0x433/0x1310
[  252.112999][T12006]  __vmalloc_node_range_noprof+0x433/0x1310
[  252.113043][T12006]  ? obj_cgroup_charge_account+0xba/0x1a0
[  252.113086][T12006]  ? __rcu_read_unlock+0x4f/0x70
[  252.113122][T12006]  __vmalloc_node_noprof+0x89/0xc0
[  252.113187][T12006]  ? copy_process+0x37d/0x1ef0
[  252.113213][T12006]  ? copy_process+0x37d/0x1ef0
[  252.113253][T12006]  dup_task_struct+0x219/0x950
[  252.113280][T12006]  ? copy_process+0x36c/0x1ef0
[  252.113370][T12006]  copy_process+0x37d/0x1ef0
[  252.113395][T12006]  ? kstrtouint+0x76/0xc0
[  252.113483][T12006]  ? kstrtouint_from_user+0x9f/0xf0
[  252.113589][T12006]  ? 0xffffffff81000000
[  252.113616][T12006]  kernel_clone+0x16c/0x5c0
[  252.113647][T12006]  ? vfs_write+0x7e8/0x960
[  252.113688][T12006]  __x64_sys_clone+0xe6/0x120
[  252.113798][T12006]  x64_sys_call+0x12d0/0x3000
[  252.113833][T12006]  do_syscall_64+0xca/0x2b0
[  252.113951][T12006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.113975][T12006] RIP: 0033:0x7ff8aceff749
[  252.113992][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.114017][T12006] RSP: 002b:00007ff8ab95efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  252.114044][T12006] RAX: ffffffffffffffda RBX: 00007ff8ad155fa0 RCX: 00007ff8aceff749
[  252.114062][T12006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000
[  252.114080][T12006] RBP: 00007ff8ab95f090 R08: 0000000000000000 R09: 0000000000000000
[  252.114150][T12006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  252.114168][T12006] R13: 00007ff8ad156038 R14: 00007ff8ad155fa0 R15: 00007fff6c92d218
[  252.114194][T12006]  </TASK>
[  252.114204][T12006] syz.7.2632: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  252.362875][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.7.2632 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  252.362913][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.362929][T12006] Call Trace:
[  252.362937][T12006]  <TASK>
[  252.362947][T12006]  __dump_stack+0x1d/0x30
[  252.362977][T12006]  dump_stack_lvl+0x95/0xd0
[  252.363003][T12006]  dump_stack+0x15/0x1b
[  252.363025][T12006]  warn_alloc+0x12b/0x1a0
[  252.363114][T12006]  __vmalloc_node_range_noprof+0x7fc/0x1310
[  252.363150][T12006]  ? obj_cgroup_charge_account+0xba/0x1a0
[  252.363184][T12006]  ? __rcu_read_unlock+0x4f/0x70
[  252.363307][T12006]  __vmalloc_node_noprof+0x89/0xc0
[  252.363334][T12006]  ? copy_process+0x37d/0x1ef0
[  252.363355][T12006]  ? copy_process+0x37d/0x1ef0
[  252.363386][T12006]  dup_task_struct+0x219/0x950
[  252.363418][T12006]  ? copy_process+0x36c/0x1ef0
[  252.363439][T12006]  copy_process+0x37d/0x1ef0
[  252.363458][T12006]  ? kstrtouint+0x76/0xc0
[  252.363479][T12006]  ? kstrtouint_from_user+0x9f/0xf0
[  252.363514][T12006]  ? 0xffffffff81000000
[  252.363606][T12006]  kernel_clone+0x16c/0x5c0
[  252.363630][T12006]  ? vfs_write+0x7e8/0x960
[  252.363653][T12006]  __x64_sys_clone+0xe6/0x120
[  252.363685][T12006]  x64_sys_call+0x12d0/0x3000
[  252.363719][T12006]  do_syscall_64+0xca/0x2b0
[  252.363757][T12006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.363817][T12006] RIP: 0033:0x7ff8aceff749
[  252.363835][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.363856][T12006] RSP: 002b:00007ff8ab95efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  252.363879][T12006] RAX: ffffffffffffffda RBX: 00007ff8ad155fa0 RCX: 00007ff8aceff749
[  252.363892][T12006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000
[  252.363905][T12006] RBP: 00007ff8ab95f090 R08: 0000000000000000 R09: 0000000000000000
[  252.363919][T12006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  252.363932][T12006] R13: 00007ff8ad156038 R14: 00007ff8ad155fa0 R15: 00007fff6c92d218
[  252.363987][T12006]  </TASK>
[  252.363995][T12006] Mem-Info:
[  252.581943][T12006] active_anon:12165 inactive_anon:151 isolated_anon:0
[  252.581943][T12006]  active_file:18854 inactive_file:2616 isolated_file:0
[  252.581943][T12006]  unevictable:0 dirty:319 writeback:0
[  252.581943][T12006]  slab_reclaimable:3771 slab_unreclaimable:37345
[  252.581943][T12006]  mapped:29839 shmem:894 pagetables:1806
[  252.581943][T12006]  sec_pagetables:0 bounce:0
[  252.581943][T12006]  kernel_misc_reclaimable:0
[  252.581943][T12006]  free:1705592 free_pcp:14620 free_cma:0
[  252.627664][T12006] Node 0 active_anon:48544kB inactive_anon:604kB active_file:75416kB inactive_file:10464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119356kB dirty:1276kB writeback:0kB shmem:3576kB kernel_stack:5360kB pagetables:7340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  252.656366][T12006] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  252.686449][T12014] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12014 comm=syz.2.2634
[  252.688469][T12006] lowmem_reserve[]: 0 2880 7859 7859
[  252.706557][T12006] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  252.737962][T12006] lowmem_reserve[]: 0 0 4978 4978
[  252.743114][T12006] Node 0 Normal free:3849092kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48544kB inactive_anon:604kB active_file:75416kB inactive_file:10464kB unevictable:0kB writepending:1276kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:53764kB local_pcp:35908kB free_cma:0kB
[  252.777311][T12006] lowmem_reserve[]: 0 0 0 0
[  252.782048][T12006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  252.795549][T12006] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB
[  252.812459][T12006] Node 0 Normal: 1*4kB (M) 4*8kB (UME) 5*16kB (UE) 2*32kB (UM) 7*64kB (UME) 82*128kB (UM) 66*256kB (UM) 21*512kB (ME) 79*1024kB (UM) 19*2048kB (UM) 900*4096kB (UM) = 3844980kB
[  252.830696][T12006] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  252.840658][T12006] 22501 total pagecache pages
[  252.845466][T12006] 156 pages in swap cache
[  252.849865][T12006] Free swap  = 124196kB
[  252.854061][T12006] Total swap = 124996kB
[  252.858277][T12006] 2097051 pages RAM
[  252.862781][T12006] 0 pages HighMem/MovableOnly
[  252.867892][T12006] 81272 pages reserved
[  253.045067][T12036] loop5: detected capacity change from 0 to 512
[  253.070883][T12036] EXT4-fs: Ignoring removed mblk_io_submit option
[  253.091297][T12036] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  253.163075][T12042] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12042 comm=syz.2.2645
[  253.176625][T12036] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2643: bg 0: block 280: padding at end of block bitmap is not set
[  253.204156][T12036] EXT4-fs (loop5): Remounting filesystem read-only
[  253.211034][T12036] EXT4-fs (loop5): 1 truncate cleaned up
[  253.217592][T12036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.304504][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.574575][T12069] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12069 comm=syz.1.2657
[  253.784387][T12074] FAULT_INJECTION: forcing a failure.
[  253.784387][T12074] name failslab, interval 1, probability 0, space 0, times 0
[  253.797449][T12074] CPU: 1 UID: 0 PID: 12074 Comm: syz.1.2658 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  253.797503][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  253.797625][T12074] Call Trace:
[  253.797634][T12074]  <TASK>
[  253.797646][T12074]  __dump_stack+0x1d/0x30
[  253.797730][T12074]  dump_stack_lvl+0x95/0xd0
[  253.797757][T12074]  dump_stack+0x15/0x1b
[  253.797795][T12074]  should_fail_ex+0x265/0x280
[  253.797826][T12074]  should_failslab+0x8c/0xb0
[  253.797883][T12074]  __kmalloc_cache_noprof+0x65/0x4c0
[  253.797913][T12074]  ? tcf_proto_create+0x44/0x1a0
[  253.797958][T12074]  tcf_proto_create+0x44/0x1a0
[  253.798080][T12074]  tc_new_tfilter+0x95c/0x10a0
[  253.798153][T12074]  ? __rcu_read_unlock+0x4f/0x70
[  253.798193][T12074]  ? ns_capable+0x7d/0xb0
[  253.798232][T12074]  ? __pfx_tc_new_tfilter+0x10/0x10
[  253.798292][T12074]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  253.798332][T12074]  netlink_rcv_skb+0x123/0x220
[  253.798384][T12074]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  253.798438][T12074]  rtnetlink_rcv+0x1c/0x30
[  253.798531][T12074]  netlink_unicast+0x5c0/0x690
[  253.798611][T12074]  netlink_sendmsg+0x58b/0x6b0
[  253.798657][T12074]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.798692][T12074]  __sock_sendmsg+0x145/0x180
[  253.798714][T12074]  ____sys_sendmsg+0x31e/0x4a0
[  253.798750][T12074]  ___sys_sendmsg+0x17b/0x1d0
[  253.798868][T12074]  __x64_sys_sendmsg+0xd4/0x160
[  253.798908][T12074]  x64_sys_call+0x17ba/0x3000
[  253.798954][T12074]  do_syscall_64+0xca/0x2b0
[  253.799064][T12074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.799087][T12074] RIP: 0033:0x7f1ec8a3f749
[  253.799166][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.799266][T12074] RSP: 002b:00007f1ec74a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.799287][T12074] RAX: ffffffffffffffda RBX: 00007f1ec8c95fa0 RCX: 00007f1ec8a3f749
[  253.799300][T12074] RDX: 00000000000000c0 RSI: 0000200000000580 RDI: 0000000000000005
[  253.799312][T12074] RBP: 00007f1ec74a7090 R08: 0000000000000000 R09: 0000000000000000
[  253.799328][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.799344][T12074] R13: 00007f1ec8c96038 R14: 00007f1ec8c95fa0 R15: 00007ffe2ebacc78
[  253.799439][T12074]  </TASK>
[  254.151397][T12083] loop2: detected capacity change from 0 to 128
[  254.215445][T12085] serio: Serial port ttyS3
[  254.223902][T12083] vfat: Unknown parameter '01777777777777777777777'
[  254.486984][T12105] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12105 comm=syz.2.2668
[  255.143520][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2679'.
[  255.195171][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2680'.
[  255.228281][T12138] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12138 comm=syz.5.2681
[  255.367726][T12144] loop5: detected capacity change from 0 to 512
[  255.400758][T12144] EXT4-fs: Ignoring removed mblk_io_submit option
[  255.410245][T12144] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  255.433710][T12144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2684: bg 0: block 280: padding at end of block bitmap is not set
[  255.435355][T12160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'.
[  255.458881][T12157] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  255.470749][T12157] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  255.479650][T12144] EXT4-fs (loop5): Remounting filesystem read-only
[  255.501394][T12144] EXT4-fs (loop5): 1 truncate cleaned up
[  255.508064][T12144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.548048][T12165] loop2: detected capacity change from 0 to 512
[  255.607152][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.630447][   T29] kauditd_printk_skb: 75 callbacks suppressed
[  255.630467][   T29] audit: type=1400 audit(1767298168.836:20889): avc:  denied  { read } for  pid=12168 comm="syz.5.2694" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  255.661176][   T29] audit: type=1400 audit(1767298168.836:20890): avc:  denied  { open } for  pid=12168 comm="syz.5.2694" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  255.704071][   T29] audit: type=1326 audit(1767298168.906:20891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.5.2694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x0
[  255.727444][   T29] audit: type=1326 audit(1767298168.906:20892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12168 comm="syz.5.2694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2e6bff749 code=0x0
[  255.927973][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'.
[  255.938854][T12181] FAULT_INJECTION: forcing a failure.
[  255.938854][T12181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.952293][T12181] CPU: 1 UID: 0 PID: 12181 Comm: syz.2.2698 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  255.952326][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  255.952342][T12181] Call Trace:
[  255.952353][T12181]  <TASK>
[  255.952363][T12181]  __dump_stack+0x1d/0x30
[  255.952397][T12181]  dump_stack_lvl+0x95/0xd0
[  255.952437][T12181]  dump_stack+0x15/0x1b
[  255.952459][T12181]  should_fail_ex+0x265/0x280
[  255.952490][T12181]  should_fail+0xb/0x20
[  255.952515][T12181]  should_fail_usercopy+0x1a/0x20
[  255.952606][T12181]  copy_fpstate_to_sigframe+0x628/0x7d0
[  255.952644][T12181]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  255.952676][T12181]  ? x86_task_fpu+0x36/0x60
[  255.952751][T12181]  get_sigframe+0x34d/0x490
[  255.952780][T12181]  ? get_signal+0xdc7/0xf70
[  255.952817][T12181]  x64_setup_rt_frame+0xa8/0x580
[  255.952872][T12181]  arch_do_signal_or_restart+0x24c/0x450
[  255.952905][T12181]  exit_to_user_mode_loop+0x6a/0x740
[  255.953027][T12181]  ? __x64_sys_futex+0x78/0x90
[  255.953061][T12181]  do_syscall_64+0x1e1/0x2b0
[  255.953106][T12181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.953177][T12181] RIP: 0033:0x7f1f9f64f749
[  255.953199][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.953217][T12181] RSP: 002b:00007f1f9e0b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  255.953252][T12181] RAX: fffffffffffffff5 RBX: 00007f1f9f8a5fa0 RCX: 00007f1f9f64f749
[  255.953268][T12181] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc
[  255.953284][T12181] RBP: 00007f1f9e0b7090 R08: 0000200000048000 R09: 0000000000000300
[  255.953299][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.953315][T12181] R13: 00007f1f9f8a6038 R14: 00007f1f9f8a5fa0 R15: 00007ffc5c3c9cd8
[  255.953338][T12181]  </TASK>
[  256.157976][T12196] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  256.168809][   T29] audit: type=1400 audit(1767298169.366:20893): avc:  denied  { nlmsg_read } for  pid=12195 comm="{/}\" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  256.169363][T12197] netlink: '{/}\': attribute type 83 has an invalid length.
[  256.189397][   T29] audit: type=1400 audit(1767298169.366:20894): avc:  denied  { audit_write } for  pid=12195 comm="{/}\" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  256.217840][   T29] audit: type=1107 audit(1767298169.366:20895): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  256.222682][T12197] IPVS: Error connecting to the multicast addr
[  256.233947][   T29] audit: type=1400 audit(1767298169.416:20896): avc:  denied  { setopt } for  pid=12195 comm="{/}\" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  256.280807][T12200] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12200 comm=syz.2.2707
[  256.360151][T12210] FAULT_INJECTION: forcing a failure.
[  256.360151][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.373482][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.2.2711 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  256.373536][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  256.373555][T12210] Call Trace:
[  256.373565][T12210]  <TASK>
[  256.373576][T12210]  __dump_stack+0x1d/0x30
[  256.373613][T12210]  dump_stack_lvl+0x95/0xd0
[  256.373644][T12210]  dump_stack+0x15/0x1b
[  256.373678][T12210]  should_fail_ex+0x265/0x280
[  256.373707][T12210]  should_fail+0xb/0x20
[  256.373728][T12210]  should_fail_usercopy+0x1a/0x20
[  256.373754][T12210]  _copy_from_user+0x1c/0xb0
[  256.373798][T12210]  ___sys_sendmsg+0xc1/0x1d0
[  256.373847][T12210]  __x64_sys_sendmsg+0xd4/0x160
[  256.373926][T12210]  x64_sys_call+0x17ba/0x3000
[  256.373959][T12210]  do_syscall_64+0xca/0x2b0
[  256.374009][T12210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.374037][T12210] RIP: 0033:0x7f1f9f64f749
[  256.374055][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.374088][T12210] RSP: 002b:00007f1f9e0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.374163][T12210] RAX: ffffffffffffffda RBX: 00007f1f9f8a5fa0 RCX: 00007f1f9f64f749
[  256.374218][T12210] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007
[  256.374231][T12210] RBP: 00007f1f9e0b7090 R08: 0000000000000000 R09: 0000000000000000
[  256.374244][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.374257][T12210] R13: 00007f1f9f8a6038 R14: 00007f1f9f8a5fa0 R15: 00007ffc5c3c9cd8
[  256.374294][T12210]  </TASK>
[  256.598513][   T10] hid_parser_main: 22 callbacks suppressed
[  256.598537][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.612076][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.619648][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.627099][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.634784][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.642387][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.650044][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.657617][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.665086][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.672575][   T10] hid-generic 0000:0180:2000.0005: unknown main item tag 0x0
[  256.681934][   T10] hid-generic 0000:0180:2000.0005: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  256.775987][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2718'.
[  256.885484][T12232] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12232 comm=syz.7.2720
[  256.969227][   T29] audit: type=1400 audit(1767298170.166:20897): avc:  denied  { mounton } for  pid=12234 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  257.195656][T12234] lo speed is unknown, defaulting to 1000
[  257.311325][T11411] bridge_slave_1: left allmulticast mode
[  257.317077][T11411] bridge_slave_1: left promiscuous mode
[  257.323026][T11411] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.351948][T11411] bridge_slave_0: left allmulticast mode
[  257.357790][T11411] bridge_slave_0: left promiscuous mode
[  257.363532][T11411] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.537662][T12251] loop7: detected capacity change from 0 to 1024
[  257.546281][T11411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.560403][T12251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.573583][T11411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.583219][T11411] bond0 (unregistering): Released all slaves
[  257.590213][   T29] audit: type=1400 audit(1767298170.796:20898): avc:  denied  { watch } for  pid=12250 comm="syz.7.2724" path="/347/file1" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  257.615853][T12251] FAULT_INJECTION: forcing a failure.
[  257.615853][T12251] name failslab, interval 1, probability 0, space 0, times 0
[  257.629030][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.7.2724 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  257.629061][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  257.629079][T12251] Call Trace:
[  257.629166][T12251]  <TASK>
[  257.629178][T12251]  __dump_stack+0x1d/0x30
[  257.629212][T12251]  dump_stack_lvl+0x95/0xd0
[  257.629239][T12251]  dump_stack+0x15/0x1b
[  257.629266][T12251]  should_fail_ex+0x265/0x280
[  257.629340][T12251]  should_failslab+0x8c/0xb0
[  257.629363][T12251]  kmem_cache_alloc_noprof+0x69/0x4b0
[  257.629390][T12251]  ? __es_insert_extent+0x508/0xee0
[  257.629491][T12251]  __es_insert_extent+0x508/0xee0
[  257.629532][T12251]  ? __account_obj_stock+0x211/0x350
[  257.629568][T12251]  ext4_es_cache_extent+0x276/0x370
[  257.629604][T12251]  ext4_find_extent+0x336/0x7a0
[  257.629710][T12251]  ext4_ext_map_blocks+0x11f/0x38a0
[  257.629750][T12251]  ? __rcu_read_unlock+0x4f/0x70
[  257.629778][T12251]  ? avc_has_perm+0xf7/0x180
[  257.629816][T12251]  ext4_map_query_blocks+0xa2/0x4c0
[  257.629869][T12251]  ext4_map_blocks+0x368/0xd20
[  257.629956][T12251]  ? path_openat+0x1e82/0x23b0
[  257.630023][T12251]  ? _parse_integer+0x27/0x40
[  257.630044][T12251]  ext4_readdir+0x5ed/0x1f10
[  257.630142][T12251]  ? proc_fail_nth_write+0x13b/0x160
[  257.630222][T12251]  iterate_dir+0x114/0x330
[  257.630266][T12251]  __se_sys_getdents64+0x88/0x1b0
[  257.630310][T12251]  ? __pfx_filldir64+0x10/0x10
[  257.630406][T12251]  __x64_sys_getdents64+0x43/0x50
[  257.630448][T12251]  x64_sys_call+0x2f27/0x3000
[  257.630509][T12251]  do_syscall_64+0xca/0x2b0
[  257.630551][T12251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.630574][T12251] RIP: 0033:0x7ff8aceff749
[  257.630591][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.630620][T12251] RSP: 002b:00007ff8ab95f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  257.630645][T12251] RAX: ffffffffffffffda RBX: 00007ff8ad155fa0 RCX: 00007ff8aceff749
[  257.630661][T12251] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000004
[  257.630677][T12251] RBP: 00007ff8ab95f090 R08: 0000000000000000 R09: 0000000000000000
[  257.630689][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.630701][T12251] R13: 00007ff8ad156038 R14: 00007ff8ad155fa0 R15: 00007fff6c92d218
[  257.630786][T12251]  </TASK>
[  257.876429][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'.
[  257.909397][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'.
[  257.937473][T11411] tipc: Left network mode
[  257.975777][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.046575][T12267] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12267 comm=syz.1.2730
[  258.083320][T11402] Bluetooth: hci0: Frame reassembly failed (-84)
[  258.146962][T12234] chnl_net:caif_netlink_parms(): no params data found
[  258.181700][T11411] hsr_slave_0: left promiscuous mode
[  258.188334][T11411] hsr_slave_1: left promiscuous mode
[  258.195466][T11411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.205382][T11411] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.281799][T11411] team0 (unregistering): Port device team_slave_1 removed
[  258.294795][T11411] team0 (unregistering): Port device team_slave_0 removed
[  258.311428][  T899] smc: removing ib device syz1
[  258.415933][T12234] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.423284][T12234] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.455517][T12234] bridge_slave_0: entered allmulticast mode
[  258.472690][T12234] bridge_slave_0: entered promiscuous mode
[  258.489884][T12234] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.497145][T12234] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.527345][T12234] bridge_slave_1: entered allmulticast mode
[  258.543677][T12234] bridge_slave_1: entered promiscuous mode
[  258.594081][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.614712][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.682699][T12234] team0: Port device team_slave_0 added
[  258.696256][T12234] team0: Port device team_slave_1 added
[  258.751815][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.759045][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.785742][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.804283][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.811320][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.837920][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.906965][T12234] hsr_slave_0: entered promiscuous mode
[  258.920699][T12234] hsr_slave_1: entered promiscuous mode
[  258.933689][T12234] debugfs: 'hsr0' already exists in 'hsr'
[  258.939595][T12234] Cannot create hsr debugfs directory
[  259.174126][T12302] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12302 comm=syz.1.2742
[  259.328644][T12234] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  259.347102][T12234] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  259.362710][T12234] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  259.371224][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'.
[  259.375766][T12234] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  259.476832][T12234] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.631016][T12234] 8021q: adding VLAN 0 to HW filter on device team0
[  259.663599][T11411] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.671116][T11411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.691856][T11411] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.699032][T11411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.889774][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.976063][T12234] veth0_vlan: entered promiscuous mode
[  259.986731][T12234] veth1_vlan: entered promiscuous mode
[  260.001365][ T3495] hid-generic 0000:0180:2000.0006: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  260.015472][T12234] veth0_macvtap: entered promiscuous mode
[  260.023270][T12234] veth1_macvtap: entered promiscuous mode
[  260.036060][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.050935][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.063820][  T899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.077314][  T899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.093450][  T899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.104462][  T899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.119606][ T3646] Bluetooth: hci0: command 0x1003 tx timeout
[  260.125801][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  260.164274][T12347] FAULT_INJECTION: forcing a failure.
[  260.164274][T12347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.177443][T12347] CPU: 0 UID: 0 PID: 12347 Comm: syz.2.2719 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  260.177488][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  260.177507][T12347] Call Trace:
[  260.177517][T12347]  <TASK>
[  260.177528][T12347]  __dump_stack+0x1d/0x30
[  260.177596][T12347]  dump_stack_lvl+0x95/0xd0
[  260.177624][T12347]  dump_stack+0x15/0x1b
[  260.177648][T12347]  should_fail_ex+0x265/0x280
[  260.177677][T12347]  should_fail+0xb/0x20
[  260.177698][T12347]  should_fail_usercopy+0x1a/0x20
[  260.177838][T12347]  _copy_from_user+0x1c/0xb0
[  260.177873][T12347]  vt_resizex+0x4a/0x350
[  260.177960][T12347]  vt_ioctl+0x107a/0x18a0
[  260.177999][T12347]  ? tty_jobctrl_ioctl+0x29e/0x810
[  260.178035][T12347]  tty_ioctl+0x7d8/0xb80
[  260.178055][T12347]  ? __pfx_tty_ioctl+0x10/0x10
[  260.178139][T12347]  __se_sys_ioctl+0xce/0x140
[  260.178236][T12347]  __x64_sys_ioctl+0x43/0x50
[  260.178281][T12347]  x64_sys_call+0x14b0/0x3000
[  260.178337][T12347]  do_syscall_64+0xca/0x2b0
[  260.178459][T12347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.178489][T12347] RIP: 0033:0x7f2d99caf749
[  260.178511][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.178535][T12347] RSP: 002b:00007f2d98717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.178575][T12347] RAX: ffffffffffffffda RBX: 00007f2d99f05fa0 RCX: 00007f2d99caf749
[  260.178608][T12347] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 000000000000000e
[  260.178623][T12347] RBP: 00007f2d98717090 R08: 0000000000000000 R09: 0000000000000000
[  260.178726][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.178741][T12347] R13: 00007f2d99f06038 R14: 00007f2d99f05fa0 R15: 00007ffc452c0258
[  260.178768][T12347]  </TASK>
[  260.362874][ T3645] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  260.398829][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2756'.
[  260.451182][ T2967] hid-generic 0000:0180:2000.0007: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  260.784977][T12374] 9p: Bad value for 'rfdno'
[  260.964669][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  260.964689][   T29] audit: type=1400 audit(1767298174.166:20916): avc:  denied  { getopt } for  pid=12382 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  261.038128][   T29] audit: type=1400 audit(1767298174.206:20917): avc:  denied  { getopt } for  pid=12382 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  261.059294][   T29] audit: type=1400 audit(1767298174.206:20918): avc:  denied  { setopt } for  pid=12382 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  261.080331][   T29] audit: type=1400 audit(1767298174.206:20919): avc:  denied  { ioctl } for  pid=12382 comm="syz.2.2767" path="socket:[59157]" dev="sockfs" ino=59157 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  261.102415][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'.
[  261.215324][T12400] loop7: detected capacity change from 0 to 512
[  261.236037][T12400] EXT4-fs: Ignoring removed mblk_io_submit option
[  261.251260][T12400] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  261.270279][T12408] loop3: detected capacity change from 0 to 4096
[  261.279098][T12400] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2772: bg 0: block 280: padding at end of block bitmap is not set
[  261.294241][T12408] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  261.308016][T12400] EXT4-fs (loop7): Remounting filesystem read-only
[  261.329677][T12400] EXT4-fs (loop7): 1 truncate cleaned up
[  261.346765][T12400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.417642][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.436860][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.445585][  T141] Bluetooth: hci0: Frame reassembly failed (-84)
[  261.460352][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.497918][T12421] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12421 comm=syz.2.2780
[  261.532496][   T29] audit: type=1326 audit(1767298174.726:20920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12414 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  261.556381][   T29] audit: type=1326 audit(1767298174.726:20921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12414 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  261.580193][   T29] audit: type=1326 audit(1767298174.726:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12414 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  261.604168][   T29] audit: type=1326 audit(1767298174.726:20923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12414 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  261.628062][   T29] audit: type=1326 audit(1767298174.726:20924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12414 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  261.652568][   T29] audit: type=1326 audit(1767298174.726:20925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12414 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ec8a3f749 code=0x7ffc0000
[  261.714178][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'.
[  261.917079][T12431] tipc: Enabled bearer <udp:syz2>, priority 10
[  261.963258][T12442] loop2: detected capacity change from 0 to 1024
[  261.974617][T12442] EXT4-fs: quotafile must be on filesystem root
[  262.032819][T12442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2787'.
[  262.124710][T12458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  262.188335][T12468] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12468 comm=syz.5.2794
[  262.443333][T12480] sd 0:0:1:0: device reset
[  262.454952][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2798'.
[  262.638901][T12496] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12496 comm=syz.5.2805
[  262.863881][T12515] loop5: detected capacity change from 0 to 512
[  262.874383][T12515] EXT4-fs: Ignoring removed mblk_io_submit option
[  262.950816][T12515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  262.981759][T12515] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2812: bg 0: block 280: padding at end of block bitmap is not set
[  263.019378][T12515] EXT4-fs (loop5): Remounting filesystem read-only
[  263.034002][T12515] EXT4-fs (loop5): 1 truncate cleaned up
[  263.048415][T12515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.110063][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.227363][T12531] loop5: detected capacity change from 0 to 512
[  263.234315][T12531] EXT4-fs: Ignoring removed mblk_io_submit option
[  263.245481][T12531] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  263.257235][T12531] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2817: bg 0: block 280: padding at end of block bitmap is not set
[  263.272100][T12531] EXT4-fs (loop5): Remounting filesystem read-only
[  263.279127][T12531] EXT4-fs (loop5): 1 truncate cleaned up
[  263.286185][T12531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.313084][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.425247][ T3397] hid_parser_main: 86 callbacks suppressed
[  263.425266][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.438946][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.446483][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.453964][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.461430][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.468902][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.476381][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.483986][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.490141][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  263.492016][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.498158][ T3645] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  263.505317][ T3397] hid-generic 0000:0180:2000.0008: unknown main item tag 0x0
[  263.520472][ T3397] hid-generic 0000:0180:2000.0008: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  263.904996][T12562] team0: Caught tx_queue_len zero misconfig
[  264.019511][T12577] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12577 comm=syz.7.2837
[  264.180528][T12595] bridge_slave_0: left allmulticast mode
[  264.186369][T12595] bridge_slave_0: left promiscuous mode
[  264.192207][T12595] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.203093][T12595] bridge_slave_1: left allmulticast mode
[  264.208832][T12595] bridge_slave_1: left promiscuous mode
[  264.214680][T12595] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.224680][T12595] $H�: (slave bond_slave_0): Releasing backup interface
[  264.232924][T12595] bond_slave_0: left promiscuous mode
[  264.243138][T12595] $H�: (slave bond_slave_1): Releasing backup interface
[  264.251346][T12595] bond_slave_1: left promiscuous mode
[  264.261472][T12595] team0: Port device team_slave_0 removed
[  264.271254][T12595] team0: Port device team_slave_1 removed
[  264.293072][T12595] batadv0: left allmulticast mode
[  264.298355][T12595] batadv0: left promiscuous mode
[  264.303648][T12595] bridge0: port 3(batadv0) entered disabled state
[  264.492797][T12606] SELinux: security_context_str_to_sid (�7a�m�#aD{Iʩ����p�QMb]NAk�Z7�S�d�H��`�p���
Ҩ�t���[�6?h����;��U����.�:Z��d�@q��A����ю)�z�}�9!�z0
[  264.492797][T12606] 6OV,9ϊ^�6잿�:��^�c��`�/�:Xh޸���Js�;��p�q���\��6�����}G�?��[Y�zF3�3�������������!���^��SS1��L#��l���
vk���2^��h���SuG��l�) failed with errno=-22
[  264.978921][T12616] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12616 comm=syz.3.2852
[  265.010277][T12618] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12618 comm=syz.2.2853
[  265.061363][T12620] lo speed is unknown, defaulting to 1000
[  265.129872][   T10] hid-generic 0000:0180:2000.0009: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  265.281273][T12641] loop5: detected capacity change from 0 to 1024
[  265.299957][T12641] EXT4-fs: Ignoring removed orlov option
[  265.312303][T12641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.518892][T12658] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12658 comm=syz.7.2867
[  265.606928][   T10] hid-generic 0000:0180:2000.000A: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  265.683837][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2873'.
[  265.813817][T12683] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12683 comm=syz.7.2879
[  266.041967][T12698] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12698 comm=syz.3.2885
[  266.129182][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.140710][T12707] FAULT_INJECTION: forcing a failure.
[  266.140710][T12707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.153870][T12707] CPU: 0 UID: 0 PID: 12707 Comm: syz.7.2889 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  266.153916][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  266.153932][T12707] Call Trace:
[  266.154010][T12707]  <TASK>
[  266.154023][T12707]  __dump_stack+0x1d/0x30
[  266.154128][T12707]  dump_stack_lvl+0x95/0xd0
[  266.154202][T12707]  dump_stack+0x15/0x1b
[  266.154247][T12707]  should_fail_ex+0x265/0x280
[  266.154278][T12707]  should_fail+0xb/0x20
[  266.154303][T12707]  should_fail_usercopy+0x1a/0x20
[  266.154333][T12707]  _copy_from_user+0x1c/0xb0
[  266.154445][T12707]  ___sys_sendmsg+0xc1/0x1d0
[  266.154505][T12707]  __x64_sys_sendmsg+0xd4/0x160
[  266.154549][T12707]  x64_sys_call+0x17ba/0x3000
[  266.154599][T12707]  do_syscall_64+0xca/0x2b0
[  266.154646][T12707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.154824][T12707] RIP: 0033:0x7ff8aceff749
[  266.154846][T12707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.154867][T12707] RSP: 002b:00007ff8ab95f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.154890][T12707] RAX: ffffffffffffffda RBX: 00007ff8ad155fa0 RCX: 00007ff8aceff749
[  266.155032][T12707] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  266.155047][T12707] RBP: 00007ff8ab95f090 R08: 0000000000000000 R09: 0000000000000000
[  266.155063][T12707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.155076][T12707] R13: 00007ff8ad156038 R14: 00007ff8ad155fa0 R15: 00007fff6c92d218
[  266.155100][T12707]  </TASK>
[  266.335098][T12711] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12711 comm=syz.5.2890
[  266.345222][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'.
[  266.357495][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2891'.
[  266.462108][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2892'.
[  266.486163][T12714] hub 1-0:1.0: USB hub found
[  266.491514][T12714] hub 1-0:1.0: 8 ports detected
[  266.502680][   T29] kauditd_printk_skb: 1348 callbacks suppressed
[  266.502700][   T29] audit: type=1400 audit(1767298179.706:22274): avc:  denied  { mounton } for  pid=12713 comm="syz.1.2892" path="/576/file0" dev="tmpfs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  266.745046][   T29] audit: type=1400 audit(1767298179.836:22275): avc:  denied  { write } for  pid=12709 comm="syz.2.2891" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  266.769212][   T29] audit: type=1326 audit(1767298179.846:22276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.792928][   T29] audit: type=1326 audit(1767298179.846:22277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.817013][   T29] audit: type=1326 audit(1767298179.846:22278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.841012][   T29] audit: type=1326 audit(1767298179.846:22279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.864878][   T29] audit: type=1326 audit(1767298179.846:22280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.888636][   T29] audit: type=1326 audit(1767298179.846:22281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.912514][   T29] audit: type=1326 audit(1767298179.846:22282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  266.936124][   T29] audit: type=1326 audit(1767298179.846:22283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  267.163760][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'.
[  267.263102][T12738] loop5: detected capacity change from 0 to 1024
[  267.277959][T12747] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12747 comm=syz.2.2903
[  267.292261][T12738] EXT4-fs: Ignoring removed orlov option
[  267.316095][T12738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.321172][T12750] netlink: 'syz.3.2905': attribute type 12 has an invalid length.
[  267.351964][T12755] loop7: detected capacity change from 0 to 1024
[  267.358980][T12755] EXT4-fs: Ignoring removed orlov option
[  267.371901][T12755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.384568][T12750] ALSA: seq fatal error: cannot create timer (-19)
[  267.395061][T12759] loop2: detected capacity change from 0 to 512
[  267.413024][T12759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.425879][T12759] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.455021][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.572624][T11395] Bluetooth: hci0: Frame reassembly failed (-84)
[  267.784292][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.812791][T12781] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2912'.
[  267.855706][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2915'.
[  267.920911][T12791] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12791 comm=syz.7.2917
[  268.019291][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.113230][T11402] Bluetooth: hci1: Frame reassembly failed (-84)
[  268.156478][   T10] hid-generic 0000:0180:2000.000B: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  268.160615][T12807] loop5: detected capacity change from 0 to 512
[  268.182535][T12807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.195421][T12807] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.240458][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.281711][T12818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12818 comm=syz.5.2927
[  268.404166][T12826] loop7: detected capacity change from 0 to 1024
[  268.411181][T12826] EXT4-fs: Ignoring removed orlov option
[  268.420159][T12826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.473205][T12831] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12831 comm=syz.5.2931
[  268.602839][T12840] loop5: detected capacity change from 0 to 1024
[  268.890454][T12859] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12859 comm=syz.5.2942
[  269.244333][T12848] syz.3.2938 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  269.258794][T12848] CPU: 0 UID: 0 PID: 12848 Comm: syz.3.2938 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  269.258896][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  269.258916][T12848] Call Trace:
[  269.258927][T12848]  <TASK>
[  269.258937][T12848]  __dump_stack+0x1d/0x30
[  269.258970][T12848]  dump_stack_lvl+0x95/0xd0
[  269.258995][T12848]  dump_stack+0x15/0x1b
[  269.259024][T12848]  dump_header+0x81/0x240
[  269.259055][T12848]  oom_kill_process+0x295/0x350
[  269.259087][T12848]  out_of_memory+0x97b/0xb80
[  269.259194][T12848]  try_charge_memcg+0x610/0xa10
[  269.259258][T12848]  obj_cgroup_charge_pages+0xa6/0x150
[  269.259297][T12848]  __memcg_kmem_charge_page+0x9f/0x170
[  269.259349][T12848]  __alloc_frozen_pages_noprof+0x18f/0x360
[  269.259412][T12848]  alloc_pages_mpol+0xb3/0x260
[  269.259473][T12848]  alloc_pages_noprof+0x90/0x130
[  269.259528][T12848]  __vmalloc_node_range_noprof+0xa7b/0x1310
[  269.259584][T12848]  __kvmalloc_node_noprof+0x492/0x6b0
[  269.259659][T12848]  ? ip_set_alloc+0x24/0x30
[  269.259702][T12848]  ? ip_set_alloc+0x24/0x30
[  269.259748][T12848]  ip_set_alloc+0x24/0x30
[  269.259794][T12848]  hash_netiface_create+0x282/0x740
[  269.259839][T12848]  ? __pfx_hash_netiface_create+0x10/0x10
[  269.259887][T12848]  ip_set_create+0x3cc/0x970
[  269.259988][T12848]  ? __nla_parse+0x40/0x60
[  269.260023][T12848]  nfnetlink_rcv_msg+0x4c6/0x590
[  269.260082][T12848]  netlink_rcv_skb+0x123/0x220
[  269.260231][T12848]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  269.260275][T12848]  nfnetlink_rcv+0x167/0x16c0
[  269.260311][T12848]  ? kmem_cache_free+0xe3/0x3a0
[  269.260374][T12848]  ? __kfree_skb+0x109/0x150
[  269.260402][T12848]  ? nlmon_xmit+0x4f/0x60
[  269.260426][T12848]  ? consume_skb+0x49/0x150
[  269.260457][T12848]  ? nlmon_xmit+0x4f/0x60
[  269.260484][T12848]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  269.260652][T12848]  ? __dev_queue_xmit+0x13a6/0x1ee0
[  269.260693][T12848]  ? __dev_queue_xmit+0x148/0x1ee0
[  269.260787][T12848]  ? ref_tracker_free+0x37d/0x3e0
[  269.260831][T12848]  ? __netlink_deliver_tap+0x4dc/0x500
[  269.260901][T12848]  netlink_unicast+0x5c0/0x690
[  269.260946][T12848]  netlink_sendmsg+0x58b/0x6b0
[  269.260996][T12848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.261067][T12848]  __sock_sendmsg+0x145/0x180
[  269.261170][T12848]  ____sys_sendmsg+0x31e/0x4a0
[  269.261214][T12848]  ___sys_sendmsg+0x17b/0x1d0
[  269.261323][T12848]  __x64_sys_sendmsg+0xd4/0x160
[  269.261404][T12848]  x64_sys_call+0x17ba/0x3000
[  269.261490][T12848]  do_syscall_64+0xca/0x2b0
[  269.261535][T12848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.261562][T12848] RIP: 0033:0x7f366616f749
[  269.261581][T12848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.261600][T12848] RSP: 002b:00007f3664bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.261621][T12848] RAX: ffffffffffffffda RBX: 00007f36663c5fa0 RCX: 00007f366616f749
[  269.261663][T12848] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  269.261681][T12848] RBP: 00007f36661f3f91 R08: 0000000000000000 R09: 0000000000000000
[  269.261698][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.261715][T12848] R13: 00007f36663c6038 R14: 00007f36663c5fa0 R15: 00007ffda4b5dc68
[  269.261737][T12848]  </TASK>
[  269.593232][T12848] memory: usage 307200kB, limit 307200kB, failcnt 956
[  269.600514][T12848] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0
[  269.608877][T12848] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  269.616294][T12848] Memory cgroup stats for /syz3:
[  269.616954][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.617061][T12848] cache 0
[  269.634458][T12848] rss 0
[  269.637258][T12848] shmem 0
[  269.640364][T12848] mapped_file 0
[  269.643861][T12848] dirty 0
[  269.647060][T12848] writeback 4096
[  269.650689][T12848] workingset_refault_anon 225
[  269.655561][T12848] workingset_refault_file 1254
[  269.660490][T12848] swap 446464
[  269.663806][T12848] swapcached 4096
[  269.667505][T12848] pgpgin 309775
[  269.671045][T12848] pgpgout 309773
[  269.674646][T12848] pgfault 338326
[  269.678312][T12848] pgmajfault 169
[  269.681954][T12848] inactive_anon 0
[  269.685625][T12848] active_anon 4096
[  269.689415][T12848] inactive_file 0
[  269.689747][ T3645] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  269.693304][T12848] active_file 4096
[  269.699820][T10869] Bluetooth: hci0: command 0x1003 tx timeout
[  269.703793][T12848] unevictable 0
[  269.713484][T12848] hierarchical_memory_limit 314572800
[  269.718980][T12848] hierarchical_memsw_limit 9223372036854771712
[  269.725249][T12848] total_cache 0
[  269.728817][T12848] total_rss 0
[  269.732254][T12848] total_shmem 0
[  269.735753][T12848] total_mapped_file 0
[  269.739853][T12848] total_dirty 0
[  269.743352][T12848] total_writeback 4096
[  269.747551][T12848] total_workingset_refault_anon 225
[  269.752825][T12848] total_workingset_refault_file 1254
[  269.758267][T12848] total_swap 446464
[  269.762134][T12848] total_swapcached 4096
[  269.766473][T12848] total_pgpgin 309775
[  269.770530][T12848] total_pgpgout 309773
[  269.774644][T12848] total_pgfault 338326
[  269.778748][T12848] total_pgmajfault 169
[  269.782903][T12848] total_inactive_anon 0
[  269.787102][T12848] total_active_anon 4096
[  269.791521][T12848] total_inactive_file 0
[  269.793067][T12865] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2944'.
[  269.795711][T12848] total_active_file 4096
[  269.795725][T12848] total_unevictable 0
[  269.795737][T12848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2938,pid=12847,uid=0
[  269.828544][T12848] Memory cgroup out of memory: Killed process 12847 (syz.3.2938) total-vm:94100kB, anon-rss:1140kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  269.927202][T12874] loop3: detected capacity change from 0 to 2364
[  269.936000][T12874] iso9660: Bad value for 'block'
[  270.001240][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2947'.
[  270.012262][T12874] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2947' sets config #0
[  270.023274][T12874] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2947' sets config #1
[  270.056886][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.065537][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.075936][T12870] loop7: detected capacity change from 0 to 164
[  270.083597][T12870] ISOFS: unable to read i-node block
[  270.088938][T12870] isofs_fill_super: get root inode failed
[  270.129655][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  270.147913][T12879] loop3: detected capacity change from 0 to 512
[  270.155065][T12879] EXT4-fs (loop3): #clusters per group too big: 5054464
[  270.182778][T12881] loop3: detected capacity change from 0 to 512
[  270.189933][T12881] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.196865][T12881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  270.208881][T12881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2950: bg 0: block 280: padding at end of block bitmap is not set
[  270.224347][T12881] EXT4-fs (loop3): Remounting filesystem read-only
[  270.231199][T12881] EXT4-fs (loop3): 1 truncate cleaned up
[  270.237288][T12881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.259411][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.319347][T12888] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12888 comm=syz.3.2953
[  270.410814][T12895] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  270.421262][T12895] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  270.430137][T12895] Symlink component flag not implemented
[  270.435798][T12895] Symlink component flag not implemented
[  270.441649][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'.
[  270.442411][T12895] Symlink component flag not implemented (7)
[  270.456632][T12895] Symlink component flag not implemented (116)
[  270.459954][T12896] bridge1: entered promiscuous mode
[  270.468081][T12896] bridge1: entered allmulticast mode
[  270.679284][   T10] hid_parser_main: 118 callbacks suppressed
[  270.679327][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.692974][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.700548][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.708061][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.715791][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.723263][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.730816][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.738287][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.746039][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.753536][   T10] hid-generic 0000:0180:2000.000C: unknown main item tag 0x0
[  270.763415][   T10] hid-generic 0000:0180:2000.000C: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  270.863509][T12921] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12921 comm=syz.1.2965
[  270.910862][T11392] Bluetooth: hci0: Frame reassembly failed (-84)
[  270.999781][ T3646] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  271.049602][T12944] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12944 comm=syz.1.2976
[  271.073346][T12946] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12946 comm=syz.2.2977
[  271.122047][T12950] iso9660: Bad value for 'block'
[  271.182536][T12950] __nla_validate_parse: 1 callbacks suppressed
[  271.182558][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2979'.
[  271.200489][T12950] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2979' sets config #0
[  271.212808][T12950] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2979' sets config #1
[  271.277347][T12962] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.284515][T12962] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  271.297749][T12962] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2984: bg 0: block 280: padding at end of block bitmap is not set
[  271.312388][T12962] EXT4-fs (loop3): Remounting filesystem read-only
[  271.319185][T12962] EXT4-fs (loop3): 1 truncate cleaned up
[  271.325798][T12962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.349251][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.358200][T12967] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=12967 comm=syz.2.2986
[  271.432909][   T10] hid-generic 0000:0180:2000.000D: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  271.511278][T12987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  271.520665][T12987] System zones: 0-2, 18-18, 34-34
[  271.527601][T12987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2995: bg 0: block 248: padding at end of block bitmap is not set
[  271.543548][T12987] __quota_error: 139 callbacks suppressed
[  271.543570][T12987] Quota error (device loop3): write_blk: dquota write failed
[  271.557344][T12987] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  271.567789][T12987] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2995: Failed to acquire dquot type 1
[  271.580693][T12987] EXT4-fs (loop3): 1 truncate cleaned up
[  271.587790][T12987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.601900][T12987] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.648517][T12994] FAULT_INJECTION: forcing a failure.
[  271.648517][T12994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.661864][T12994] CPU: 0 UID: 0 PID: 12994 Comm: syz.5.2997 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  271.661896][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  271.661909][T12994] Call Trace:
[  271.661917][T12994]  <TASK>
[  271.661929][T12994]  __dump_stack+0x1d/0x30
[  271.661964][T12994]  dump_stack_lvl+0x95/0xd0
[  271.661995][T12994]  dump_stack+0x15/0x1b
[  271.662024][T12994]  should_fail_ex+0x265/0x280
[  271.662099][T12994]  should_fail+0xb/0x20
[  271.662126][T12994]  should_fail_usercopy+0x1a/0x20
[  271.662167][T12994]  _copy_from_user+0x1c/0xb0
[  271.662205][T12994]  ___sys_sendmsg+0xc1/0x1d0
[  271.662261][T12994]  __x64_sys_sendmsg+0xd4/0x160
[  271.662317][T12994]  x64_sys_call+0x17ba/0x3000
[  271.662407][T12994]  do_syscall_64+0xca/0x2b0
[  271.662487][T12994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.662555][T12994] RIP: 0033:0x7fa2e6bff749
[  271.662582][T12994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.662607][T12994] RSP: 002b:00007fa2e5667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.662633][T12994] RAX: ffffffffffffffda RBX: 00007fa2e6e55fa0 RCX: 00007fa2e6bff749
[  271.662653][T12994] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000004
[  271.662667][T12994] RBP: 00007fa2e5667090 R08: 0000000000000000 R09: 0000000000000000
[  271.662685][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.662720][T12994] R13: 00007fa2e6e56038 R14: 00007fa2e6e55fa0 R15: 00007ffceb706648
[  271.662748][T12994]  </TASK>
[  271.799746][   T29] audit: type=1400 audit(1767298184.846:22423): avc:  denied  { name_bind } for  pid=12993 comm="syz.5.2997" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  271.856362][   T29] audit: type=1400 audit(1767298184.846:22424): avc:  denied  { node_bind } for  pid=12993 comm="syz.5.2997" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  271.881204][T12987] wg2: entered promiscuous mode
[  271.886264][T12987] wg2: entered allmulticast mode
[  271.905564][T12987] lo speed is unknown, defaulting to 1000
[  271.926097][T12997] EXT4-fs: Ignoring removed mblk_io_submit option
[  271.933767][T12997] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  271.980478][T12997] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2998: bg 0: block 280: padding at end of block bitmap is not set
[  272.012432][T13003] lo speed is unknown, defaulting to 1000
[  272.070193][   T29] audit: type=1400 audit(1767298185.266:22425): avc:  denied  { setopt } for  pid=12985 comm="syz.3.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  272.100210][T12997] EXT4-fs (loop5): Remounting filesystem read-only
[  272.107376][T12997] EXT4-fs (loop5): 1 truncate cleaned up
[  272.114936][T12997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.197105][ T3316] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /588/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0
[  272.221624][   T29] audit: type=1326 audit(1767298185.426:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.2.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  272.253085][T13008] $H�: renamed from bond0 (while UP)
[  272.273357][   T29] audit: type=1326 audit(1767298185.446:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.2.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  272.297628][   T29] audit: type=1326 audit(1767298185.446:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.2.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  272.325674][   T29] audit: type=1326 audit(1767298185.446:22429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.2.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  272.349588][   T29] audit: type=1326 audit(1767298185.446:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.2.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99caf749 code=0x7ffc0000
[  272.374998][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.377551][T13008] $H�: entered promiscuous mode
[  272.389321][T13008] bond_slave_0: entered promiscuous mode
[  272.395386][T13008] bond_slave_1: entered promiscuous mode
[  272.409104][ T5696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.419662][T11395] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:56: Failed to release dquot type 1
[  272.442232][T13010] selinux_netlink_send: 2 callbacks suppressed
[  272.442251][T13010] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13010 comm=syz.5.3004
[  272.508477][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'.
[  272.694944][T13039] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13039 comm=syz.1.3018
[  272.749781][T13044] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3022' sets config #0
[  272.766771][T13044] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3022' sets config #1
[  272.919620][ T3646] Bluetooth: hci0: command 0x1003 tx timeout
[  272.925988][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  273.036560][T13065] set_capacity_and_notify: 5 callbacks suppressed
[  273.036582][T13065] loop2: detected capacity change from 0 to 8192
[  273.058451][T13050] lo speed is unknown, defaulting to 1000
[  273.144671][T13073] loop5: detected capacity change from 0 to 1024
[  273.160981][T13073] EXT4-fs: Ignoring removed oldalloc option
[  273.167220][T13073] EXT4-fs: Ignoring removed bh option
[  273.183100][T13075] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13075 comm=syz.2.3032
[  273.223843][T13073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.403192][T13050] chnl_net:caif_netlink_parms(): no params data found
[  273.404312][ T3495] hid-generic 0000:0180:2000.000E: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  273.490494][T13050] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.497895][T13050] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.506841][T13050] bridge_slave_0: entered allmulticast mode
[  273.513966][T13050] bridge_slave_0: entered promiscuous mode
[  273.521625][T13050] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.528788][T13050] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.536870][T13050] bridge_slave_1: entered allmulticast mode
[  273.543535][T13050] bridge_slave_1: entered promiscuous mode
[  273.591564][T13050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.630437][T13050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.659869][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'.
[  273.676211][T13050] team0: Port device team_slave_0 added
[  273.682300][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3045'.
[  273.685811][T13050] team0: Port device team_slave_1 added
[  273.712338][ T3424] hid-generic 0000:0180:2000.000F: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  273.722555][T13111] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3045' sets config #0
[  273.738287][T13111] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3045' sets config #1
[  273.748143][T13050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.755285][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.782347][T13050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.801444][T13050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.808658][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.835181][T13050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.852705][T13126] netlink: 'syz.7.3052': attribute type 12 has an invalid length.
[  273.882266][T13130] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13130 comm=syz.2.3054
[  273.934482][T13050] hsr_slave_0: entered promiscuous mode
[  273.963290][T13050] hsr_slave_1: entered promiscuous mode
[  273.977626][T13050] debugfs: 'hsr0' already exists in 'hsr'
[  273.983549][T13050] Cannot create hsr debugfs directory
[  274.024834][ T3424] hid-generic 0000:0180:2000.0010: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  274.099420][ T4603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.116918][T13154] netlink: 'syz.1.3064': attribute type 12 has an invalid length.
[  274.151642][T13158] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13158 comm=syz.7.3066
[  274.198909][T13050] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  274.216470][T13050] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  274.226450][T13050] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  274.250363][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3070'.
[  274.252897][T13050] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  274.330743][T13179] loop2: detected capacity change from 0 to 512
[  274.330875][T13177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13177 comm=syz.7.3071
[  274.350174][T13179] EXT4-fs: Mount option(s) incompatible with ext2
[  274.357796][T13050] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.379135][T13050] 8021q: adding VLAN 0 to HW filter on device team0
[  274.391939][T13181] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13181 comm=syz.5.3073
[  274.407972][T11394] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.410480][T13182] netlink: 'syz.7.3071': attribute type 64 has an invalid length.
[  274.416166][T11394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.454318][T11394] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.461487][T11394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.540513][ T3617] hid-generic 0000:0180:2000.0011: hidraw0: <UNKNOWN> HID v1.c0 Device [sy

] on syz0
[  274.558372][T13050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.650854][T13200] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=13200 comm=syz.5.3077
[  274.727583][T13204] loop5: detected capacity change from 0 to 512
[  274.748389][T13204] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  274.763815][T13204] EXT4-fs (loop5): 1 truncate cleaned up
[  274.778031][T13204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.838219][T13204] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.3078: Logical block already allocated
[  274.870322][T13204] EXT4-fs (loop5): Remounting filesystem read-only
[  274.927237][T13050] veth0_vlan: entered promiscuous mode
[  274.964073][T13050] veth1_vlan: entered promiscuous mode
[  275.017238][T13050] veth0_macvtap: entered promiscuous mode
[  275.103701][T13050] veth1_macvtap: entered promiscuous mode
[  275.142501][T13050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.175673][T13050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.191893][T11395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.233760][T13183] Set syz1 is full, maxelem 65536 reached
[  275.244839][T11395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.261240][T11395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.276900][T13174] ==================================================================
[  275.285127][T13174] BUG: KCSAN: data-race in __mod_timer / __mod_timer
[  275.291885][T13174] 
[  275.294254][T13174] write to 0xffff88811a6e0a80 of 8 bytes by task 3495 on cpu 0:
[  275.301926][T13174]  __mod_timer+0x784/0x840
[  275.306397][T13174]  mod_timer+0x1f/0x30
[  275.310541][T13174]  wg_timers_any_authenticated_packet_traversal+0xd0/0x100
[  275.317797][T13174]  wg_packet_tx_worker+0xeb/0x330
[  275.322921][T13174]  process_scheduled_works+0x4ce/0x9d0
[  275.328426][T13174]  worker_thread+0x582/0x770
[  275.333270][T13174]  kthread+0x489/0x510
[  275.337838][T13174]  ret_from_fork+0x149/0x290
[  275.342478][T13174]  ret_from_fork_asm+0x1a/0x30
[  275.347322][T13174] 
[  275.349768][T13174] read to 0xffff88811a6e0a80 of 8 bytes by task 13174 on cpu 1:
[  275.357519][T13174]  __mod_timer+0x69/0x840
[  275.361912][T13174]  mod_timer+0x1f/0x30
[  275.366035][T13174]  wg_timers_any_authenticated_packet_traversal+0xd0/0x100
[  275.373311][T13174]  wg_packet_rx_poll+0x7f5/0x1160
[  275.378554][T13174]  __napi_poll+0x5f/0x300
[  275.383027][T13174]  napi_threaded_poll_loop+0x1ac/0x630
[  275.388542][T13174]  napi_threaded_poll+0x164/0x200
[  275.393705][T13174]  kthread+0x489/0x510
[  275.397911][T13174]  ret_from_fork+0x149/0x290
[  275.402553][T13174]  ret_from_fork_asm+0x1a/0x30
[  275.407366][T13174] 
[  275.409982][T13174] value changed: 0x00000000fffffb88 -> 0x00000000fffffb8b
[  275.417202][T13174] 
[  275.419556][T13174] Reported by Kernel Concurrency Sanitizer on:
[  275.425834][T13174] CPU: 1 UID: 0 PID: 13174 Comm: napi/wg2-0 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  275.435682][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  275.445783][T13174] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  275.509739][T11395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.946982][T13213] Set syz1 is full, maxelem 65536 reached
[  275.955140][T11374] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.021652][T11374] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.101598][T11374] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.141801][T11374] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.165758][T13213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.501611][T11374] $H� (unregistering): Released all slaves
[  276.621675][T11374] veth1_macvtap: left promiscuous mode
[  276.627210][T11374] veth0_macvtap: left promiscuous mode
[  276.634098][T11374] veth1_vlan: left promiscuous mode
[  276.639368][T11374] veth0_vlan: left promiscuous mode
[  277.248337][T11374] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.292473][T11374] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.343156][T11374] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.412837][T11374] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.677716][T11374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.723229][T11374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.772548][T11374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.833079][T11374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.887222][T11374] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.931339][T11374] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.971499][T11374] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.041361][T11374] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.097051][T11374] bridge_slave_1: left allmulticast mode
[  279.102916][T11374] bridge_slave_1: left promiscuous mode
[  279.108603][T11374] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.116855][T11374] bridge_slave_0: left allmulticast mode
[  279.122608][T11374] bridge_slave_0: left promiscuous mode
[  279.128368][T11374] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.137396][T11374] bridge_slave_1: left allmulticast mode
[  279.143130][T11374] bridge_slave_1: left promiscuous mode
[  279.148925][T11374] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.156899][T11374] bridge_slave_0: left allmulticast mode
[  279.162635][T11374] bridge_slave_0: left promiscuous mode
[  279.168354][T11374] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.177219][T11374] bridge_slave_1: left allmulticast mode
[  279.183034][T11374] bridge_slave_1: left promiscuous mode
[  279.188858][T11374] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.197278][T11374] bridge_slave_0: left allmulticast mode
[  279.203128][T11374] bridge_slave_0: left promiscuous mode
[  279.208965][T11374] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.332687][T11374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.343310][T11374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.353240][T11374] bond0 (unregistering): Released all slaves
[  279.482445][T11374] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.491571][T11374] bond_slave_0: left promiscuous mode
[  279.498326][T11374] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.507359][T11374] bond_slave_1: left promiscuous mode
[  279.513899][T11374] $H� (unregistering): Released all slaves
[  279.581978][T11374] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.590860][T11374] bond_slave_0: left promiscuous mode
[  279.597566][T11374] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.606632][T11374] bond_slave_1: left promiscuous mode
[  279.612936][T11374] $H� (unregistering): Released all slaves
[  279.621383][ T3604] infiniband syb2: ib_query_port failed (-19)
[  279.665705][T11374] tipc: Left network mode
[  279.885843][T11374] hsr_slave_0: left promiscuous mode
[  279.891679][T11374] hsr_slave_1: left promiscuous mode
[  279.897465][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.905204][T11374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.913580][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.921141][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.931125][T11374] hsr_slave_0: left promiscuous mode
[  279.936885][T11374] hsr_slave_1: left promiscuous mode
[  279.944605][T11374] hsr_slave_0: left promiscuous mode
[  279.950636][T11374] hsr_slave_1: left promiscuous mode
[  279.956962][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.964435][T11374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.972220][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.979848][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.989603][T11374] hsr_slave_0: left promiscuous mode
[  279.995444][T11374] hsr_slave_1: left promiscuous mode
[  280.001168][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.008796][T11374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.016407][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.024067][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.041055][T11374] veth1_macvtap: left promiscuous mode
[  280.046801][T11374] veth0_macvtap: left promiscuous mode
[  280.052726][T11374] veth1_vlan: left promiscuous mode
[  280.058186][T11374] veth0_vlan: left promiscuous mode
[  280.064017][T11374] veth1_macvtap: left promiscuous mode
[  280.069678][T11374] veth0_macvtap: left promiscuous mode
[  280.075222][T11374] veth1_vlan: left promiscuous mode
[  280.081005][T11374] veth0_vlan: left promiscuous mode
[  280.086928][T11374] veth1_macvtap: left promiscuous mode
[  280.092688][T11374] veth0_macvtap: left promiscuous mode
[  280.098330][T11374] veth1_vlan: left promiscuous mode
[  280.103656][T11374] veth0_vlan: left promiscuous mode
[  280.255221][T11374] team0 (unregistering): Port device team_slave_1 removed
[  280.265495][T11374] team0 (unregistering): Port device team_slave_0 removed
[  280.336622][T11374] team0 (unregistering): Port device team_slave_1 removed
[  280.347045][T11374] team0 (unregistering): Port device C removed
[  280.413893][T11374] team0 (unregistering): Port device team_slave_1 removed
[  280.425047][T11374] team0 (unregistering): Port device team_slave_0 removed
[  280.496934][T11374] team0 (unregistering): Port device team_slave_1 removed
[  280.508961][T11374] team0 (unregistering): Port device team_slave_0 removed
[  280.518885][T11385] smc: removing ib device syz!
[  281.579767][T11374] IPVS: stop unused estimator thread 0...