last executing test programs: 7m17.197496673s ago: executing program 3 (id=94): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0x8d) r3 = dup3(r1, r2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r7, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) chown(0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x7}, 0xc41, 0xfe, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000000101010000000000000300000506001240000300001000059d090001007070747000000000b64153973e01c5e10c743476cf5e5f9ca6e6fe70fa280aa85ceff7f84aaa8e579621c54b4cbdbd2c2c2ec2cee90a2e4d02582f9f4ba1a2c510fedcb5c4a5f4a02733beec3762d42d789bf2ada684fb0e74dee9d9e9fdf404cd0421eb5b602f176e115d000000016a6e1c8352bf89d4d9868a777947cd5edf9286fe674af7e68d73d9e7bdab58d596b36d01db28dd0def80cfb97e8fa1e245380c"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x10}) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x86ddffff}, 0x6404481c) 7m16.954712289s ago: executing program 3 (id=98): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/ipc\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040)=""/213, &(0x7f0000000140), &(0x7f0000000180), 0x3, r0}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000400aaaaaaaaaabb30f18c780c48e28800000000ffffffffffff"]) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x100c404, &(0x7f0000000b80)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@fat=@flush}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@fat=@dmask}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x201, &(0x7f00000002c0)="$eJzs3bGOEkEYAOAf5GAxFnQmJiZrLLS6qE+AMWdiJDE5Q6GdiVZSaYM23GP4Cr6XD2CuojFjcJdb5JC7bAIb776v4d/9Z5j5Z2GhYUhR+HH7W2RZK9rDGMa8FYNox9JJAABXyTyl+JkKTc8FANiPCz7/BxHxq4FpAQA79PrN25dPR6Oj4zzPIk5PpuPpuHgs8s9fjI4e5X8Mql6n0+n4xln+cb7+3WGRP4ibZf5J0T8/S3cjYtyNh/eL/CL37NUo/7t/L97vuHYAAAAAAAAAAAAAAAAAAAAAAGjK3ciXNu7vc3i4nu+X+eJoZX+gtf17OnGnUx5W2wOl2T6KAgAAAAAAAAAAAAAAAAAAgP/M5y9fP76bTD58qoJeRKRelepsaPPvoFU+8aUabwpmtXrVDdpRr3u/LLPGoK1yiXZbYH/zxb1MEJ29XoI6QcT6mSxWVjXfwzT6W5c3pUWw+V3QieH2F0A3IraP/uC47uTnKaXJ93uLNUxbG1f3iN4e70cAAAAAAAAAAAAAAAAAAHCdrfzq+5ysiQkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAOq//9fBOfPbA1mEXErLmy8HOsgskZrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6HQAA//+L8B2f") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x6, 0x0, 0x4, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x3, 0x3ff, 0x9, 0x0, 0x0, 0x8, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0xa) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x7) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) 7m14.320149806s ago: executing program 3 (id=105): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x40000, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m14.213963888s ago: executing program 3 (id=108): r0 = creat(0x0, 0x0) syz_clone(0x80063000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x4800000, 0x0, 0x7fffffc, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x9, 0xa, 0xe) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000200)) fstat(r0, &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @remote}}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8040) r2 = syz_io_uring_setup(0xefc, &(0x7f0000000080)={0x0, 0xfdfffffe, 0x80, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00080, 0x4000002, 0x11, r2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 7m13.748179639s ago: executing program 3 (id=115): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x200000000000000) 7m12.489568046s ago: executing program 3 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000002060108d4ff57a86e259e400100000005000100070000000900020073797a30000000000c0007800800a4070000e96405000400000000001000030068617368fd00000000000000050005eeefe6b74174c30fc07c359769b3e11b2b3ea838fae060d4d617ce637e86b9bd91febae0b39b6f5b9c99eafc206bdf8ad238346f01c5fb4abaa03d02bf5d2219203970840b34f82baba68ecba5733edb0093d6fe2f94c4d42990250f00e5071b2d"], 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x4000001) 7m12.489290776s ago: executing program 32 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000002060108d4ff57a86e259e400100000005000100070000000900020073797a30000000000c0007800800a4070000e96405000400000000001000030068617368fd00000000000000050005eeefe6b74174c30fc07c359769b3e11b2b3ea838fae060d4d617ce637e86b9bd91febae0b39b6f5b9c99eafc206bdf8ad238346f01c5fb4abaa03d02bf5d2219203970840b34f82baba68ecba5733edb0093d6fe2f94c4d42990250f00e5071b2d"], 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x4000001) 5m42.224022453s ago: executing program 0 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 5m41.90892967s ago: executing program 0 (id=597): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r2, 0xffffffffffffffff, {0x2, 0x0, 0x6}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff00000000000024f0d1c5000000000000", @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007"], 0x0, 0xb, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x33, @empty, 0x4e20, 0x2, 'dh\x00', 0xc, 0x7, 0x50}, {@local, 0x4e24, 0x10000, 0x146, 0xff, 0x6de}}, 0x44) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x401, @mcast2}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd638312808efbd04076a021b5bb172cc9cb5050"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x1, 0x4, 0x3, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb000, 0x3, &(0x7f0000055000/0xb000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r6, r3}}, 0x18) 5m41.054992408s ago: executing program 0 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) 5m40.867742233s ago: executing program 0 (id=606): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2810000, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614cc47df4870bff796357ee95fffb99cde9"], 0x1, 0x2c5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1c3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff2}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xfffffffffffffee6}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x0) getsockname$packet(r0, &(0x7f0000002800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002840)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000028c0)={'erspan0\x00', &(0x7f0000002880)={'tunl0\x00', 0x0, 0x10, 0x1, 0x200, 0xa, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x0, 0x5, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}]}}}}}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x10, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002980)={r0, 0x58, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r9, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000002b00)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002e40)={0x17c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0x1d}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmmsg(r14, &(0x7f0000002600)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000340)=""/64, 0x40}], 0x3, &(0x7f0000000440)=""/251, 0xfb}, 0xffffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/165, 0xa5}, {&(0x7f0000000680)=""/65, 0x41}], 0x2, &(0x7f0000000740)=""/185, 0xb9}, 0x1b}, {{&(0x7f0000000800)=@sco, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/31, 0x1f}], 0x1}, 0xad8}, {{&(0x7f0000000980)=@sco={0x1f, @none}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/30, 0x1e}, {&(0x7f0000000a40)=""/44, 0x2c}, {&(0x7f0000000a80)=""/45, 0x2d}, {&(0x7f0000000ac0)=""/128, 0x80}, {&(0x7f0000000b40)=""/96, 0x60}, {&(0x7f0000000bc0)=""/126, 0x7e}, {&(0x7f0000000c40)=""/54, 0x36}], 0x7}, 0x4687}, {{&(0x7f0000000d00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/58, 0x3a}, {&(0x7f0000000dc0)=""/13, 0xd}], 0x2, &(0x7f0000000e40)=""/180, 0xb4}, 0x400}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)=""/180, 0xb4}], 0x1, &(0x7f0000001080)=""/4096, 0x1000}, 0xfb}, {{&(0x7f0000002080)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/227, 0xe3}], 0x1}, 0x7}, {{&(0x7f0000002240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)=""/94, 0x5e}, {&(0x7f0000002340)=""/224, 0xe0}], 0x2, &(0x7f0000002580)=""/101, 0x65}, 0x5b}], 0x8, 0x4002, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x50) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000002000000000300000300000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) 5m40.599670418s ago: executing program 0 (id=607): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff00000000000024f0d1c50000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007"], 0x0, 0xb, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2509000000"], 0x14}}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xc080) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = memfd_secret(0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f00000000c0)={0x2, 0xd, 0x8}) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x3e, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x271, &(0x7f0000000f00)="$eJzs3TtoJHUcB/Df7CNxk0WiNoL4ALHQQIidYBMbhYCEICKoEBGxkkSICXZZKxsLrVUCgk0QO6Ol2ASbOw6uyt2lyDUHd+GKC1fcFXvMPo7NZnOP3c0Ol/l8YLMz/J8T5vufITCTAHJrKiLmIqIYEdMRUY6IpLPCK83PVGt3s7KzFFGvf3AzadRr7je1201GRC0i3oootcvWtz/Zv7373tgPa+XXft/+uDKq4+t0sL/3/uGvC9//Nf/m+vmL1xeSmItqq6zzOLr1N9lC42fSo6SURDzbV59PhqSU9Qx4FIvf/nkpzf1zEfFqI//lKLQi++Pq2H/leOOXk9r+dOPCC6OcKzB89Xo5vQbW6kDupHep1UgKM6071moUCjMzzXv4y8WJwlcrq99Mf7mytvxF1isVMCzVSPbe/Wf878mu/F8rNvMPnF3ViL0PF7eupNuHxaxnA5yazj9gv9j8SvM//dnG6yH/kDvyD/kl/5Bf8g9nQJ/ZlX/Ir0Hy/9QpzQkYDdd/OMPK7Y1az2L5h/x6QP7Hs5oTMAS/9Xrq9CjXf8ivzvwDAPlSH8/6CWQgK1mvPwAAAAAAAAAAAAAAAAAAwHGblZ2l9mdUY/7/c8TBOxFR6jV+sfH/iNtvG5+4laTV7kuazQby6csDdjCgP4b29HWlr1ZPXx3W+P0599Lp9Pvd0d0TfzkbyxG1tPJsqXT8/Eta51//nnlIefnzAQd4TN1vBXz7o9GO3+3uVrbjz+9G/JuuP7O91p9CPN/47r3+VDtfsdynr+8M2AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjcy8AAP//PgRt2A==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), &(0x7f00000003c0)=0x4) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5m40.431101942s ago: executing program 0 (id=611): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000791150000000000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 5m40.397320303s ago: executing program 33 (id=611): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000791150000000000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 3m30.879020465s ago: executing program 6 (id=1309): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4d31, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x1000, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc}, @CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r1) (async) ftruncate(r1, 0x4a8e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) getsockopt$inet_buf(r3, 0x118, 0x30, 0x0, &(0x7f00000003c0)) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000010600)=@generic={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x1, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r7, 0x2, {0x0, 0xf0, 0x3}, 0xff}, 0x18, &(0x7f0000000180)={0x0, 0xf5}, 0x4, 0x0, 0x0, 0x8804}, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m30.755911668s ago: executing program 6 (id=1311): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc00000000000000007fbb4b05000000ac1e00010000000000000000a05d000000000000000000000a"], 0xb8}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x244e0002}, 0x0) 3m30.755522448s ago: executing program 6 (id=1312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}}, 0x4008000) capset(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0xdd2, @loopback, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x0, 0x4a, 0x0, 0xa}, 0x28) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f00000000c0)={0x1, 0x0, 0xfff, 0x4, 0x7, 0x100}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x12000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x1d, 0x0, 0x1, 0xffffffff}, {0x7}, {0x6, 0x2}]}) ioctl$TCSETS(r8, 0x5402, 0x0) 3m26.359819754s ago: executing program 6 (id=1324): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000440)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) creat(&(0x7f0000000200)='./bus\x00', 0x268) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, 0x0}, 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 3m26.253038376s ago: executing program 6 (id=1325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prlimit64(r2, 0x0, &(0x7f0000000140)={0x7, 0x7}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x3fffffff9}, 0x2c10, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x24000000000, r5, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @multicast}) 3m25.63141931s ago: executing program 6 (id=1330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0xa}, 0x10ccc9, 0x4, 0x3, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x6, 0x0, 0xbbc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x41, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21101, 0x20800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3m25.545597072s ago: executing program 34 (id=1330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0xa}, 0x10ccc9, 0x4, 0x3, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x6, 0x0, 0xbbc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x41, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21101, 0x20800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1m57.321907574s ago: executing program 4 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xbaa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80010000}, 0x0) 1m57.227958686s ago: executing program 4 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000140000000a2c000000050a03000000000000000000020000030c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020002000900010073797a30000000000900030073797a320000000014000000020a0300000000020000000002"], 0x94}}, 0x0) 1m57.227693646s ago: executing program 4 (id=1965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000001000000290000000400000084023000ff0000000402000304"], 0x30}, 0x0) 1m57.227575986s ago: executing program 4 (id=1966): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m57.227155796s ago: executing program 4 (id=1967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) epoll_create1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[], 0x1, 0x546, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x92, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd80}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xe, 0x7fff0001}]}) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x0, 0x4a8, 0x2e8, 0x2e8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x29e, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffff00, 0x0, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'vxcan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2b, 0x4, 0x6}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {0x11}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001c00)=[{&(0x7f0000000b00)='D', 0x1}], 0x1, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) set_mempolicy(0x4005, &(0x7f0000000080)=0x6, 0x8) 1m56.917862133s ago: executing program 4 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) epoll_create1(0x80000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0xfe8e, 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x500}, 0x57) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1m56.903086413s ago: executing program 35 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) epoll_create1(0x80000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0xfe8e, 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x500}, 0x57) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 35.388895709s ago: executing program 8 (id=2642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x14504, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0xb}, 0x800, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x9) r2 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xcc00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x1, r3, 0x0, 0x0, 0xfffffffffffffbff}]) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x2, &(0x7f0000000100)={[0xcf0]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xeaae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000000140)={0x60f7, 0x1}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2) 31.657217501s ago: executing program 8 (id=2675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) dup(0xffffffffffffffff) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) (async, rerun: 32) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) tkill(r3, 0x13) waitid(0x1, r3, 0x0, 0x2, 0x0) (async) waitid(0x0, r3, 0x0, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000001040)={{}, {0x0, 0x3938700}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c, &(0x7f0000000440)}, 0x40054) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x7fffffff, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0xe}}}, 0x108) 31.433220575s ago: executing program 8 (id=2680): unshare(0x62040200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xc}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800001400000000000000000000000061190400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r0) 28.983767149s ago: executing program 8 (id=2689): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$eJzs3N1rXGkZAPDnnHy3qZOKiPWmEZEWxGlaSbFFsJWKN14Ieis0pJMSMv0gE6lJA070HxD1WvBGUIvSC3vdGwVvvXG7t1v2YqEs2WYXlmU3y5mPZJrM5KOZycmmvx+8Oe/HOed9npzMnPNCZgJ4Y41nP9KIMxFxM4koNPrTiBis1YYjqvX91laXpz9aXZ5OYn39Z+8nkUTEy9Xl6ea5ksb2ZKMxHBH/+2ESX/7t9nkri0tzU+Vyab7RvrBw5/6FyuLSd2bvTN0u3S7dvXj5e5OXJi9PXJnsWq4fv3PtyYff+PG71U/+9umjD/7wlySuxWhjrDWPRtYHNh7jG7+TVv0RMdWF8x8FfY18WvNM+nc5KO1xUAAAdJS2PMN9NQrRF5sPb4X49/9zDQ4AAADoivW+iHUAAADgmEus/wEAAOCYa/4fwMvV5elmyfc/Eg7Xi+sRMVbPf61R6iP9Ua1th2MgIk68TKL1Y61J/bADG4+I529f+WdWos3nkHutuhIRX2t3/ZNa/mONT0JvzT+NiIkuzD++pf1Fyv9aF+bPO38A3kxPr9dvZNvvf+nG80+0uf/1t7l3vY6873/N57+1bc9/m/n3dXj+++ke53j41z896DSW5f/9Jz/6R7Nk82fbAyW1Dy9WIr7e3y7/ZCP/pEP+N3c5dxL1UxQ+e1DqtM9e8u/Gd/F0sv7niHPRPv+WPHb6fqILM7Pl0kT9Z9s5Vv47+fdO8x+F63+iQ/47XP/hrO/+K2fq/KU+v7hx4/G2zsbuu+efvjeY/LxWG2z0/GpqYWH+YsRg8pPt/Zd2zre5T/McWf7nv7nz67/d33/2nlBt/G1kqaw0tln7N1vm/MGjh//qFE9z/Zfn9b+1/+tf6/vdHuf41n9+f35rX/M13br+zUo2//OkvhYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKY0IkYjSYsRkdTqaVosRpyMiK/EibR8r7Lw7Zl7v7x7KxuLGIuBdGa2XJqIiEK9nWTti7X6ZvvSlvZ3I+J0RPyxMFJrF6fvlW/lnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbTkbEaCRpMSLSiFgrpGmxmHdUAAAAQNeN5R0AAAAA0HPW/wAAAHD8Wf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY6fPPn2WRET16kitZAYbYwO5Rgb0Wpp3AEBu+vIOAMhNf94BALnZ5xrf4wIcQ8ku48Nte7N3j6GexAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0XTuzNNnSURUr47USmawMTbQ9oizhxgd0Etp3gEAuenbabD/8OIADt9rv8RPdTcO4PC1X+MDb5Jkl/HhzX2qr44M9SwmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6e0VpJ0mJEpLV6mhaLEaciYiwGkpnZcmkiIr4UEW8VBoay9lDeQQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB1lcWlualyuTT/OpXkYIerqHSq/Hq+sjgSuYdxuJXkaIRRr+T9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB4qi0tzU+Vyab6SdyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3iqLS3NT5XJpfg+Vx/vZuaWSd44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOTn8wAAAP//XiMNCQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x446, 0x21) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r4, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xcb5}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21060, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd98, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r10, &(0x7f0000000000)=0x7, r10, 0x0, 0x2, 0x0) 28.789469873s ago: executing program 8 (id=2695): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x400000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x20000, 0x1000, 0xeb, 0x1}, 0x20) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x1, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r4}, 0x10) (async) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="e2d725b82bd8edf805ce7e697994acac022a6ab1b370d65e1840904fdb6d720fa54eb25f8281f568902234ed9277df2b59f494d5135b92174178274b23d0b4e2f92e1dfe60cb8801185cb806f464d0304aad6f99e545e724d5bf7faa1b229b1b985e2d6fa626f475fa365a2deffcade53ffef127b880b1d28cfc95479952514608e4ed4dda03bf1686fa2bf3dd9d476d82a220f3d279c1065b22f8973cb4790f530d84", @ANYRES16=r1, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000040)=0x2000006, 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="940000001000010000000000000000000000000a20000000000a01020000000000000000010000040900010073797a3000000000d0000000160a01000000000000000000010000000900010073797a30000000000900020073797a3100000000a40003800800014000000000900003801400010076657468315f746f5f626f6e640000001400010076657468315f746f5f687372000000001400010069705f7674693000000000000000000014000100626f6e645f736c6176655f300000000014000100766c616e3000000000000000000000001400010070696d726567300000000000000000001400010070696d72656700000000000000000000080002400000000058000000160a0101000b000000000000010000000900020053797a30000000000900010073797a30000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e640000000800024000000010140000001000010000000000000007000000000a1ab90b6d6917c0a81ce2170a28d8ce9f16bdb604467b386904ff6a900c49297eecaf770d872cfeaeb9edcfaf00d0cc16690a1c142b0d000000000000006ef454b1ff8929d3450de36f66944eeffb0959c91d157e77fe90960adce91402b3d02535c169a8a1b1daeeb69d5655ccc857ebc4a3fb41abe52cf5573f433732adff2722c45c6a350b8b8536129e539e5b30338dd08307bd217d455ef9050ee023d01f976a324b29254a6c6efc001c25a35b37d50a5c07afbcf4021f5fdb3f09457b91a537"], 0x170}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r10, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000004880)={'wg0\x00'}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 27.872422723s ago: executing program 8 (id=2702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x40) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c90000000000ffff"}) 27.872253983s ago: executing program 36 (id=2702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x40) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c90000000000ffff"}) 5.858761833s ago: executing program 5 (id=2930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/27], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x590, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bff092aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x901, 0x40, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tos={{0x28}, {0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) 5.391574643s ago: executing program 9 (id=2934): r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x3, 0x4}, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)={[{@nodelalloc}, {@resuid={'resuid', 0x3d, r3}}, {@sysvgroups}, {@nogrpid}, {@nojournal_checksum}]}, 0x2a, 0x63f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x2a) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x742f9be4ffc7d71a}, 0x804) bind$x25(r7, &(0x7f0000000200), 0x12) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) fchown(r4, 0x0, 0xee00) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) pread64(r9, &(0x7f0000000280)=""/172, 0xac, 0xe0) 4.928532173s ago: executing program 9 (id=2945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vcs(0xffffffffffffff9c, 0x0, 0x4f41e6330c6387f2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$inet(0x2, 0x3, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8, 0x0, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.265548709s ago: executing program 1 (id=2956): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "0007f8f9951e76c13f64323723e7eecdf40c363423eb3d259266f79c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000040000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a0a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103c7114ab40a68e528329d97afc3612e325c1eb4a3ab2e156aaf44480000000000000000000000000000000000aed500", "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"}) ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x20, 0xfff1, 0xec}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, &(0x7f0000000340), &(0x7f00000000c0)=""/30}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000010c0)={'\x00', 0x9d4, 0x5, 0x0, 0x3, 0x4, 0x0}) prlimit64(r3, 0x0, 0x0, &(0x7f0000001140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r4 = syz_open_dev$sg(&(0x7f0000000080), 0x6b5e, 0x0) r5 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) wait4(r5, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001040)={r2, 0x3, 0x9, 0xa}) connect$inet6(r6, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty, 0x7fffffff}, 0x1c) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, 0x0) 3.219894741s ago: executing program 5 (id=2957): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0xe, 0x4e24, 0x6, 0x2, 0xa0, 0xa0, 0x3a}, {0x0, 0x6, 0x2b5, 0xd, 0x9, 0x8000000000000000, 0x1, 0xffff}, {0x0, 0xffffffffffffffff, 0x8000000000000001, 0xc7}, 0x6, 0x6e6bb3, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xff}, 0xa, @in=@local, 0x3503, 0x6, 0x3, 0x2, 0x8, 0x52, 0x6}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{}, [], {0x95, 0x0, 0x7b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) 3.219364781s ago: executing program 7 (id=2958): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32], 0x50) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f00000002c0)=""/64, 0x40) keyctl$link(0x8, r0, r0) r1 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18}, 0x90) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000200)={[{@uid}, {@check_strict}, {@hide}, {}, {@unhide}, {@utf8}, {@map_acorn}, {@nocompress}]}, 0x2, 0x564, &(0x7f0000001080)="$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") sendmsg$nl_route(r4, 0x0, 0x4000084) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x14) 3.173336002s ago: executing program 1 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001200000100000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d08000640ffffff00080003"], 0xc0}}, 0x0) 3.019938765s ago: executing program 9 (id=2960): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) unshare(0x20000400) (async) r4 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r4, 0xff, 0x22, 0x0, 0x0) (async) read$eventfd(r3, &(0x7f0000000340), 0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000240)=""/129, 0x81}, {0x0}], 0x2, 0x10001, 0x92a) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) setgid(0x0) (async) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f00000008c0)='./file2\x00', 0x2010c12, &(0x7f0000000880)=ANY=[], 0x1, 0xa3a, &(0x7f0000024400)="$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") 2.915699197s ago: executing program 1 (id=2961): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x1, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0xc000) ioprio_get$pid(0x2, r2) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x20, 0x70, 0x100000}, 0x20) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, 0x0, &(0x7f0000000100)) syz_usbip_server_init(0x1) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000000da00"/44], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.915187897s ago: executing program 5 (id=2962): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x100, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000580)=""/105, &(0x7f0000000600)=0x69) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3f, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x130, 0x0, 0x0, 0x130, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0xd, 0x8, 0xc, 0xa, 0x5, 0xc81f, 0xd, 0x39, 0x18], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) syz_read_part_table(0x5df, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x9, 0x81, 0xa, 0xf, 0xbbcb}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f0000000480)=0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x6, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x0, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000002c0)={0x4, &(0x7f0000000100)=[{0xb, 0x3982}, {0xfff, 0x3}, {0x7ff}, {0x2, 0x8}]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000640)=@buf) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000005f59d36a00000000009500009032000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESHEX=r8, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.724215061s ago: executing program 7 (id=2964): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', 0x0}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000ea000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 1.962020568s ago: executing program 2 (id=2970): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30fffffff5000000290000000400000084023000ff0000000402000304"], 0x30}, 0x0) 1.922636509s ago: executing program 2 (id=2971): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x5, 0x4, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000300", [0xffffffffffff7fff, 0x2000000000001]}}) 1.831733931s ago: executing program 2 (id=2972): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x42049, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4004802) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={r2, @in6={{0x2, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x8, 0x806}, &(0x7f0000000040)=0x90) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$TCGETS(r4, 0x5401, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1}, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x1, 0x4, 0x0, 0x2, 0x1, 0x800000, 0x10, 0x0, 0x0, 0x0, 0xffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) link(&(0x7f0000001280)='./cgroup\x00', &(0x7f00000012c0)='./cgroup\x00') r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x2000, 0x3, 0x302}, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0xfffffffffffffe59, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x88}, 0x1, 0x0, 0x0, 0x20040040}, 0x4002) 1.817101191s ago: executing program 2 (id=2973): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x121342, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000304000000ffef00000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 1.698155504s ago: executing program 2 (id=2974): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xe656b000) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000000fff5000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40ffffffff0900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140000000083c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a81fccad7cee43b2b73ce67df90d8671416cd8c1c3428a46384758a46807d534bb8640458c2f668cc7cdcec"], 0xe0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r2, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0x3f9, 0x0) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="91"], 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1800) msgrcv(r2, &(0x7f0000000000)={0x0, ""/115}, 0x7b, 0x2, 0x2800) 1.371747871s ago: executing program 2 (id=2975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x14504, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0xb}, 0x800, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x9) r1 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x1, r2, 0x0, 0x0, 0xfffffffffffffbff}]) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x2, &(0x7f0000000100)={[0xcf0]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xeaae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000000140)={0x60f7, 0x1}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2) 1.308605752s ago: executing program 9 (id=2976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7eefcff000000000000020000", 0x58}], 0x1) 1.264901103s ago: executing program 7 (id=2977): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x4000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.244120763s ago: executing program 9 (id=2978): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x7, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@inlinecrypt}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x20004800) mount$bind(0x0, 0x0, 0x0, 0x1000021, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.011963209s ago: executing program 7 (id=2979): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000280)=@framed={{}, [], {0x95, 0x0, 0xf9}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) 1.011666509s ago: executing program 7 (id=2980): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) readv(r0, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)={0x10, 0x5e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x50) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) flock(0xffffffffffffffff, 0x2) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000000c0), 0xff, 0x10000) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, r4, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 763.868064ms ago: executing program 7 (id=2981): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x34}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x2}, 0x104b14, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd20, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x3ff, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x680, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x5, 0x0, 0x14, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x1, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x3, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xe, 0x3]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000cc0)={0xffffffffffffffff, &(0x7f0000000540)="56050d64fe17dad365e2957d51c98cbc142f9850f13e685812501e64ae61ca7f332fc36363febd37b9b7922913e0811c7493ab135efddec0318ffc12c77ead07bc2698b665aac6407be9beb931c7641ab80ad4bc9df964a3ffd01946118d46909e99a7a8c0513163be10daca5eb3cc3cd2ab27b62a238ef6526c0782dc6f763d3b807136bffd479282bc2853a721b706a9aadcead2f75911eb572b168f37ed0cddf5e09b825624f82572025f32761d59145f57019646ca3b3f5a6735a6ae61b24375922b16011a11ff239af6f45d5664cd115b85d8fa547d97f6d30f09d68fbc5ca981a29822401017107e106eedb23c8eda008f4f4b09", &(0x7f0000000c40)=""/111}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x12, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020dc9020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500009dd51c4e0239f2ac00070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f00008f7000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ef8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 745.547035ms ago: executing program 1 (id=2982): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010429bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 557.594819ms ago: executing program 1 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104000000000000000fff000000", @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0) 550.032988ms ago: executing program 5 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 445.580901ms ago: executing program 5 (id=2985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xe}}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a3200000000380004"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) (fail_nth: 1) 131.494008ms ago: executing program 5 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x209c081, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16], 0x3, 0x232, &(0x7f0000000640)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)=""/6) getsockopt$inet6_udp_int(r1, 0x11, 0x64, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xe}}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a320000000038000400200001000a004e2300000009fe8000000000000000000000000000bb01000000140002"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 111.098258ms ago: executing program 9 (id=2987): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) getpeername$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESDEC=r0, @ANYRESDEC=r7], 0x44}}, 0xc040) connect$unix(r3, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x8000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xd, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) sendmmsg$inet6(r9, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) shutdown(r9, 0x1) close(r8) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=2988): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5401000010000100feffffff0001000020010000000000000000000000000000fc01000000000107144e230005020000003c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000050000000000000000000000000000001f00000000000000feffffffffffffff0200000002000000070000002abd7000043500000a0001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0) kernel console output (not intermixed with test programs): EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 434.032794][ T28] audit: type=1400 audit(5353031225.030:3598): avc: denied { shutdown } for pid=12269 comm="syz.2.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.068343][T12283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.083534][T12294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.093076][T12293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.102168][T10631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.125875][T12294] loop5: detected capacity change from 0 to 512 [ 434.180220][ T30] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 434.198798][ T8414] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 434.218436][T12299] loop2: detected capacity change from 0 to 512 [ 434.323428][T12299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.367818][T12313] loop8: detected capacity change from 0 to 128 [ 434.369791][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.390769][T12313] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.412480][T12313] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 434.482004][T12320] loop7: detected capacity change from 0 to 128 [ 434.514884][ T28] audit: type=1400 audit(5353031225.510:3599): avc: denied { write } for pid=12311 comm="syz.8.2420" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.709880][T10631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.538820][T12340] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.020893][T12345] loop7: detected capacity change from 0 to 512 [ 436.124203][T12340] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.150678][T12345] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.189470][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.296116][T12340] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.343838][T12353] netlink: 'syz.1.2434': attribute type 2 has an invalid length. [ 436.357219][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2434'. [ 436.597480][T12340] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.347900][ T30] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.362818][T12365] loop2: detected capacity change from 0 to 512 [ 437.679905][ T30] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.700403][ T30] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.710567][T12365] EXT4-fs: inline encryption not supported [ 437.716492][T12365] EXT4-fs: inline encryption not supported [ 437.887056][ T3861] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.904163][T12365] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.984033][T12365] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 437.998695][T12365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2437: bg 0: block 248: padding at end of block bitmap is not set [ 438.013323][T12365] loop2: lost filesystem error report for type 5 error -117 [ 438.013598][T12365] Quota error (device loop2): write_blk: dquota write failed [ 438.028259][T12365] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 438.038117][T12365] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2437: Failed to acquire dquot type 1 [ 438.049385][T12365] loop2: lost filesystem error report for type 5 error -28 [ 438.050068][T12365] EXT4-fs (loop2): 1 truncate cleaned up [ 438.063461][T12365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 438.139064][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 438.195382][T12382] loop2: detected capacity change from 0 to 1024 [ 438.208147][T12382] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 438.233536][T12382] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2441: Invalid block bitmap block 0 in block_group 0 [ 438.247079][T12382] loop2: lost filesystem error report for type 5 error -117 [ 438.247737][T12382] Quota error (device loop2): write_blk: dquota write failed [ 438.262690][T12382] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 438.272662][T12382] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2441: Failed to acquire dquot type 0 [ 438.284259][T12382] loop2: lost filesystem error report for type 5 error -117 [ 438.289124][T12390] loop5: detected capacity change from 0 to 512 [ 438.289155][T12382] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2441: Freeing blocks not in datazone - block = 0, count = 4096 [ 438.296495][T12382] loop2: lost filesystem error report for type 5 error -117 [ 438.316279][T12382] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.2441: Invalid inode bitmap blk 0 in block_group 0 [ 438.327681][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 438.336226][T12382] loop2: lost filesystem error report for type 5 error -117 [ 438.342669][ C1] EXT4-fs (loop2): initial error at time 1058063933: ext4_read_block_bitmap_nowait:483 [ 438.343255][T12382] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 438.350012][ C1] [ 438.359606][T12382] loop2: lost filesystem error report for type 5 error -117 [ 438.360038][T12382] EXT4-fs (loop2): 1 orphan inode deleted [ 438.368164][ C1] EXT4-fs (loop2): last error at time 5353031229: ext4_free_inode:363 [ 438.370961][T12382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.377871][ C1] [ 438.395443][ T7846] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 438.427367][ T7846] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:22: Failed to release dquot type 0 [ 438.451514][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.490989][T12402] loop2: detected capacity change from 0 to 512 [ 438.503381][T12402] EXT4-fs: Ignoring removed i_version option [ 438.519247][T12402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 438.531722][T12390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.544864][T12402] EXT4-fs (loop2): 1 truncate cleaned up [ 438.553723][T12402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.583663][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.593673][ T28] audit: type=1400 audit(5353031229.590:3600): avc: denied { write } for pid=12401 comm="syz.2.2448" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.714326][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 438.724705][T12421] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2453'. [ 438.782632][T12419] loop5: detected capacity change from 0 to 2048 [ 439.029084][T12419] loop5: p1 < > p2 p3 < > p4 < p5 > [ 439.042303][T12419] loop5: partition table partially beyond EOD, truncated [ 439.066119][T12419] loop5: p1 start 3405774849 is beyond EOD, truncated [ 439.066902][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.083651][T12419] loop5: p3 start 4225 is beyond EOD, truncated [ 439.216497][T12434] loop2: detected capacity change from 0 to 512 [ 439.252246][T12438] macsec3: entered promiscuous mode [ 439.277609][T12434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.290702][T12434] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.314954][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2457'. [ 439.431241][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.587332][T12450] loop2: detected capacity change from 0 to 512 [ 439.673739][T12450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.686550][T12450] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.701861][ T28] audit: type=1400 audit(5353031230.700:3601): avc: denied { write } for pid=12447 comm="syz.2.2462" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.926182][T12440] netlink: 'syz.1.2461': attribute type 4 has an invalid length. [ 439.934208][T12440] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2461'. [ 440.477503][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.832852][T12473] loop7: detected capacity change from 0 to 1024 [ 440.852903][T12473] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 440.898458][T12473] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.2470: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 440.911883][ T28] audit: type=1400 audit(5353031231.880:3602): avc: denied { create } for pid=12459 comm="syz.5.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 440.956015][T12473] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 440.960632][T12473] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2470: couldn't read orphan inode 11 (err -117) [ 440.982021][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 440.982054][ C1] EXT4-fs (loop7): initial error at time 5353031231: ext4_ext_check_inode:521: inode 11 [ 440.982086][ C1] EXT4-fs (loop7): last error at time 5353031231: ext4_ext_check_inode:521: inode 11 [ 441.014787][T12473] loop7: lost filesystem error report for type 5 error -117 [ 441.022362][T12473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.059729][T12487] loop2: detected capacity change from 0 to 2048 [ 441.082330][ T28] audit: type=1326 audit(5353031232.070:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12483 comm="syz.1.2474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed19a2de99 code=0x7ffc0000 [ 441.098588][T12473] netlink: 'syz.7.2470': attribute type 3 has an invalid length. [ 441.112687][ T28] audit: type=1326 audit(5353031232.070:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12483 comm="syz.1.2474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fed199ea2ec code=0x7ffc0000 [ 441.117054][T12492] ip6t_rpfilter: unknown options [ 441.141656][T12473] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2470'. [ 441.151595][T12487] loop2: p1 < > p2 p3 < > p4 < p5 > [ 441.173396][T12473] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2470'. [ 441.183791][T12487] loop2: partition table partially beyond EOD, truncated [ 441.196738][T12473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 441.197784][T12487] loop2: p1 start 3405774849 is beyond EOD, truncated [ 441.214422][T12473] ip6gretap1: entered promiscuous mode [ 441.221899][T12487] loop2: p3 start 4225 is beyond EOD, truncated [ 441.236591][T12494] netlink: 463 bytes leftover after parsing attributes in process `syz.1.2476'. [ 441.301757][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.502788][T12513] program syz.1.2483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.744371][T12522] bond0: entered promiscuous mode [ 441.767542][T12522] batadv0: entered promiscuous mode [ 441.787014][T12522] debugfs: 'hsr1' already exists in 'hsr' [ 441.810049][T12522] Cannot create hsr debugfs directory [ 441.832295][T12522] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 441.872200][T12522] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 441.875111][T12517] loop7: detected capacity change from 0 to 1024 [ 441.882792][T12522] bond0: left promiscuous mode [ 441.887571][T12522] batadv0: left promiscuous mode [ 441.894194][T12517] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 441.927432][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'. [ 442.074183][T12517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.334121][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.534257][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 443.283304][T12545] loop7: detected capacity change from 0 to 2048 [ 443.370774][T12545] loop7: p1 < > p2 p3 < > p4 < p5 > [ 443.376770][T12545] loop7: partition table partially beyond EOD, truncated [ 443.410129][T12545] loop7: p1 start 3405774849 is beyond EOD, truncated [ 443.524225][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2492'. [ 443.539492][T12545] loop7: p3 start 4225 is beyond EOD, truncated [ 443.861069][T12580] loop7: detected capacity change from 0 to 512 [ 443.877110][T12578] uprobe: syz.1.2504:12578 failed to unregister, leaking uprobe [ 443.906419][T12581] loop2: detected capacity change from 0 to 512 [ 443.919659][T12581] msdos: Bad value for 'time_offset' [ 443.937075][T12580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.034701][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 444.053054][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 444.053072][ T28] audit: type=1400 audit(5353031235.050:3770): avc: denied { listen } for pid=12588 comm="syz.2.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.084773][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.242943][T12599] atomic_op ffff8881308bd528 conn xmit_atomic 0000000000000000 [ 444.548012][T12615] loop7: detected capacity change from 0 to 512 [ 444.613375][T12601] loop2: detected capacity change from 0 to 164 [ 444.814640][T12615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.042803][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.375438][T12648] FAULT_INJECTION: forcing a failure. [ 445.375438][T12648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.380976][T12656] loop8: detected capacity change from 0 to 128 [ 445.392009][T12648] CPU: 0 UID: 0 PID: 12648 Comm: syz.2.2528 Not tainted syzkaller #0 PREEMPT(lazy) [ 445.392062][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 445.392075][T12648] Call Trace: [ 445.392082][T12648] [ 445.392090][T12648] __dump_stack+0x1d/0x30 [ 445.392116][T12648] dump_stack_lvl+0x95/0xd0 [ 445.392139][T12648] dump_stack+0x15/0x1b [ 445.392203][T12648] should_fail_ex+0x25e/0x270 [ 445.392233][T12648] should_fail+0xb/0x20 [ 445.392259][T12648] should_fail_usercopy+0x1a/0x20 [ 445.392289][T12648] _copy_from_user+0x1c/0xb0 [ 445.392361][T12648] __sys_bpf+0x1e2/0xc30 [ 445.392393][T12648] ? get_pid_task+0x92/0xc0 [ 445.392415][T12648] ? vfs_write+0x7a0/0x990 [ 445.392441][T12648] __x64_sys_bpf+0x69/0x80 [ 445.392526][T12648] x64_sys_call+0x10cb/0x3020 [ 445.392552][T12648] do_syscall_64+0x136/0x3c0 [ 445.392575][T12648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.392599][T12648] RIP: 0033:0x7f5cf37ede99 [ 445.392617][T12648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.392714][T12648] RSP: 002b:00007f5cf2247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.392738][T12648] RAX: ffffffffffffffda RBX: 00007f5cf3a75fa0 RCX: 00007f5cf37ede99 [ 445.392754][T12648] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000f [ 445.392768][T12648] RBP: 00007f5cf2247090 R08: 0000000000000000 R09: 0000000000000000 [ 445.392834][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.392848][T12648] R13: 00007f5cf3a76038 R14: 00007f5cf3a75fa0 R15: 00007ffc4e587018 [ 445.392869][T12648] [ 445.466391][T12658] loop7: detected capacity change from 0 to 1024 [ 445.510959][T12656] vfat filesystem being mounted at /95/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 445.526326][T12658] EXT4-fs: Ignoring removed orlov option [ 445.585604][T12658] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.607991][T12658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec118, mo2=0002] [ 445.624079][T12658] System zones: 0-1, 3-12 [ 445.643280][ T28] audit: type=1400 audit(5353031236.640:3771): avc: denied { watch watch_reads } for pid=12664 comm="syz.1.2534" path="/proc/1675/task/1676/ns" dev="proc" ino=37465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 445.644446][T12658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.718197][T12663] loop8: detected capacity change from 0 to 2048 [ 445.749331][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.762417][T12663] loop8: p1 < > p2 p3 < > p4 < p5 > [ 445.770340][T12663] loop8: partition table partially beyond EOD, truncated [ 445.788192][T12672] loop2: detected capacity change from 0 to 512 [ 445.794825][T12672] msdos: Unknown parameter 'dos1xflnodots' [ 445.826762][T12663] loop8: p1 start 3405774849 is beyond EOD, truncated [ 445.853909][T12663] loop8: p3 start 4225 is beyond EOD, truncated [ 445.896704][ T28] audit: type=1400 audit(5353031236.820:3772): avc: denied { write } for pid=12661 comm="syz.8.2533" name="loop8p2" dev="devtmpfs" ino=1790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.919726][ T28] audit: type=1400 audit(5353031236.820:3773): avc: denied { open } for pid=12661 comm="syz.8.2533" path="/dev/loop8p2" dev="devtmpfs" ino=1790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.922060][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2533'. [ 445.972620][ T28] audit: type=1400 audit(5353031236.820:3774): avc: denied { ioctl } for pid=12661 comm="syz.8.2533" path="/dev/loop8p2" dev="devtmpfs" ino=1790 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 446.048559][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2542'. [ 446.058765][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2542'. [ 446.069235][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2544'. [ 446.079246][T12692] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2544'. [ 446.140165][T12699] loop2: detected capacity change from 0 to 512 [ 446.158942][T12699] EXT4-fs (loop2): Invalid log block size: 41 [ 446.372825][ T28] audit: type=1326 audit(5353031237.360:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5136f3de99 code=0x7ffc0000 [ 446.398954][ T28] audit: type=1326 audit(5353031237.360:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5136f3de99 code=0x7ffc0000 [ 446.425272][ T28] audit: type=1326 audit(5353031237.360:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5136f3de99 code=0x7ffc0000 [ 446.452222][ T28] audit: type=1326 audit(5353031237.360:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5136f3de99 code=0x7ffc0000 [ 446.478423][ T28] audit: type=1326 audit(5353031237.360:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.2548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5136f3de99 code=0x7ffc0000 [ 446.728632][T12728] ip_tunnel: non-ECT from 0.0.0.227 with TOS=0x3 [ 447.156667][T12742] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2560'. [ 447.479254][T12745] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2560'. [ 447.496433][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.503609][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.904288][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2560'. [ 448.631962][T12745] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.639357][T12745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.646688][T12745] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.653797][T12745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.781936][T12762] set_capacity_and_notify: 2 callbacks suppressed [ 448.782041][T12762] loop2: detected capacity change from 0 to 512 [ 448.814584][T12745] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2560'. [ 448.903393][T12762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.919765][T12745] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.926994][T12745] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.944328][T12762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2565'. [ 448.970670][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.065293][T12774] ip6t_rpfilter: unknown options [ 449.092524][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'. [ 449.164225][T12783] loop2: detected capacity change from 0 to 512 [ 449.175565][T12782] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2574'. [ 449.184992][T12782] netlink: zone id is out of range [ 449.190207][T12782] netlink: zone id is out of range [ 449.195329][T12782] netlink: zone id is out of range [ 449.201765][T12782] netlink: del zone limit has 4 unknown bytes [ 449.232703][T12783] ------------[ cut here ]------------ [ 449.238255][T12783] EA inode 11 i_nlink=0 [ 449.238272][T12783] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.2.2568/12783 [ 449.253314][T12783] Modules linked in: [ 449.257303][T12783] CPU: 1 UID: 0 PID: 12783 Comm: syz.2.2568 Not tainted syzkaller #0 PREEMPT(lazy) [ 449.266824][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 449.276970][T12783] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 449.283671][T12783] Code: 96 c5 96 ff 49 8d 7e 40 4c 8d 2d fb a3 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 ad d9 03 90 90 90 90 90 90 90 [ 449.303589][T12783] RSP: 0018:ffffc900017d77f8 EFLAGS: 00010246 [ 449.309781][T12783] RAX: ffff888104325030 RBX: ffff8881004b9e98 RCX: ffffffff81c29236 [ 449.318069][T12783] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3620 [ 449.326121][T12783] RBP: 000000000000000b R08: 00018881004b9e4b R09: 0000000000000000 [ 449.334261][T12783] R10: ffffc900017d7728 R11: 0001c900017d7728 R12: ffff8881004b9e48 [ 449.342391][T12783] R13: ffffffff871d3620 R14: ffff8881004b9e00 R15: 0000000000000001 [ 449.350484][T12783] FS: 00007f5cf22266c0(0000) GS:ffff8882ae9cf000(0000) knlGS:0000000000000000 [ 449.359521][T12783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.366144][T12783] CR2: 00007fed19c7b158 CR3: 00000001ee578000 CR4: 00000000003506f0 [ 449.374211][T12783] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.382255][T12783] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 449.390271][T12783] Call Trace: [ 449.393638][T12783] [ 449.396604][T12783] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 449.402582][T12783] ext4_xattr_delete_inode+0x6b5/0x790 [ 449.408106][T12783] ext4_evict_inode+0xb18/0xdf0 [ 449.412995][T12783] ? __pfx_ext4_evict_inode+0x10/0x10 [ 449.418413][T12783] evict+0x2a5/0x510 [ 449.422442][T12783] iput+0x430/0x5a0 [ 449.426278][T12783] ext4_process_orphan+0x1a4/0x1c0 [ 449.431473][T12783] ext4_orphan_cleanup+0x6a6/0xa10 [ 449.436628][T12783] ? ext4_register_li_request+0x14c/0x440 [ 449.442420][T12783] ext4_fill_super+0x33ab/0x3760 [ 449.447426][T12783] ? set_blocksize+0x14c/0x270 [ 449.452389][T12783] ? __pfx_ext4_fill_super+0x10/0x10 [ 449.457732][T12783] get_tree_bdev_flags+0x291/0x300 [ 449.462923][T12783] ? __pfx_ext4_fill_super+0x10/0x10 [ 449.468349][T12783] get_tree_bdev+0x1f/0x30 [ 449.472780][T12783] ext4_get_tree+0x1c/0x30 [ 449.477229][T12783] vfs_get_tree+0x57/0x1d0 [ 449.481742][T12783] do_new_mount+0x288/0x8d0 [ 449.486339][T12783] path_mount+0x4ad/0xb90 [ 449.490769][T12783] __se_sys_mount+0x28c/0x2e0 [ 449.495476][T12783] __x64_sys_mount+0x67/0x80 [ 449.500129][T12783] x64_sys_call+0x2d61/0x3020 [ 449.504843][T12783] do_syscall_64+0x136/0x3c0 [ 449.509511][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.515560][T12783] RIP: 0033:0x7f5cf37ef10a [ 449.520024][T12783] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.539840][T12783] RSP: 002b:00007f5cf2225e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.548401][T12783] RAX: ffffffffffffffda RBX: 00007f5cf2225ee0 RCX: 00007f5cf37ef10a [ 449.556512][T12783] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007f5cf2225ea0 [ 449.564551][T12783] RBP: 0000200000000180 R08: 00007f5cf2225ee0 R09: 0000000000800700 [ 449.572668][T12783] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 449.580757][T12783] R13: 00007f5cf2225ea0 R14: 0000000000000470 R15: 000000000000002c [ 449.588788][T12783] [ 449.591831][T12783] ---[ end trace 0000000000000000 ]--- [ 449.597759][T12783] EXT4-fs (loop2): 1 orphan inode deleted [ 449.603932][T12783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.646867][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 449.646886][ T28] audit: type=1400 audit(5353031240.600:3788): avc: denied { write } for pid=12771 comm="syz.2.2568" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.647092][T12772] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.2568: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 449.693918][T12772] EXT4-fs (loop2): Remounting filesystem read-only [ 449.738407][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.748333][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.776140][T12805] loop8: detected capacity change from 0 to 512 [ 449.785105][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.791447][T12805] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.2579: corrupted xattr block 95: invalid header [ 449.809087][T12805] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 449.810115][T12805] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 449.817718][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 449.819326][T12805] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2579: bg 0: block 7: invalid block bitmap [ 449.832256][ C0] EXT4-fs (loop8): initial error at time 5353031240: ext4_expand_extra_isize_ea:2810 [ 449.838642][T12805] loop8: lost filesystem error report for type 5 error -117 [ 449.851085][ C0] : inode 11 [ 449.871358][ C0] EXT4-fs (loop8): last error at time 5353031240: ext4_expand_extra_isize_ea:2810: inode 11 [ 449.872577][T12805] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 449.890130][T12805] loop8: lost filesystem error report for type 5 error -117 [ 449.890924][T12782] bridge1: left promiscuous mode [ 449.895048][T12805] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.2579: corrupted xattr block 95: invalid header [ 449.916769][T12805] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 449.916962][T12805] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 449.941829][T12805] EXT4-fs (loop8): 1 orphan inode deleted [ 449.949352][T12805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.978194][ T3854] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.986614][ T3854] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.995038][ T3854] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.003414][ T3854] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.011994][ T3854] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.020565][ T3854] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.029061][ T3854] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.037542][ T3854] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.056770][ T28] audit: type=1400 audit(5353031241.040:3789): avc: denied { mounton } for pid=12804 comm="syz.8.2579" path="/100/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 450.080420][T12813] EXT4-fs (loop8): shut down requested (1) [ 450.095656][ T28] audit: type=1400 audit(5353031241.040:3790): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 450.118866][ T28] audit: type=1400 audit(5353031241.040:3791): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.143376][T12820] loop7: detected capacity change from 0 to 512 [ 450.175143][T12820] EXT4-fs: Ignoring removed nobh option [ 450.205246][T12820] EXT4-fs (loop7): orphan cleanup on readonly fs [ 450.213047][ T28] audit: type=1400 audit(5353031241.040:3792): avc: denied { append } for pid=2962 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.214034][T12820] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.2583: EA inode hash validation failed [ 450.259045][T12820] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 450.297157][ T28] audit: type=1400 audit(5353031241.040:3793): avc: denied { open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.321525][ T28] audit: type=1400 audit(5353031241.040:3794): avc: denied { getattr } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 450.331578][T12820] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.2583: corrupted inode contents [ 450.378660][T12820] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.382281][T12829] loop5: detected capacity change from 0 to 2048 [ 450.391609][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 450.391645][ C1] EXT4-fs (loop7): initial error at time 5353031241: ext4_do_update_inode:5742: inode 15 [ 450.391769][ C1] EXT4-fs (loop7): last error at time 5353031241: ext4_do_update_inode:5742: inode 15 [ 450.414724][T12820] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #15: comm syz.7.2583: mark_inode_dirty error [ 450.414756][T12820] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.462651][T12829] loop5: p1 < > p2 p3 < > p4 < p5 > [ 450.481262][T12820] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.2583: corrupted inode contents [ 450.497783][T12829] loop5: partition table partially beyond EOD, truncated [ 450.505293][T12829] loop5: p1 start 3405774849 is beyond EOD, truncated [ 450.514405][T12829] loop5: p3 start 4225 is beyond EOD, truncated [ 450.544633][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2586'. [ 450.555823][T12820] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.556057][T12820] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.2583: mark_inode_dirty error [ 450.624949][T12795] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.644784][T10631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.658299][T12795] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.690037][T12820] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.690215][T12820] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.2583: mark inode dirty (error -117) [ 450.719310][T12795] bridge_slave_0: entered allmulticast mode [ 450.736353][T12795] bridge_slave_0: entered promiscuous mode [ 450.761234][T12820] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.761401][T12820] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 450.764258][ T7671] udevd[7671]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 450.772362][ T8273] udevd[8273]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 450.802666][T12795] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.810072][ T7670] udevd[7670]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 450.827904][T12820] EXT4-fs (loop7): 1 orphan inode deleted [ 450.833916][T12795] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.843726][T12820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 450.858847][T12795] bridge_slave_1: entered allmulticast mode [ 450.868470][T12795] bridge_slave_1: entered promiscuous mode [ 450.908134][T12795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.919268][ T28] audit: type=1400 audit(5353031241.920:3795): avc: denied { read } for pid=12830 comm="syz.2.2587" name="file1" dev="tmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 450.920456][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 450.955835][T12795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.982647][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.985840][ T28] audit: type=1400 audit(5353031241.920:3796): avc: denied { watch } for pid=12830 comm="syz.2.2587" path="/508/file1" dev="tmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 451.034781][T12795] team0: Port device team_slave_0 added [ 451.061466][T12795] team0: Port device team_slave_1 added [ 451.086023][ T28] audit: type=1400 audit(5353031241.920:3797): avc: denied { unlink } for pid=12830 comm="syz.2.2587" name="file1" dev="tmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 451.117567][T12795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.144576][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.207825][T12795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.230518][T12795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.247066][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.302415][T12795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.354585][T12795] hsr_slave_0: entered promiscuous mode [ 451.365596][T12795] hsr_slave_1: entered promiscuous mode [ 451.376316][T12795] debugfs: 'hsr0' already exists in 'hsr' [ 451.382359][T12795] Cannot create hsr debugfs directory [ 451.500841][T12795] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.510946][T12795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 451.530275][T12795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.592993][T12795] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.603080][T12795] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 451.622030][T12795] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.691783][T12795] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.701772][T12795] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 451.718896][T12795] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.789575][T12795] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.799712][T12795] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 451.809674][T12795] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.918482][T12795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.935158][T12795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.950471][T12795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.991425][T12795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.127254][T12795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.136833][T12795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.147175][T12795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.167580][T12795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.275465][T12795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.364620][T12795] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.472503][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.479643][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.625962][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.633094][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.725679][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 452.735836][T12795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 452.735943][T12887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2600'. [ 452.760993][T12795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.915904][T12887] loop2: detected capacity change from 0 to 512 [ 452.931168][T12795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.939425][T12887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.990509][T12887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 453.014624][T12887] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.044453][T12887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 453.123299][T12795] veth0_vlan: entered promiscuous mode [ 453.139625][T12795] veth1_vlan: entered promiscuous mode [ 453.155970][T12918] loop7: detected capacity change from 0 to 2048 [ 453.175180][T12795] veth0_macvtap: entered promiscuous mode [ 453.190974][T12795] veth1_macvtap: entered promiscuous mode [ 453.212715][T12918] loop7: p1 < > p2 p3 < > p4 < p5 > [ 453.218575][T12918] loop7: partition table partially beyond EOD, truncated [ 453.219587][T12795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.234794][T12887] loop2: detected capacity change from 0 to 512 [ 453.241335][T12918] loop7: p1 start 3405774849 is beyond EOD, truncated [ 453.243097][T12795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.255616][T12887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.267796][ T7844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.279535][T12918] loop7: p3 start 4225 is beyond EOD, truncated [ 453.296890][ T7844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.313130][ T7844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.326717][T12887] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.2600: corrupted xattr entries [ 453.339372][T12887] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 453.339886][T12887] EXT4-fs (loop2): Remounting filesystem read-only [ 453.349340][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 453.349390][ C0] EXT4-fs (loop2): initial error at time 5353031244: xattr_find_entry:337: inode 15 [ 453.349504][ C0] EXT4-fs (loop2): last error at time 5353031244: xattr_find_entry:337: inode 15 [ 453.355415][ T7844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.358052][T12887] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 453.381129][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2606'. [ 453.383869][T12887] EXT4-fs (loop2): 1 truncate cleaned up [ 453.428579][T12887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.453767][T12887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.534224][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2609'. [ 453.585488][T12932] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 453.595259][T12930] loop5: detected capacity change from 0 to 2048 [ 453.605464][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2609'. [ 453.615708][T12932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.639353][T12930] loop5: p1 < > p2 p3 < > p4 < p5 > [ 453.645306][T12930] loop5: partition table partially beyond EOD, truncated [ 453.672906][T12930] loop5: p1 start 3405774849 is beyond EOD, truncated [ 453.677984][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'. [ 453.683109][T12930] loop5: p3 start 4225 is beyond EOD, truncated [ 453.780342][T12930] blktrace: Concurrent blktraces are not allowed on loop5p2 [ 453.819835][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 453.836566][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 453.869697][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2620'. [ 453.972731][T12966] sctp: [Deprecated]: syz.2.2619 (pid 12966) Use of int in maxseg socket option. [ 453.972731][T12966] Use struct sctp_assoc_value instead [ 454.002178][T12974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=12974 comm=syz.1.2624 [ 454.046579][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2626'. [ 454.077283][T12981] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 454.100676][T12981] netlink: 'syz.7.2626': attribute type 8 has an invalid length. [ 454.147402][T12990] loop5: detected capacity change from 0 to 512 [ 454.225412][T12990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.403252][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.507382][T13007] FAULT_INJECTION: forcing a failure. [ 454.507382][T13007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.507872][T13011] loop8: detected capacity change from 0 to 1024 [ 454.530645][T13007] CPU: 1 UID: 0 PID: 13007 Comm: syz.5.2630 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 454.530687][T13007] Tainted: [W]=WARN [ 454.530694][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 454.530756][T13007] Call Trace: [ 454.530762][T13007] [ 454.530770][T13007] __dump_stack+0x1d/0x30 [ 454.530795][T13007] dump_stack_lvl+0x95/0xd0 [ 454.530826][T13007] dump_stack+0x15/0x1b [ 454.530849][T13007] should_fail_ex+0x25e/0x270 [ 454.530892][T13007] should_fail+0xb/0x20 [ 454.530926][T13007] should_fail_usercopy+0x1a/0x20 [ 454.530964][T13007] _copy_from_user+0x1c/0xb0 [ 454.530986][T13007] bpf_obj_get_info_by_fd+0x8a5/0x2320 [ 454.531083][T13007] ? terminate_walk+0x1d5/0x200 [ 454.531112][T13007] ? path_openat+0x1ae6/0x2000 [ 454.531145][T13007] ? _parse_integer_limit+0x177/0x1a0 [ 454.531194][T13007] ? _parse_integer+0x27/0x40 [ 454.531220][T13007] ? kstrtoull+0x111/0x140 [ 454.531315][T13007] ? selinux_bpf+0xc7/0xe0 [ 454.531405][T13007] __sys_bpf+0x908/0xc30 [ 454.531437][T13007] ? vfs_write+0x7a0/0x990 [ 454.531462][T13007] __x64_sys_bpf+0x69/0x80 [ 454.531529][T13007] x64_sys_call+0x10cb/0x3020 [ 454.531552][T13007] do_syscall_64+0x136/0x3c0 [ 454.531577][T13007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.531642][T13007] RIP: 0033:0x7f5136f3de99 [ 454.531663][T13007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.531745][T13007] RSP: 002b:00007f5135997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.531767][T13007] RAX: ffffffffffffffda RBX: 00007f51371c5fa0 RCX: 00007f5136f3de99 [ 454.531782][T13007] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000f [ 454.531796][T13007] RBP: 00007f5135997090 R08: 0000000000000000 R09: 0000000000000000 [ 454.531810][T13007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.531824][T13007] R13: 00007f51371c6038 R14: 00007f51371c5fa0 R15: 00007fff97602098 [ 454.531899][T13007] [ 454.546620][T13011] EXT4-fs: Ignoring removed orlov option [ 454.746351][T13011] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.762470][T13011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec118, mo2=0002] [ 454.770804][T13011] System zones: 0-1, 3-12 [ 454.786181][T13011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.861744][T13018] loop5: detected capacity change from 0 to 512 [ 454.868479][T13018] msdos: Unknown parameter 'dos1xflnodots' [ 454.981188][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 454.981208][ T28] audit: type=1326 audit(5353031245.970:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.036473][T10631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.055035][ T28] audit: type=1326 audit(5353031245.970:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.092196][T13023] loop5: detected capacity change from 0 to 2048 [ 455.098059][ T28] audit: type=1326 audit(5353031245.970:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.125024][ T28] audit: type=1326 audit(5353031245.970:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.153910][ T28] audit: type=1326 audit(5353031245.970:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.180088][ T28] audit: type=1326 audit(5353031245.970:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.209756][T13023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.234335][ T28] audit: type=1326 audit(5353031245.970:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.260465][ T28] audit: type=1326 audit(5353031245.970:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.285421][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.288125][ T28] audit: type=1326 audit(5353031245.970:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.288160][ T28] audit: type=1326 audit(5353031245.970:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12980 comm="syz.7.2626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9564fde99 code=0x7fc00000 [ 455.374210][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.385805][T13022] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 455.446759][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.529416][T13042] loop7: detected capacity change from 0 to 2048 [ 455.643032][T13042] loop7: p1 < > p2 p3 < > p4 < p5 > [ 455.649031][T13042] loop7: partition table partially beyond EOD, truncated [ 455.656756][T13042] loop7: p1 start 3405774849 is beyond EOD, truncated [ 455.668036][T13042] loop7: p3 start 4225 is beyond EOD, truncated [ 455.701328][T13042] blktrace: Concurrent blktraces are not allowed on loop7p2 [ 456.155026][T13075] macsec1: entered promiscuous mode [ 456.160301][T13075] bridge0: entered promiscuous mode [ 456.419783][T13081] wg1: entered promiscuous mode [ 456.424987][T13081] wg1: entered allmulticast mode [ 456.543408][T13089] loop7: detected capacity change from 0 to 2048 [ 456.561847][T13089] msdos filesystem being mounted at /221/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 456.599802][T13089] Cannot find map_set index 17 as target [ 456.654705][T13091] ip_tunnel: non-ECT from 0.0.0.227 with TOS=0x3 [ 456.942614][T13093] SELinux: Context ›Y7»ôj [ 456.942614][T13093] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 456.942614][T13093] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 456.994687][T13093] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 457.020588][T13093] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ [ 458.616915][T13121] __dump_stack+0x1d/0x30 [ 458.616971][T13121] dump_stack_lvl+0x95/0xd0 [ 458.616993][T13121] dump_stack+0x15/0x1b [ 458.617079][T13121] should_fail_ex+0x25e/0x270 [ 458.617107][T13121] should_failslab+0x8c/0xb0 [ 458.617129][T13121] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 458.617164][T13121] ? __anon_vma_prepare+0xcd/0x2f0 [ 458.617196][T13121] ? __anon_vma_prepare+0xcd/0x2f0 [ 458.617225][T13121] __anon_vma_prepare+0xcd/0x2f0 [ 458.617254][T13121] handle_mm_fault+0x2405/0x2da0 [ 458.617371][T13121] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 458.617400][T13121] do_user_addr_fault+0x402/0x1060 [ 458.617437][T13121] exc_page_fault+0x62/0xa0 [ 458.617543][T13121] asm_exc_page_fault+0x26/0x30 [ 458.617622][T13121] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 458.617654][T13121] Code: 1f 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 458.617677][T13121] RSP: 0018:ffffc90001147df0 EFLAGS: 00050206 [ 458.617696][T13121] RAX: ffff88810426e170 RBX: 0000000000000068 RCX: 0000000000000068 [ 458.617766][T13121] RDX: 0000000000000000 RSI: ffffc90001147e28 RDI: 0000200000000680 [ 458.617783][T13121] RBP: 0000000000000000 R08: 0000000000000294 R09: 0000000000000000 [ 458.617799][T13121] R10: 0001c90001147e28 R11: 0001c90001147e8f R12: 00002000000006e8 [ 458.617813][T13121] R13: 00007ffffffff000 R14: 0000200000000680 R15: ffffc90001147e28 [ 458.617832][T13121] _copy_to_user+0x7c/0xa0 [ 458.617887][T13121] __se_sys_semctl+0x1c0/0x2d0 [ 458.617912][T13121] __x64_sys_semctl+0x55/0x70 [ 458.617932][T13121] x64_sys_call+0x1f85/0x3020 [ 458.617988][T13121] do_syscall_64+0x136/0x3c0 [ 458.618013][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.618039][T13121] RIP: 0033:0x7f5136f3de99 [ 458.618058][T13121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.618077][T13121] RSP: 002b:00007f5135997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 458.618173][T13121] RAX: ffffffffffffffda RBX: 00007f51371c5fa0 RCX: 00007f5136f3de99 [ 458.618189][T13121] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 0000000000000000 [ 458.618202][T13121] RBP: 00007f5135997090 R08: 0000000000000000 R09: 0000000000000000 [ 458.618215][T13121] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 458.618229][T13121] R13: 00007f51371c6038 R14: 00007f51371c5fa0 R15: 00007fff97602098 [ 458.618247][T13121] [ 459.182818][T13144] bond10: option arp_interval: invalid value (18446744073709551613) [ 459.190861][T13144] bond10: option arp_interval: allowed values 0 - 2147483647 [ 459.257459][T13144] bond10 (unregistering): Released all slaves [ 459.303980][T13153] loop5: detected capacity change from 0 to 2048 [ 459.362892][T13153] loop5: p1 < > p2 p3 < > p4 < p5 > [ 459.370598][T13153] loop5: partition table partially beyond EOD, truncated [ 459.381486][T13153] loop5: p1 start 3405774849 is beyond EOD, truncated [ 459.401990][T13153] loop5: p3 start 4225 is beyond EOD, truncated [ 459.445267][T13155] __nla_validate_parse: 13 callbacks suppressed [ 459.445286][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 459.480496][T13155] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2681'. [ 459.490095][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'. [ 459.924235][T13150] dvmrp0: entered allmulticast mode [ 460.725453][T13152] dvmrp0: left allmulticast mode [ 461.486240][T13182] loop5: detected capacity change from 0 to 1024 [ 461.608346][T13186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2690'. [ 461.621245][T13184] loop8: detected capacity change from 0 to 4096 [ 461.658463][T13184] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.664255][T13182] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 461.693510][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 461.693528][ T28] audit: type=1400 audit(5353031252.690:3871): avc: denied { write } for pid=13183 comm="syz.8.2689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.768844][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2693'. [ 461.791729][T13182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.804560][ T28] audit: type=1400 audit(5353031252.780:3872): avc: denied { write } for pid=10631 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.826459][ T28] audit: type=1400 audit(5353031252.780:3873): avc: denied { rmdir } for pid=10631 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.901400][T13207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35858 sclass=netlink_route_socket pid=13207 comm=syz.1.2697 [ 461.924462][T13205] loop7: detected capacity change from 0 to 128 [ 461.940269][ T28] audit: type=1400 audit(5353031252.780:3874): avc: denied { write } for pid=10631 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.962907][ T28] audit: type=1400 audit(5353031252.790:3875): avc: denied { write } for pid=10631 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.985988][ T28] audit: type=1400 audit(5353031252.790:3876): avc: denied { unlink } for pid=10631 comm="syz-executor" name=66696C6507 dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 462.021732][ T28] audit: type=1400 audit(5353031252.790:3877): avc: denied { write } for pid=10631 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.064784][ T28] audit: type=1400 audit(5353031252.790:3878): avc: denied { write } for pid=10631 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.086863][ T28] audit: type=1400 audit(5353031252.790:3879): avc: denied { write } for pid=10631 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.087047][T13208] netlink: 'syz.7.2696': attribute type 1 has an invalid length. [ 462.109302][ T28] audit: type=1400 audit(5353031252.790:3880): avc: denied { write } for pid=10631 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.514583][T13208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.524785][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.594650][ T36] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.635865][T13195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.678315][ T36] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.842118][ T36] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.912727][ T36] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.980479][T13234] netlink: 'syz.1.2700': attribute type 10 has an invalid length. [ 462.990708][T13235] FAULT_INJECTION: forcing a failure. [ 462.990708][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 463.018497][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.7.2705 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 463.018536][T13235] Tainted: [W]=WARN [ 463.018545][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 463.018598][T13235] Call Trace: [ 463.018606][T13235] [ 463.018616][T13235] __dump_stack+0x1d/0x30 [ 463.018644][T13235] dump_stack_lvl+0x95/0xd0 [ 463.018669][T13235] dump_stack+0x15/0x1b [ 463.018692][T13235] should_fail_ex+0x25e/0x270 [ 463.018766][T13235] should_failslab+0x8c/0xb0 [ 463.018793][T13235] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 463.018872][T13235] ? __alloc_skb+0x2db/0x6f0 [ 463.018903][T13235] ? __alloc_skb+0x2db/0x6f0 [ 463.019030][T13235] __alloc_skb+0x2db/0x6f0 [ 463.019104][T13235] ? __alloc_skb+0x205/0x6f0 [ 463.019134][T13235] netlink_alloc_large_skb+0xbf/0xf0 [ 463.019202][T13235] netlink_sendmsg+0x40c/0x6f0 [ 463.019234][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.019262][T13235] ____sys_sendmsg+0x532/0x580 [ 463.019374][T13235] ___sys_sendmsg+0x195/0x1e0 [ 463.019421][T13235] __x64_sys_sendmsg+0xd4/0x160 [ 463.019461][T13235] x64_sys_call+0x194c/0x3020 [ 463.019527][T13235] do_syscall_64+0x136/0x3c0 [ 463.019552][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.019599][T13235] RIP: 0033:0x7fe9564fde99 [ 463.019686][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.019709][T13235] RSP: 002b:00007fe954f57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.019735][T13235] RAX: ffffffffffffffda RBX: 00007fe956785fa0 RCX: 00007fe9564fde99 [ 463.019791][T13235] RDX: 0000000020000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 463.019808][T13235] RBP: 00007fe954f57090 R08: 0000000000000000 R09: 0000000000000000 [ 463.019824][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.019839][T13235] R13: 00007fe956786038 R14: 00007fe956785fa0 R15: 00007ffed7ba1158 [ 463.019862][T13235] [ 463.091689][T13234] team0 (unregistering): Port device team_slave_0 removed [ 463.250141][T13234] team0 (unregistering): Port device team_slave_1 removed [ 463.341876][T13243] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2706'. [ 463.590139][ T36] bond0 (unregistering): Released all slaves [ 463.653030][T13254] loop7: detected capacity change from 0 to 128 [ 463.676819][T13254] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.689538][T13254] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.737771][ T36] hsr_slave_0: left promiscuous mode [ 463.752512][ T36] hsr_slave_1: left promiscuous mode [ 463.776076][ T36] veth1_macvtap: left promiscuous mode [ 463.781785][ T36] veth0_macvtap: left promiscuous mode [ 463.787509][ T36] veth1_vlan: left promiscuous mode [ 463.793043][ T36] veth0_vlan: left promiscuous mode [ 464.016383][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 464.059600][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.077841][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.086553][T13222] bridge_slave_0: entered allmulticast mode [ 464.097601][T13222] bridge_slave_0: entered promiscuous mode [ 464.109962][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.117157][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.124415][T13222] bridge_slave_1: entered allmulticast mode [ 464.131073][T13222] bridge_slave_1: entered promiscuous mode [ 464.149129][T13222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.160616][T13222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.181980][T13222] team0: Port device team_slave_0 added [ 464.189307][T13222] team0: Port device team_slave_1 added [ 464.237347][T13261] loop5: detected capacity change from 0 to 512 [ 464.269801][T13222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.286971][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.325115][T13222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.336434][ T8414] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.390559][T13222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.417854][T13261] EXT4-fs: Ignoring removed nobh option [ 464.421138][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.502689][T13222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.540528][T13261] EXT4-fs (loop5): orphan cleanup on readonly fs [ 464.547571][T13261] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2709: EA inode hash validation failed [ 464.564099][T13261] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 464.564717][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 464.577325][T13261] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.2709: corrupted inode contents [ 464.595796][T13261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.597304][T13298] uprobe: syz.2.2712:13298 failed to unregister, leaking uprobe [ 464.614724][T13261] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.2709: mark_inode_dirty error [ 464.623730][T13222] hsr_slave_0: entered promiscuous mode [ 464.626071][T13261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.632142][T13261] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.2709: corrupted inode contents [ 464.632339][T13222] hsr_slave_1: entered promiscuous mode [ 464.642123][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 464.669392][ C1] EXT4-fs (loop5): initial error at time 5353031255: ext4_do_update_inode:5742: inode 15 [ 464.676969][T13222] debugfs: 'hsr0' already exists in 'hsr' [ 464.682691][ C1] EXT4-fs (loop5): last error at time 5353031255: ext4_dirty_inode:6639: inode 15 [ 464.699378][T13222] Cannot create hsr debugfs directory [ 464.708435][T13261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.718291][T13261] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.2709: mark_inode_dirty error [ 464.790607][T13261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.804816][T13261] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.2709: mark inode dirty (error -117) [ 464.840833][T13261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.850339][T13261] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 464.877604][T13261] EXT4-fs (loop5): 1 orphan inode deleted [ 464.880811][T13303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2714'. [ 464.884352][T13261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 464.947603][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.103950][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.135039][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.205345][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2713'. [ 465.502974][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.510236][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.691529][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.705352][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.953338][ T3854] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.972333][ T3854] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.047920][ T3854] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.137460][T13222] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 466.156871][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.216725][ T3854] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.246710][T13222] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.300096][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.308175][T13222] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.323891][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.334539][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 466.345162][T13222] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.363993][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.694144][T13222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.714395][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 466.714413][ T28] audit: type=1400 audit(5353031257.710:3888): avc: denied { write } for pid=13342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.772471][T13222] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.812454][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.819579][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.853837][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.861095][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.904873][ T28] audit: type=1400 audit(5353031257.880:3889): avc: denied { write } for pid=13363 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.958059][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 466.965095][T13365] loop5: detected capacity change from 0 to 512 [ 467.016883][T13368] FAULT_INJECTION: forcing a failure. [ 467.016883][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 467.053830][T13365] EXT4-fs: inline encryption not supported [ 467.059759][T13365] EXT4-fs: inline encryption not supported [ 467.096401][T13222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.166950][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.2.2724 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 467.167041][T13368] Tainted: [W]=WARN [ 467.167050][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 467.167065][T13368] Call Trace: [ 467.167073][T13368] [ 467.167083][T13368] __dump_stack+0x1d/0x30 [ 467.167113][T13368] dump_stack_lvl+0x95/0xd0 [ 467.167145][T13368] dump_stack+0x15/0x1b [ 467.167211][T13368] should_fail_ex+0x25e/0x270 [ 467.167243][T13368] should_failslab+0x8c/0xb0 [ 467.167265][T13368] __kmalloc_noprof+0xd4/0x4a0 [ 467.167342][T13368] ? bpf_uprobe_multi_link_fill_link_info+0x1c9/0x510 [ 467.167382][T13368] ? bpf_uprobe_multi_link_fill_link_info+0x1c9/0x510 [ 467.167444][T13368] bpf_uprobe_multi_link_fill_link_info+0x1c9/0x510 [ 467.167481][T13368] bpf_obj_get_info_by_fd+0xe66/0x2320 [ 467.167585][T13368] ? terminate_walk+0x1d5/0x200 [ 467.167621][T13368] ? path_openat+0x1ae6/0x2000 [ 467.167657][T13368] ? _parse_integer_limit+0x177/0x1a0 [ 467.167704][T13368] ? _parse_integer+0x27/0x40 [ 467.167743][T13368] ? kstrtoull+0x111/0x140 [ 467.167775][T13368] ? selinux_bpf+0xc7/0xe0 [ 467.167887][T13368] __sys_bpf+0x908/0xc30 [ 467.167925][T13368] ? vfs_write+0x7a0/0x990 [ 467.167983][T13368] __x64_sys_bpf+0x69/0x80 [ 467.168017][T13368] x64_sys_call+0x10cb/0x3020 [ 467.168045][T13368] do_syscall_64+0x136/0x3c0 [ 467.168070][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.168092][T13368] RIP: 0033:0x7f5cf37ede99 [ 467.168144][T13368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.168166][T13368] RSP: 002b:00007f5cf2247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.168192][T13368] RAX: ffffffffffffffda RBX: 00007f5cf3a75fa0 RCX: 00007f5cf37ede99 [ 467.168209][T13368] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000f [ 467.168224][T13368] RBP: 00007f5cf2247090 R08: 0000000000000000 R09: 0000000000000000 [ 467.168237][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.168290][T13368] R13: 00007f5cf3a76038 R14: 00007f5cf3a75fa0 R15: 00007ffc4e587018 [ 467.168313][T13368] [ 467.421618][T13365] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 467.491757][T13222] veth0_vlan: entered promiscuous mode [ 467.516735][T13222] veth1_vlan: entered promiscuous mode [ 467.602009][T13222] veth0_macvtap: entered promiscuous mode [ 467.610048][T13222] veth1_macvtap: entered promiscuous mode [ 467.635704][T13222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.661622][T13222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.674855][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.683870][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.712043][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.752817][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.802582][T13365] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 467.823861][T13365] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2723: bg 0: block 248: padding at end of block bitmap is not set [ 467.838195][T13365] loop5: lost filesystem error report for type 5 error -117 [ 467.865682][T13365] Quota error (device loop5): write_blk: dquota write failed [ 467.880407][T13365] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 467.890292][T13365] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2723: Failed to acquire dquot type 1 [ 467.902723][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 467.902779][ C1] EXT4-fs (loop5): last error at time 5353031258: ext4_validate_block_bitmap:441 [ 467.934573][T13365] loop5: lost filesystem error report for type 5 error -28 [ 467.954325][T13413] loop7: detected capacity change from 0 to 2048 [ 468.023518][T13365] EXT4-fs (loop5): 1 truncate cleaned up [ 468.068303][T13365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 468.084717][T13413] loop7: p1 < > p2 p3 < > p4 < p5 > [ 468.091182][T13413] loop7: partition table partially beyond EOD, truncated [ 468.098545][T13413] loop7: p1 start 3405774849 is beyond EOD, truncated [ 468.106360][T13413] loop7: p3 start 4225 is beyond EOD, truncated [ 468.129672][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 468.164308][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 468.323791][T13440] loop7: detected capacity change from 0 to 512 [ 468.363685][T13442] loop5: detected capacity change from 0 to 2048 [ 468.371069][T13442] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 468.388072][T13440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.451573][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.536947][T13456] netlink: 'syz.7.2741': attribute type 10 has an invalid length. [ 468.546710][T13456] team0: Port device dummy0 added [ 468.552587][T13456] netlink: 'syz.7.2741': attribute type 10 has an invalid length. [ 468.562903][T13456] team0: Port device dummy0 removed [ 468.570001][T13456] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.615767][T13458] loop7: detected capacity change from 0 to 2048 [ 468.763543][T13474] ip_tunnel: non-ECT from 0.0.0.227 with TOS=0x3 [ 469.005876][T13488] loop7: detected capacity change from 0 to 2048 [ 469.066709][T13488] msdos filesystem being mounted at /248/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 469.115622][T13488] Cannot find map_set index 17 as target [ 469.374249][T13491] netlink: 'syz.5.2750': attribute type 1 has an invalid length. [ 469.406458][T13491] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 469.422222][T13491] macvlan2: entered promiscuous mode [ 469.427774][T13491] macvlan2: entered allmulticast mode [ 469.433582][T13491] bond12: (slave macvlan2): Error -98 calling set_mac_address [ 469.446966][ C0] vcan0: j1939_tp_rxtimer: 0xffff888117bd7c00: rx timeout, send abort [ 469.529162][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2752'. [ 469.729622][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'. [ 469.773512][T13510] loop7: detected capacity change from 0 to 256 [ 469.779475][T13507] bond1: option ad_actor_sys_prio: invalid value (0) [ 469.788002][T13507] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 469.914151][T13510] vfat filesystem being mounted at /249/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 469.930190][T13507] bond1 (unregistering): Released all slaves [ 469.955417][ C0] vcan0: j1939_tp_rxtimer: 0xffff888117bd7c00: abort rx timeout. Force session deactivation [ 470.041340][T13506] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 470.253635][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2759'. [ 470.282065][ T28] audit: type=1400 audit(5353031261.250:3890): avc: denied { ioctl } for pid=13517 comm="syz.9.2758" path="socket:[42119]" dev="sockfs" ino=42119 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 470.390498][T13526] loop7: detected capacity change from 0 to 512 [ 470.399188][T13523] ipvlan2: entered allmulticast mode [ 470.404548][T13523] syz_tun: entered allmulticast mode [ 470.428196][T13526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.459056][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.595133][ T28] audit: type=1400 audit(5353031261.590:3891): avc: denied { write } for pid=13524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.659164][ T28] audit: type=1400 audit(5353031261.660:3892): avc: denied { write } for pid=13547 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.695588][T13537] loop7: detected capacity change from 0 to 2048 [ 470.722586][T13518] syz.9.2758 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 470.772691][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.9.2758 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 470.772746][T13518] Tainted: [W]=WARN [ 470.772755][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 470.772769][T13518] Call Trace: [ 470.772776][T13518] [ 470.772785][T13518] __dump_stack+0x1d/0x30 [ 470.772820][T13518] dump_stack_lvl+0x95/0xd0 [ 470.772847][T13518] dump_stack+0x15/0x1b [ 470.772885][T13518] dump_header+0x80/0x240 [ 470.772907][T13518] oom_kill_process+0x295/0x350 [ 470.772945][T13518] out_of_memory+0x981/0xbc0 [ 470.773004][T13518] try_charge_memcg+0x621/0xa00 [ 470.773046][T13518] ? __rcu_read_unlock+0x4e/0x70 [ 470.773161][T13518] __memcg_kmem_charge_page+0x199/0x3a0 [ 470.773198][T13518] __alloc_frozen_pages_noprof+0x18a/0x350 [ 470.773304][T13518] alloc_pages_mpol+0xa9/0x1d0 [ 470.773397][T13518] alloc_pages_noprof+0x8f/0x140 [ 470.773425][T13518] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 470.773468][T13518] __kvmalloc_node_noprof+0x3a0/0x590 [ 470.773508][T13518] ? futex_hash_allocate+0x192/0x920 [ 470.773530][T13518] ? futex_hash_allocate+0x192/0x920 [ 470.773550][T13518] ? futex_hash_allocate+0x192/0x920 [ 470.773578][T13518] futex_hash_allocate+0x192/0x920 [ 470.773701][T13518] ? cap_task_prctl+0x13f/0x6b0 [ 470.773805][T13518] futex_hash_prctl+0xd8/0xf0 [ 470.773828][T13518] __se_sys_prctl+0x4f4/0x13b0 [ 470.773868][T13518] __x64_sys_prctl+0x67/0x80 [ 470.773912][T13518] x64_sys_call+0x2533/0x3020 [ 470.774018][T13518] do_syscall_64+0x136/0x3c0 [ 470.774043][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.774069][T13518] RIP: 0033:0x7fabe2d1de99 [ 470.774090][T13518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.774190][T13518] RSP: 002b:00007fabe1777028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 470.774219][T13518] RAX: ffffffffffffffda RBX: 00007fabe2fa5fa0 RCX: 00007fabe2d1de99 [ 470.774235][T13518] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 470.774249][T13518] RBP: 00007fabe2db3eaf R08: 0000000000000000 R09: 0000000000000000 [ 470.774330][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.774346][T13518] R13: 00007fabe2fa6038 R14: 00007fabe2fa5fa0 R15: 00007ffd6f7939d8 [ 470.774369][T13518] [ 470.774379][T13518] memory: usage 254416kB, limit 307200kB, failcnt 218 [ 470.886700][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2761'. [ 470.894471][T13518] memory+swap: usage 2364kB, limit 9007199254740988kB, failcnt 0 [ 471.040382][T13562] loop5: detected capacity change from 0 to 512 [ 471.084601][T13518] kmem: usage 2040kB, limit 9007199254740988kB, failcnt 0 [ 471.134371][T13562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.147281][T13562] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.162740][ T28] audit: type=1400 audit(5353031262.160:3893): avc: denied { write } for pid=13550 comm="syz.5.2765" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.197565][T13518] Memory cgroup stats for /syz9: [ 471.198067][T13518] cache 0 [ 471.264985][T13518] rss 77824 [ 471.282793][T13518] shmem 0 [ 471.306720][T13518] mapped_file 0 [ 471.328367][T13518] dirty 0 [ 471.356139][T13518] writeback 0 [ 471.377755][T13518] workingset_refault_anon 67 [ 471.447281][T13518] workingset_refault_file 0 [ 471.452237][T13518] swap 102400 [ 471.455769][T13518] swapcached 458752 [ 471.459638][T13518] pgpgin 3065 [ 471.463965][T13518] pgpgout 3045 [ 471.467760][T13518] pgfault 3230 [ 471.471270][T13518] pgmajfault 52 [ 471.475324][T13518] inactive_anon 0 [ 471.513960][T13518] active_anon 81920 [ 471.526585][T13518] inactive_file 0 [ 471.530514][T13518] active_file 0 [ 471.534013][T13518] unevictable 0 [ 471.537615][T13518] hierarchical_memory_limit 314572800 [ 471.543471][T13518] hierarchical_memsw_limit 9223372036854771712 [ 471.549789][T13518] total_cache 0 [ 471.553290][T13518] total_rss 77824 [ 471.557073][T13518] total_shmem 0 [ 471.561707][T13518] total_mapped_file 0 [ 471.566628][T13537] loop7: p1 < > p2 p3 < > p4 < p5 > [ 471.567265][T13518] total_dirty 0 [ 471.572014][T13537] loop7: partition table partially beyond EOD, truncated [ 471.575540][T13518] total_writeback 0 [ 471.575551][T13518] total_workingset_refault_anon 67 [ 471.575566][T13518] total_workingset_refault_file 0 [ 471.575574][T13518] total_swap 102400 [ 471.582721][T13537] loop7: p1 start 3405774849 is beyond EOD, [ 471.586795][T13518] total_swapcached 458752 [ 471.586812][T13518] total_pgpgin 3065 [ 471.586821][T13518] total_pgpgout 3045 [ 471.586830][T13518] total_pgfault 3230 [ 471.586840][T13518] total_pgmajfault 52 [ 471.586899][T13518] total_inactive_anon 0 [ 471.586910][T13518] total_active_anon 81920 [ 471.586921][T13518] total_inactive_file 0 [ 471.586930][T13518] total_active_file 0 [ 471.586940][T13518] total_unevictable 0 [ 471.586951][T13518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2758,pid=13517,uid=0 [ 471.587220][T13518] Memory cgroup out of memory: Killed process 13518 (syz.9.2758) total-vm:94108kB, anon-rss:1360kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 471.683897][T13537] truncated [ 471.709591][T13537] loop7: p3 start 4225 is beyond EOD, truncated [ 471.725814][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.756407][T13573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.803291][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.860832][ T7671] udevd[7671]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 471.875179][ T8273] udevd[8273]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 471.928933][ T8273] udevd[8273]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 471.957099][ T7670] udevd[7670]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 471.972926][T13592] ip6t_rpfilter: unknown options [ 472.428264][ T28] audit: type=1400 audit(5353031263.430:3894): avc: denied { name_bind } for pid=13601 comm="syz.5.2781" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 472.455005][T13598] bridge_slave_0: left allmulticast mode [ 472.460707][T13598] bridge_slave_0: left promiscuous mode [ 472.466455][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.476297][ T8428] udevd[8428]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 472.500678][T13598] bridge_slave_1: left allmulticast mode [ 472.508099][T13598] bridge_slave_1: left promiscuous mode [ 472.517520][T13607] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 472.525122][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.534985][T13598] bond0: (slave bond_slave_0): Releasing backup interface [ 472.545468][T13598] bond0: (slave bond_slave_1): Releasing backup interface [ 472.557742][T13598] team0: Port device team_slave_0 removed [ 472.565987][T13598] team0: Port device team_slave_1 removed [ 472.572812][T13598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.580189][T13598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.589113][T13598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.596753][T13598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.606413][T13598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.711165][T13610] set_capacity_and_notify: 1 callbacks suppressed [ 472.711185][T13610] loop5: detected capacity change from 0 to 128 [ 472.735211][T13610] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.752159][T13610] ext4 filesystem being mounted at /533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.818408][T13612] loop7: detected capacity change from 0 to 2048 [ 472.831203][ T28] audit: type=1400 audit(5353031263.830:3895): avc: denied { write } for pid=13609 comm="syz.5.2783" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.975412][ T4012] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.985393][T13612] loop7: p1 < > p2 p3 < > p4 < p5 > [ 472.991331][T13612] loop7: partition table partially beyond EOD, truncated [ 472.999606][T13612] loop7: p1 start 3405774849 is beyond EOD, truncated [ 473.002619][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2784'. [ 473.011115][T13612] loop7: p3 start 4225 is beyond EOD, [ 473.022071][ T28] audit: type=1400 audit(5353031264.020:3896): avc: denied { create } for pid=13617 comm="syz.9.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 473.025516][T13612] truncated [ 474.239533][T13648] loop9: detected capacity change from 0 to 512 [ 474.272811][T13648] msdos filesystem being mounted at /8/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 474.332538][ T28] audit: type=1400 audit(5353031265.330:3897): avc: denied { ioctl } for pid=13647 comm="syz.9.2794" path="socket:[41924]" dev="sockfs" ino=41924 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 474.399483][T13659] loop7: detected capacity change from 0 to 512 [ 474.448026][T13659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.483683][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.495923][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2799'. [ 474.861224][ T28] audit: type=1400 audit(5353031265.840:3898): avc: denied { getopt } for pid=13679 comm="syz.7.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 474.893594][T13682] loop7: detected capacity change from 0 to 128 [ 474.938867][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 475.130096][ T28] audit: type=1400 audit(5353031266.080:3899): avc: denied { mount } for pid=13694 comm="syz.2.2809" name="/" dev="hugetlbfs" ino=42364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 475.553819][T13698] loop7: detected capacity change from 0 to 512 [ 475.699076][T13698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.827080][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.961850][T13708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=13708 comm=syz.1.2814 [ 476.124403][T13717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=13717 comm=syz.1.2818 [ 476.184286][T13718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=13718 comm=syz.1.2818 [ 476.250020][T13717] netlink: 'syz.1.2818': attribute type 83 has an invalid length. [ 476.361830][ T28] audit: type=1400 audit(5353031267.360:3900): avc: denied { bind } for pid=13723 comm="syz.2.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.547172][T13729] loop7: detected capacity change from 0 to 512 [ 476.610617][T13729] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 476.618585][T13729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 476.626610][T13729] System zones: 0-1, 15-15, 18-18, 34-34 [ 476.632508][T13729] EXT4-fs (loop7): orphan cleanup on readonly fs [ 476.638868][T13729] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 476.648175][T13729] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 476.662706][T13729] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 476.669685][T13729] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.2822: bad orphan inode 32 [ 476.679709][T13729] loop7: lost filesystem error report for type 5 error -117 [ 476.679974][T13729] ext4_test_bit(bit=31, block=18) = 0 [ 476.693149][T13729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.766374][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.992388][T13764] loop9: detected capacity change from 0 to 512 [ 477.014373][T13764] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2834: bad orphan inode 17 [ 477.024660][T13764] loop9: lost filesystem error report for type 5 error -117 [ 477.026227][T13764] ext4_test_bit(bit=16, block=4) = 1 [ 477.033580][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 477.033598][ C1] EXT4-fs (loop9): initial error at time 5353031268: ext4_orphan_get:1425 [ 477.033619][ C1] EXT4-fs (loop9): last error at time 5353031268: ext4_orphan_get:1425 [ 477.048413][T13766] loop7: detected capacity change from 0 to 512 [ 477.054010][T13764] is_bad_inode(inode)=0 [ 477.072787][T13764] NEXT_ORPHAN(inode)=0 [ 477.076983][T13764] max_ino=32 [ 477.084286][T13764] i_nlink=1 [ 477.095258][T13764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.110804][T13766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.152530][ T28] audit: type=1400 audit(5353031268.150:3901): avc: denied { write } for pid=13768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.192598][ T28] audit: type=1400 audit(5353031268.170:3902): avc: denied { write } for pid=13781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.194650][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.215198][T13764] 9p: Bad value for 'rfdno' [ 477.231936][T13764] EXT4-fs error (device loop9): __ext4_iget:5533: inode #12: block 2: comm syz.9.2834: invalid block [ 477.243702][T13764] EXT4-fs error (device loop9): __ext4_iget:5533: inode #12: block 2: comm syz.9.2834: invalid block [ 477.414522][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.531297][T13798] Invalid logical block size (8) [ 477.587397][T13795] loop9: detected capacity change from 0 to 164 [ 477.841615][T13809] loop7: p1 < > p2 p3 < > p4 < p5 > [ 477.849215][T13809] loop7: partition table partially beyond EOD, truncated [ 477.857625][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 477.864300][ T28] audit: type=1400 audit(5353031268.850:3904): avc: denied { write } for pid=13821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.891872][T13809] loop7: p1 start 3405774849 is beyond EOD, truncated [ 477.916565][ T28] audit: type=1400 audit(5353031268.910:3905): avc: denied { write } for pid=13838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.946714][T13809] loop7: p3 start 4225 is beyond EOD, truncated [ 477.960206][T13809] blktrace: Concurrent blktraces are not allowed on loop7p2 [ 477.988364][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.997515][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.019925][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2845'. [ 478.271810][T13856] set_capacity_and_notify: 1 callbacks suppressed [ 478.271830][T13856] loop9: detected capacity change from 0 to 512 [ 478.289232][T13852] loop7: detected capacity change from 0 to 512 [ 478.419889][T13856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.476279][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.159706][T13884] FAULT_INJECTION: forcing a failure. [ 479.159706][T13884] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 479.173384][T13884] CPU: 0 UID: 0 PID: 13884 Comm: syz.9.2865 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 479.173427][T13884] Tainted: [W]=WARN [ 479.173436][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 479.173451][T13884] Call Trace: [ 479.173460][T13884] [ 479.173470][T13884] __dump_stack+0x1d/0x30 [ 479.173500][T13884] dump_stack_lvl+0x95/0xd0 [ 479.173529][T13884] dump_stack+0x15/0x1b [ 479.173552][T13884] should_fail_ex+0x25e/0x270 [ 479.173647][T13884] should_fail_alloc_page+0xf2/0x100 [ 479.173720][T13884] __alloc_frozen_pages_noprof+0x108/0x350 [ 479.173751][T13884] alloc_pages_mpol+0xa9/0x1d0 [ 479.173779][T13884] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 479.173828][T13884] handle_mm_fault+0x1020/0x2da0 [ 479.173865][T13884] do_user_addr_fault+0x402/0x1060 [ 479.173903][T13884] exc_page_fault+0x62/0xa0 [ 479.173949][T13884] asm_exc_page_fault+0x26/0x30 [ 479.173970][T13884] RIP: 0010:__put_user_8+0xd/0x30 [ 479.174063][T13884] Code: 89 01 31 c9 0f 01 ca e9 01 a8 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 d6 a7 01 00 90 90 90 90 90 90 90 90 90 [ 479.174140][T13884] RSP: 0018:ffffc900001b3b50 EFLAGS: 00050202 [ 479.174158][T13884] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002b40 [ 479.174227][T13884] RDX: 000000000000030a RSI: 0000000000000000 RDI: ffff88811c8a1f70 [ 479.174247][T13884] RBP: 0000200000002b40 R08: 000188811c8a1f77 R09: 0000000000000000 [ 479.174375][T13884] R10: 000188812f260000 R11: 000188812f260fff R12: ffff888104886be8 [ 479.174393][T13884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.174442][T13884] bpf_uprobe_multi_link_fill_link_info+0x3d1/0x510 [ 479.174507][T13884] bpf_obj_get_info_by_fd+0xe66/0x2320 [ 479.174532][T13884] ? terminate_walk+0x1d5/0x200 [ 479.174564][T13884] ? path_openat+0x1ae6/0x2000 [ 479.174600][T13884] ? _parse_integer_limit+0x177/0x1a0 [ 479.174758][T13884] ? _parse_integer+0x27/0x40 [ 479.174788][T13884] ? kstrtoull+0x111/0x140 [ 479.174867][T13884] ? selinux_bpf+0xc7/0xe0 [ 479.174902][T13884] __sys_bpf+0x908/0xc30 [ 479.175006][T13884] ? vfs_write+0x7a0/0x990 [ 479.175096][T13884] __x64_sys_bpf+0x69/0x80 [ 479.175133][T13884] x64_sys_call+0x10cb/0x3020 [ 479.175157][T13884] do_syscall_64+0x136/0x3c0 [ 479.175210][T13884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.175238][T13884] RIP: 0033:0x7fabe2d1de99 [ 479.175302][T13884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.175322][T13884] RSP: 002b:00007fabe1777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.175422][T13884] RAX: ffffffffffffffda RBX: 00007fabe2fa5fa0 RCX: 00007fabe2d1de99 [ 479.175481][T13884] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000f [ 479.175518][T13884] RBP: 00007fabe1777090 R08: 0000000000000000 R09: 0000000000000000 [ 479.175601][T13884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.175615][T13884] R13: 00007fabe2fa6038 R14: 00007fabe2fa5fa0 R15: 00007ffd6f7939d8 [ 479.175635][T13884] [ 479.566417][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2866'. [ 479.575753][T13891] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2866'. [ 479.761309][ T28] audit: type=1400 audit(5353031270.690:3906): avc: denied { write } for pid=13888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.784388][ T28] audit: type=1400 audit(5353031270.710:3907): avc: denied { write } for pid=13905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.818552][T13911] loop9: detected capacity change from 0 to 512 [ 479.830726][T13902] loop5: detected capacity change from 0 to 512 [ 479.837498][T13902] msdos: Unknown parameter 'dos1xflnodots' [ 479.912856][T13911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.024615][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.330257][ T28] audit: type=1400 audit(5353031271.330:3908): avc: denied { write } for pid=13927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.417285][ T28] audit: type=1400 audit(5353031271.410:3909): avc: denied { write } for pid=13944 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.623880][T13951] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2877'. [ 480.716563][T13955] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2879'. [ 480.752180][T13957] loop7: detected capacity change from 0 to 1024 [ 480.769779][T13957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.791259][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.436716][T13987] sg_write: data in/out 3072/136 bytes for SCSI command 0x0-- guessing data in; [ 481.436716][T13987] program syz.9.2890 not setting count and/or reply_len properly [ 481.840405][T13991] loop9: detected capacity change from 0 to 512 [ 481.865713][T13991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.878285][T13991] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.030612][ T28] audit: type=1400 audit(5353031272.890:3910): avc: denied { write } for pid=13988 comm="syz.9.2891" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.074928][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2892'. [ 482.083932][T13996] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2892'. [ 482.290356][T14002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2895'. [ 482.303412][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 482.328988][ T28] audit: type=1326 audit(5353031273.260:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.1.2895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e2f1de99 code=0x7ffc0000 [ 482.356400][ T28] audit: type=1326 audit(5353031273.260:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.1.2895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e2f1de99 code=0x7ffc0000 [ 482.393134][ T28] audit: type=1326 audit(5353031273.260:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.1.2895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e2f1de99 code=0x7ffc0000 [ 482.422981][T13998] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 482.430797][T13998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2893'. [ 482.447540][T13998] geneve4: entered promiscuous mode [ 482.505182][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.554571][T14017] dvmrp1: entered allmulticast mode [ 482.612203][T14015] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 482.642186][T14015] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 482.642186][T14015] program syz.7.2900 not setting count and/or reply_len properly [ 482.996668][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 482.996686][ T28] audit: type=1400 audit(5353031273.970:3983): avc: denied { ioctl } for pid=14030 comm="syz.1.2908" path="/dev/uhid" dev="devtmpfs" ino=251 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 483.146324][T14076] loop5: detected capacity change from 0 to 512 [ 483.201560][T14076] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2922: inode has both inline data and extents flags [ 483.227549][T14076] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.227910][T14076] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2922: couldn't read orphan inode 15 (err -117) [ 483.252525][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 483.252555][ C0] EXT4-fs (loop5): initial error at time 5353031274: ext4_orphan_get:1399: inode 15 [ 483.252906][ C0] EXT4-fs (loop5): last error at time 5353031274: ext4_orphan_get:1399: inode 15 [ 483.360751][T14076] loop5: lost filesystem error report for type 5 error -117 [ 483.395448][T14076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.488917][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.048721][T14087] loop5: detected capacity change from 0 to 512 [ 484.140576][T14087] EXT4-fs: Ignoring removed i_version option [ 484.166396][T14087] EXT4-fs: Ignoring removed nobh option [ 484.238309][T14087] EXT4-fs (loop5): orphan cleanup on readonly fs [ 484.245301][T14087] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2923: EA inode hash validation failed [ 484.257937][T14087] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.2923: corrupted inode contents [ 484.269852][T14087] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.270075][T14087] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.2923: mark_inode_dirty error [ 484.290541][T14087] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.292468][T14087] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.2923: corrupted inode contents [ 484.313587][T14087] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.313752][T14087] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.2923: mark_inode_dirty error [ 484.334794][T14087] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.334984][T14087] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.2923: mark inode dirty (error -117) [ 484.344198][ C1] EXT4-fs (loop5): error count since last fsck: 4 [ 484.344265][ C1] EXT4-fs (loop5): initial error at time 5353031275: ext4_do_update_inode:5742: inode 15 [ 484.345608][ C1] EXT4-fs (loop5): last error at time 5353031275: ext4_xattr_delete_inode:3001: inode 15 [ 484.399092][T14093] __nla_validate_parse: 6 callbacks suppressed [ 484.399111][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 484.418031][T14087] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.418234][T14087] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 484.436419][T14087] EXT4-fs (loop5): 1 orphan inode deleted [ 484.442599][T14087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 484.710654][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.721373][T14095] loop7: detected capacity change from 0 to 1024 [ 484.739875][ T28] audit: type=1400 audit(5353031275.730:3984): avc: denied { mounton } for pid=14097 comm="syz.9.2929" path="/35/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 484.765123][T14099] loop9: detected capacity change from 0 to 512 [ 484.772063][T14095] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 484.781532][T14101] FAULT_INJECTION: forcing a failure. [ 484.781532][T14101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.795494][T14101] CPU: 1 UID: 0 PID: 14101 Comm: syz.1.2931 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 484.795563][T14101] Tainted: [W]=WARN [ 484.795570][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 484.795583][T14101] Call Trace: [ 484.795591][T14101] [ 484.795599][T14101] __dump_stack+0x1d/0x30 [ 484.795625][T14101] dump_stack_lvl+0x95/0xd0 [ 484.795651][T14101] dump_stack+0x15/0x1b [ 484.795732][T14101] should_fail_ex+0x25e/0x270 [ 484.795797][T14101] should_fail+0xb/0x20 [ 484.795892][T14101] should_fail_usercopy+0x1a/0x20 [ 484.795921][T14101] _copy_from_iter+0xcc/0xe70 [ 484.796033][T14101] ? __alloc_skb+0x511/0x6f0 [ 484.796076][T14101] ? __alloc_skb+0x205/0x6f0 [ 484.796188][T14101] netlink_sendmsg+0x4a4/0x6f0 [ 484.796222][T14101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.796251][T14101] ____sys_sendmsg+0x532/0x580 [ 484.796290][T14101] ___sys_sendmsg+0x195/0x1e0 [ 484.796377][T14101] __x64_sys_sendmsg+0xd4/0x160 [ 484.796414][T14101] x64_sys_call+0x194c/0x3020 [ 484.796501][T14101] do_syscall_64+0x136/0x3c0 [ 484.796529][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.796556][T14101] RIP: 0033:0x7f70e2f1de99 [ 484.796577][T14101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.796632][T14101] RSP: 002b:00007f70e1977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.796660][T14101] RAX: ffffffffffffffda RBX: 00007f70e31a5fa0 RCX: 00007f70e2f1de99 [ 484.796676][T14101] RDX: 0000000020000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 484.796691][T14101] RBP: 00007f70e1977090 R08: 0000000000000000 R09: 0000000000000000 [ 484.796708][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.796721][T14101] R13: 00007f70e31a6038 R14: 00007f70e31a5fa0 R15: 00007ffc06702348 [ 484.796748][T14101] [ 484.797368][T14099] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #17: comm syz.9.2929: iget: immutable or append flags not allowed on symlinks [ 485.006757][T14099] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 485.008880][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 485.020633][T14095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.042461][ C1] EXT4-fs (loop9): initial error at time 5353031276: ext4_orphan_get:1399: inode 17 [ 485.053310][ C1] EXT4-fs (loop9): last error at time 5353031276: ext4_orphan_get:1399: inode 17 [ 485.062718][T14099] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2929: couldn't read orphan inode 17 (err -117) [ 485.074653][T14099] loop9: lost filesystem error report for type 5 error -117 [ 485.075385][T14099] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.129579][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.192510][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.298095][ T28] audit: type=1400 audit(5353031276.290:3985): avc: denied { unmount } for pid=13222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 485.398371][T14123] loop9: detected capacity change from 0 to 1024 [ 485.443923][T14123] EXT4-fs: Mount option(s) incompatible with ext2 [ 485.770548][ T28] audit: type=1400 audit(5353031276.760:3986): avc: denied { watch_reads } for pid=14145 comm="syz.1.2946" path="/63" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 485.804391][T14148] netlink: 'syz.7.2947': attribute type 1 has an invalid length. [ 486.020945][T14160] netlink: 480 bytes leftover after parsing attributes in process `syz.1.2949'. [ 486.070758][T14154] gretap1: entered allmulticast mode [ 486.126322][T14154] bond6: (slave gretap1): making interface the new active one [ 486.181133][T14154] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 486.701067][T14175] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 486.742486][ T28] audit: type=1400 audit(5353031277.690:3987): avc: denied { bind } for pid=14167 comm="syz.1.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 486.834517][T14170] loop7: detected capacity change from 0 to 512 [ 486.882196][T14170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 486.926415][T14170] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 486.964949][T14170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 487.108368][T14170] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 487.135036][T14170] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 487.163575][T14170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 487.253537][T14170] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2953: dx entry: limit 65535 != root limit 120 [ 487.265924][T14170] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2953: Corrupt directory, running e2fsck is recommended [ 487.310688][T14185] xt_time: unknown flags 0xc [ 487.322717][ T8414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.555844][T14190] loop7: detected capacity change from 0 to 164 [ 487.573290][ T28] audit: type=1400 audit(5353031278.520:3988): avc: denied { write } for pid=14196 comm="syz.9.2960" path="socket:[43828]" dev="sockfs" ino=43828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 487.603973][T14198] xt_TCPMSS: Only works on TCP SYN packets [ 487.716049][ T28] audit: type=1326 audit(5353031278.570:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.9.2960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe2d1de99 code=0x7ffc0000 [ 487.741971][ T28] audit: type=1326 audit(5353031278.570:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.9.2960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe2d1de99 code=0x7ffc0000 [ 487.759563][T14204] loop5: detected capacity change from 0 to 2048 [ 487.767549][ T28] audit: type=1326 audit(5353031278.570:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.9.2960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe2d1de99 code=0x7ffc0000 [ 487.803029][ T28] audit: type=1326 audit(5353031278.570:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.9.2960" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabe2cde6ce code=0x7ffc0000 [ 487.837626][T14197] loop9: detected capacity change from 0 to 1764 [ 487.852756][T14197] ISOFS: Bad logical zone size 1280 [ 487.866752][T14204] loop5: p1 < > p2 p3 < > p4 < p5 > [ 487.874219][T14204] loop5: partition table partially beyond EOD, truncated [ 487.891245][T14204] loop5: p1 start 3405774849 is beyond EOD, truncated [ 487.898738][T14204] loop5: p3 start 4225 is beyond EOD, truncated [ 488.078912][T14212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 488.085498][T14212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.095683][T14212] vhci_hcd vhci_hcd.0: Device attached [ 488.194882][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2962'. [ 488.507759][T14220] vhci_hcd: connection closed [ 488.536315][ T7862] vhci_hcd vhci_hcd.1: stop threads [ 488.568582][ T7862] vhci_hcd vhci_hcd.1: release socket [ 488.589854][ T7862] vhci_hcd vhci_hcd.1: disconnect device [ 488.765760][T14238] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 488.784760][T14238] 8021q: adding VLAN 0 to HW filter on device bond10 [ 488.802786][T14238] batman_adv: batadv0: Removing interface: dummy0 [ 488.814882][T14238] bond10: (slave dummy0): making interface the new active one [ 488.823791][T14238] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 489.225309][ T3402] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 489.232720][ T3402] usb 3-1: enqueue for inactive port 0 [ 489.238367][ T3402] usb 3-1: enqueue for inactive port 0 [ 489.243954][ T3402] usb 3-1: enqueue for inactive port 0 [ 489.423257][T14250] loop9: detected capacity change from 0 to 512 [ 489.430063][T14250] EXT4-fs: inline encryption not supported [ 489.435890][T14250] EXT4-fs: inline encryption not supported [ 489.445927][T14250] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 489.730247][ T3402] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 489.830930][T14250] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 489.845538][T14250] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2978: bg 0: block 248: padding at end of block bitmap is not set [ 489.859869][T14250] loop9: lost filesystem error report for type 5 error -117 [ 489.860150][T14250] __quota_error: 78 callbacks suppressed [ 489.860167][T14250] Quota error (device loop9): write_blk: dquota write failed [ 489.880469][T14250] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 489.890299][T14250] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.2978: Failed to acquire dquot type 1 [ 489.901705][T14250] loop9: lost filesystem error report for type 5 error -28 [ 489.902489][T14250] EXT4-fs (loop9): 1 truncate cleaned up [ 489.918015][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 489.918077][ C0] EXT4-fs (loop9): last error at time 5353031280: ext4_acquire_dquot:7041 [ 489.964838][T14264] macsec1: entered promiscuous mode [ 489.984775][T14264] bridge0: entered promiscuous mode [ 490.018630][T14250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 490.061417][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 490.089222][T14267] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2983'. [ 490.110813][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.132695][T14271] loop5: detected capacity change from 0 to 512 [ 490.168255][T14271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.184801][T14271] FAULT_INJECTION: forcing a failure. [ 490.184801][T14271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.198092][T14271] CPU: 0 UID: 0 PID: 14271 Comm: syz.5.2985 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 490.198132][T14271] Tainted: [W]=WARN [ 490.198142][T14271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 490.198157][T14271] Call Trace: [ 490.198265][T14271] [ 490.198276][T14271] __dump_stack+0x1d/0x30 [ 490.198306][T14271] dump_stack_lvl+0x95/0xd0 [ 490.198332][T14271] dump_stack+0x15/0x1b [ 490.198357][T14271] should_fail_ex+0x25e/0x270 [ 490.198484][T14271] should_fail+0xb/0x20 [ 490.198515][T14271] should_fail_usercopy+0x1a/0x20 [ 490.198551][T14271] _copy_from_user+0x1c/0xb0 [ 490.198576][T14271] ___sys_sendmsg+0xc1/0x1e0 [ 490.198690][T14271] __x64_sys_sendmsg+0xd4/0x160 [ 490.198807][T14271] x64_sys_call+0x194c/0x3020 [ 490.198879][T14271] do_syscall_64+0x136/0x3c0 [ 490.198906][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.198944][T14271] RIP: 0033:0x7f5136f3de99 [ 490.198963][T14271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.198988][T14271] RSP: 002b:00007f5135997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.199055][T14271] RAX: ffffffffffffffda RBX: 00007f51371c5fa0 RCX: 00007f5136f3de99 [ 490.199074][T14271] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000003 [ 490.199096][T14271] RBP: 00007f5135997090 R08: 0000000000000000 R09: 0000000000000000 [ 490.199176][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.199192][T14271] R13: 00007f51371c6038 R14: 00007f51371c5fa0 R15: 00007fff97602098 [ 490.199217][T14271] [ 490.447659][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.458560][T13222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 490.515286][T14276] loop5: detected capacity change from 0 to 128 [ 490.613418][ C1] ================================================================== [ 490.621539][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 490.628053][ C1] [ 490.630387][ C1] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 0: [ 490.638460][ C1] vxcan_xmit+0x2ba/0x370 [ 490.642821][ C1] dev_hard_start_xmit+0x10c/0x380 [ 490.647933][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 490.652887][ C1] can_send+0x584/0x720 [ 490.657147][ C1] can_can_gw_rcv+0x7c6/0x820 [ 490.661817][ C1] can_rcv_filter+0xc3/0x480 [ 490.666410][ C1] can_receive+0x13e/0x190 [ 490.670840][ C1] can_rcv+0x17d/0x1f0 [ 490.674905][ C1] process_backlog+0x354/0x680 [ 490.679667][ C1] __napi_poll+0x61/0x300 [ 490.683989][ C1] net_rx_action+0x456/0x930 [ 490.688573][ C1] handle_softirqs+0xb9/0x280 [ 490.693270][ C1] do_softirq+0x45/0x60 [ 490.697414][ C1] __local_bh_enable_ip+0x70/0x80 [ 490.702430][ C1] __alloc_skb+0x6b1/0x6f0 [ 490.706864][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 490.712506][ C1] process_scheduled_works+0x4d4/0x9a0 [ 490.718001][ C1] worker_thread+0x569/0x750 [ 490.722614][ C1] kthread+0x221/0x270 [ 490.726673][ C1] ret_from_fork+0x146/0x330 [ 490.731259][ C1] ret_from_fork_asm+0x1a/0x30 [ 490.736015][ C1] [ 490.738334][ C1] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 1: [ 490.746399][ C1] vxcan_xmit+0x2ba/0x370 [ 490.750739][ C1] dev_hard_start_xmit+0x10c/0x380 [ 490.755848][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 490.760791][ C1] can_send+0x584/0x720 [ 490.764958][ C1] can_can_gw_rcv+0x7c6/0x820 [ 490.769734][ C1] can_rcv_filter+0xc3/0x480 [ 490.774342][ C1] can_receive+0x13e/0x190 [ 490.778760][ C1] can_rcv+0x17d/0x1f0 [ 490.782838][ C1] process_backlog+0x354/0x680 [ 490.787601][ C1] __napi_poll+0x61/0x300 [ 490.791942][ C1] net_rx_action+0x456/0x930 [ 490.796562][ C1] handle_softirqs+0xb9/0x280 [ 490.801260][ C1] run_ksoftirqd+0x1c/0x30 [ 490.805683][ C1] smpboot_thread_fn+0x32a/0x510 [ 490.810619][ C1] kthread+0x221/0x270 [ 490.814701][ C1] ret_from_fork+0x146/0x330 [ 490.819292][ C1] ret_from_fork_asm+0x1a/0x30 [ 490.824063][ C1] [ 490.826394][ C1] value changed: 0x0000000000009bc0 -> 0x0000000000009bc1 [ 490.833495][ C1] [ 490.835822][ C1] Reported by Kernel Concurrency Sanitizer on: [ 490.841967][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 490.852740][ C1] Tainted: [W]=WARN [ 490.856531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 490.866598][ C1] ================================================================== [ 490.876881][ C1] ================================================================== [ 490.884995][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 490.892223][ C1] [ 490.894555][ C1] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 0: [ 490.902732][ C1] can_can_gw_rcv+0x812/0x820 [ 490.907432][ C1] can_rcv_filter+0xc3/0x480 [ 490.912053][ C1] can_receive+0x13e/0x190 [ 490.916500][ C1] can_rcv+0x17d/0x1f0 [ 490.920597][ C1] process_backlog+0x354/0x680 [ 490.925388][ C1] __napi_poll+0x61/0x300 [ 490.929838][ C1] net_rx_action+0x456/0x930 [ 490.934458][ C1] handle_softirqs+0xb9/0x280 [ 490.939158][ C1] do_softirq+0x45/0x60 [ 490.943364][ C1] __local_bh_enable_ip+0x70/0x80 [ 490.948412][ C1] __alloc_skb+0x6b1/0x6f0 [ 490.952855][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 490.958548][ C1] process_scheduled_works+0x4d4/0x9a0 [ 490.964032][ C1] worker_thread+0x569/0x750 [ 490.968664][ C1] kthread+0x221/0x270 [ 490.972764][ C1] ret_from_fork+0x146/0x330 [ 490.977365][ C1] ret_from_fork_asm+0x1a/0x30 [ 490.982138][ C1] [ 490.984468][ C1] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 1: [ 490.992623][ C1] can_can_gw_rcv+0x812/0x820 [ 490.997306][ C1] can_rcv_filter+0xc3/0x480 [ 491.001906][ C1] can_receive+0x13e/0x190 [ 491.006346][ C1] can_rcv+0x17d/0x1f0 [ 491.010432][ C1] process_backlog+0x354/0x680 [ 491.015298][ C1] __napi_poll+0x61/0x300 [ 491.019630][ C1] net_rx_action+0x456/0x930 [ 491.024236][ C1] handle_softirqs+0xb9/0x280 [ 491.028942][ C1] do_softirq+0x45/0x60 [ 491.033107][ C1] __local_bh_enable_ip+0x70/0x80 [ 491.038156][ C1] __alloc_skb+0x6b1/0x6f0 [ 491.042618][ C1] netlink_alloc_large_skb+0xbf/0xf0 [ 491.047918][ C1] netlink_sendmsg+0x40c/0x6f0 [ 491.052704][ C1] __sys_sendto+0x411/0x470 [ 491.057342][ C1] __x64_sys_sendto+0x76/0x90 [ 491.062035][ C1] x64_sys_call+0x2d35/0x3020 [ 491.066722][ C1] do_syscall_64+0x136/0x3c0 [ 491.071318][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.077221][ C1] [ 491.079547][ C1] value changed: 0x00009c48 -> 0x00009c49 [ 491.085268][ C1] [ 491.087618][ C1] Reported by Kernel Concurrency Sanitizer on: [ 491.093811][ C1] CPU: 1 UID: 0 PID: 14276 Comm: syz.5.2986 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.104755][ C1] Tainted: [W]=WARN [ 491.108560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 491.118797][ C1] ================================================================== [ 491.167119][ C0] ================================================================== [ 491.175242][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 491.181749][ C0] [ 491.184064][ C0] read-write to 0xffff88811a6e8240 of 8 bytes by interrupt on cpu 1: [ 491.192115][ C0] vxcan_xmit+0x2da/0x370 [ 491.196471][ C0] dev_hard_start_xmit+0x10c/0x380 [ 491.201605][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 491.206655][ C0] can_send+0x584/0x720 [ 491.210852][ C0] can_can_gw_rcv+0x7c6/0x820 [ 491.215608][ C0] can_rcv_filter+0xc3/0x480 [ 491.220214][ C0] can_receive+0x13e/0x190 [ 491.224646][ C0] can_rcv+0x17d/0x1f0 [ 491.228728][ C0] process_backlog+0x354/0x680 [ 491.233768][ C0] __napi_poll+0x61/0x300 [ 491.238119][ C0] net_rx_action+0x456/0x930 [ 491.242802][ C0] handle_softirqs+0xb9/0x280 [ 491.247559][ C0] do_softirq+0x45/0x60 [ 491.251722][ C0] __local_bh_enable_ip+0x70/0x80 [ 491.256738][ C0] __alloc_skb+0x6b1/0x6f0 [ 491.261150][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 491.266794][ C0] process_scheduled_works+0x4d4/0x9a0 [ 491.272260][ C0] worker_thread+0x569/0x750 [ 491.276849][ C0] kthread+0x221/0x270 [ 491.280916][ C0] ret_from_fork+0x146/0x330 [ 491.285508][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.290274][ C0] [ 491.292589][ C0] read-write to 0xffff88811a6e8240 of 8 bytes by interrupt on cpu 0: [ 491.300745][ C0] vxcan_xmit+0x2da/0x370 [ 491.305086][ C0] dev_hard_start_xmit+0x10c/0x380 [ 491.310272][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 491.315213][ C0] can_send+0x584/0x720 [ 491.319369][ C0] can_can_gw_rcv+0x7c6/0x820 [ 491.324045][ C0] can_rcv_filter+0xc3/0x480 [ 491.328736][ C0] can_receive+0x13e/0x190 [ 491.333611][ C0] can_rcv+0x17d/0x1f0 [ 491.337739][ C0] process_backlog+0x354/0x680 [ 491.342533][ C0] __napi_poll+0x61/0x300 [ 491.346876][ C0] net_rx_action+0x456/0x930 [ 491.351500][ C0] handle_softirqs+0xb9/0x280 [ 491.356181][ C0] do_softirq+0x45/0x60 [ 491.360348][ C0] __local_bh_enable_ip+0x70/0x80 [ 491.365365][ C0] _raw_read_unlock_bh+0x1b/0x30 [ 491.370315][ C0] wg_socket_send_skb_to_peer+0x10c/0x130 [ 491.376027][ C0] wg_packet_tx_worker+0x12d/0x340 [ 491.381132][ C0] process_scheduled_works+0x4d4/0x9a0 [ 491.386607][ C0] worker_thread+0x569/0x750 [ 491.391192][ C0] kthread+0x221/0x270 [ 491.395251][ C0] ret_from_fork+0x146/0x330 [ 491.399850][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.404619][ C0] [ 491.406937][ C0] value changed: 0x000000000005ca68 -> 0x000000000005ca70 [ 491.414030][ C0] [ 491.416342][ C0] Reported by Kernel Concurrency Sanitizer on: [ 491.422481][ C0] CPU: 0 UID: 0 PID: 10903 Comm: kworker/0:8 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.433500][ C0] Tainted: [W]=WARN [ 491.437291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 491.447423][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 491.453569][ C0] ================================================================== [ 491.516079][ C1] ================================================================== [ 491.524222][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 491.530728][ C1] [ 491.533042][ C1] read-write to 0xffff88811a6a8238 of 8 bytes by interrupt on cpu 0: [ 491.541095][ C1] vxcan_xmit+0x311/0x370 [ 491.545423][ C1] dev_hard_start_xmit+0x10c/0x380 [ 491.550530][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 491.555470][ C1] can_send+0x584/0x720 [ 491.559650][ C1] can_can_gw_rcv+0x7c6/0x820 [ 491.564335][ C1] can_rcv_filter+0xc3/0x480 [ 491.568927][ C1] can_receive+0x13e/0x190 [ 491.573353][ C1] can_rcv+0x17d/0x1f0 [ 491.577419][ C1] process_backlog+0x354/0x680 [ 491.582170][ C1] __napi_poll+0x61/0x300 [ 491.586490][ C1] net_rx_action+0x456/0x930 [ 491.591161][ C1] handle_softirqs+0xb9/0x280 [ 491.595921][ C1] do_softirq+0x45/0x60 [ 491.600065][ C1] __local_bh_enable_ip+0x70/0x80 [ 491.605165][ C1] update_defense_level+0x594/0x5c0 [ 491.610367][ C1] defense_work_handler+0x1f/0x80 [ 491.615465][ C1] process_scheduled_works+0x4d4/0x9a0 [ 491.620937][ C1] worker_thread+0x569/0x750 [ 491.625548][ C1] kthread+0x221/0x270 [ 491.629627][ C1] ret_from_fork+0x146/0x330 [ 491.634316][ C1] ret_from_fork_asm+0x1a/0x30 [ 491.639076][ C1] [ 491.641498][ C1] read-write to 0xffff88811a6a8238 of 8 bytes by interrupt on cpu 1: [ 491.649552][ C1] vxcan_xmit+0x311/0x370 [ 491.653880][ C1] dev_hard_start_xmit+0x10c/0x380 [ 491.659086][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 491.664038][ C1] can_send+0x584/0x720 [ 491.668194][ C1] can_can_gw_rcv+0x7c6/0x820 [ 491.672879][ C1] can_rcv_filter+0xc3/0x480 [ 491.677462][ C1] can_receive+0x13e/0x190 [ 491.681877][ C1] can_rcv+0x17d/0x1f0 [ 491.685944][ C1] process_backlog+0x354/0x680 [ 491.690699][ C1] __napi_poll+0x61/0x300 [ 491.695019][ C1] net_rx_action+0x456/0x930 [ 491.699598][ C1] handle_softirqs+0xb9/0x280 [ 491.704282][ C1] do_softirq+0x45/0x60 [ 491.708430][ C1] __local_bh_enable_ip+0x70/0x80 [ 491.713538][ C1] update_defense_level+0x594/0x5c0 [ 491.718728][ C1] defense_work_handler+0x1f/0x80 [ 491.723769][ C1] process_scheduled_works+0x4d4/0x9a0 [ 491.729226][ C1] worker_thread+0x569/0x750 [ 491.733830][ C1] kthread+0x221/0x270 [ 491.737893][ C1] ret_from_fork+0x146/0x330 [ 491.742493][ C1] ret_from_fork_asm+0x1a/0x30 [ 491.747251][ C1] [ 491.749563][ C1] value changed: 0x0000000000064f50 -> 0x0000000000064f58 [ 491.756655][ C1] [ 491.758970][ C1] Reported by Kernel Concurrency Sanitizer on: [ 491.765122][ C1] CPU: 1 UID: 0 PID: 3390 Comm: kworker/1:4 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.776063][ C1] Tainted: [W]=WARN [ 491.779857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 491.789910][ C1] Workqueue: events_long defense_work_handler [ 491.795981][ C1] ================================================================== [ 491.996768][ C0] ================================================================== [ 492.004918][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 492.011450][ C0] [ 492.013770][ C0] read-write to 0xffff88811a6a8228 of 8 bytes by interrupt on cpu 1: [ 492.021849][ C0] vxcan_xmit+0x2f7/0x370 [ 492.026194][ C0] dev_hard_start_xmit+0x10c/0x380 [ 492.031391][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 492.036329][ C0] can_send+0x584/0x720 [ 492.040482][ C0] can_can_gw_rcv+0x7c6/0x820 [ 492.045173][ C0] can_rcv_filter+0xc3/0x480 [ 492.049774][ C0] can_receive+0x13e/0x190 [ 492.054185][ C0] can_rcv+0x17d/0x1f0 [ 492.058275][ C0] process_backlog+0x354/0x680 [ 492.063043][ C0] __napi_poll+0x61/0x300 [ 492.067360][ C0] net_rx_action+0x456/0x930 [ 492.071939][ C0] handle_softirqs+0xb9/0x280 [ 492.076640][ C0] do_softirq+0x45/0x60 [ 492.080786][ C0] __local_bh_enable_ip+0x70/0x80 [ 492.085801][ C0] __alloc_skb+0x6b1/0x6f0 [ 492.090226][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 492.095859][ C0] process_scheduled_works+0x4d4/0x9a0 [ 492.101316][ C0] worker_thread+0x569/0x750 [ 492.105909][ C0] kthread+0x221/0x270 [ 492.109966][ C0] ret_from_fork+0x146/0x330 [ 492.114573][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.119333][ C0] [ 492.121647][ C0] read-write to 0xffff88811a6a8228 of 8 bytes by interrupt on cpu 0: [ 492.129697][ C0] vxcan_xmit+0x2f7/0x370 [ 492.134109][ C0] dev_hard_start_xmit+0x10c/0x380 [ 492.139222][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 492.144171][ C0] can_send+0x584/0x720 [ 492.148326][ C0] can_can_gw_rcv+0x7c6/0x820 [ 492.153007][ C0] can_rcv_filter+0xc3/0x480 [ 492.157592][ C0] can_receive+0x13e/0x190 [ 492.162009][ C0] can_rcv+0x17d/0x1f0 [ 492.166077][ C0] process_backlog+0x354/0x680 [ 492.170840][ C0] __napi_poll+0x61/0x300 [ 492.175186][ C0] net_rx_action+0x456/0x930 [ 492.179956][ C0] handle_softirqs+0xb9/0x280 [ 492.184643][ C0] run_ksoftirqd+0x1c/0x30 [ 492.189066][ C0] smpboot_thread_fn+0x32a/0x510 [ 492.194022][ C0] kthread+0x221/0x270 [ 492.198083][ C0] ret_from_fork+0x146/0x330 [ 492.202687][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.207459][ C0] [ 492.209772][ C0] value changed: 0x000000000001047f -> 0x0000000000010480 [ 492.216894][ C0] [ 492.219214][ C0] Reported by Kernel Concurrency Sanitizer on: [ 492.225367][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 492.236214][ C0] Tainted: [W]=WARN [ 492.240014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 492.250060][ C0] ================================================================== [ 492.304960][T14283] loop5: detected capacity change from 0 to 512 [ 492.401649][ T28] audit: type=1400 audit(5353031283.300:4071): avc: denied { setattr } for pid=14275 comm="syz.5.2986" path="socket:[44310]" dev="sockfs" ino=44310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 493.098051][T14283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.678609][ C0] ================================================================== [ 493.686734][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 493.693243][ C0] [ 493.695555][ C0] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 1: [ 493.703605][ C0] vxcan_xmit+0x2ba/0x370 [ 493.707939][ C0] dev_hard_start_xmit+0x10c/0x380 [ 493.713067][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 493.718011][ C0] can_send+0x584/0x720 [ 493.722278][ C0] can_can_gw_rcv+0x7c6/0x820 [ 493.726972][ C0] can_rcv_filter+0xc3/0x480 [ 493.731570][ C0] can_receive+0x13e/0x190 [ 493.735980][ C0] can_rcv+0x17d/0x1f0 [ 493.740050][ C0] process_backlog+0x354/0x680 [ 493.744805][ C0] __napi_poll+0x61/0x300 [ 493.749126][ C0] net_rx_action+0x456/0x930 [ 493.753721][ C0] handle_softirqs+0xb9/0x280 [ 493.758392][ C0] do_softirq+0x45/0x60 [ 493.762547][ C0] __local_bh_enable_ip+0x70/0x80 [ 493.767582][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 493.772527][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 493.778164][ C0] process_scheduled_works+0x4d4/0x9a0 [ 493.783643][ C0] worker_thread+0x569/0x750 [ 493.788254][ C0] kthread+0x221/0x270 [ 493.792340][ C0] ret_from_fork+0x146/0x330 [ 493.796922][ C0] ret_from_fork_asm+0x1a/0x30 [ 493.801685][ C0] [ 493.804105][ C0] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 0: [ 493.812245][ C0] vxcan_xmit+0x2ba/0x370 [ 493.816573][ C0] dev_hard_start_xmit+0x10c/0x380 [ 493.821679][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 493.826612][ C0] can_send+0x584/0x720 [ 493.830762][ C0] can_can_gw_rcv+0x7c6/0x820 [ 493.835515][ C0] can_rcv_filter+0xc3/0x480 [ 493.840130][ C0] can_receive+0x13e/0x190 [ 493.844543][ C0] can_rcv+0x17d/0x1f0 [ 493.848611][ C0] process_backlog+0x354/0x680 [ 493.853378][ C0] __napi_poll+0x61/0x300 [ 493.857701][ C0] net_rx_action+0x456/0x930 [ 493.862293][ C0] handle_softirqs+0xb9/0x280 [ 493.866978][ C0] do_softirq+0x45/0x60 [ 493.871135][ C0] __local_bh_enable_ip+0x70/0x80 [ 493.876156][ C0] kernel_fpu_end+0x6c/0x80 [ 493.880650][ C0] blake2s_compress+0x67/0x16d0 [ 493.885490][ C0] blake2s_final+0x6a/0xc0 [ 493.889899][ C0] wg_noise_handshake_create_initiation+0x514/0x600 [ 493.896500][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 493.902563][ C0] process_scheduled_works+0x4d4/0x9a0 [ 493.908030][ C0] worker_thread+0x569/0x750 [ 493.912644][ C0] kthread+0x221/0x270 [ 493.916702][ C0] ret_from_fork+0x146/0x330 [ 493.921285][ C0] ret_from_fork_asm+0x1a/0x30 [ 493.926042][ C0] [ 493.928361][ C0] value changed: 0x00000000000296f0 -> 0x00000000000296f1 [ 493.935655][ C0] [ 493.937985][ C0] Reported by Kernel Concurrency Sanitizer on: [ 493.944155][ C0] CPU: 0 UID: 0 PID: 7862 Comm: kworker/u8:28 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 493.955365][ C0] Tainted: [W]=WARN [ 493.959173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 493.969235][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 493.976206][ C0] ================================================================== [ 494.061839][ C1] ================================================================== [ 494.069977][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 494.077203][ C1] [ 494.079534][ C1] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 0: [ 494.087619][ C1] can_can_gw_rcv+0x812/0x820 [ 494.092406][ C1] can_rcv_filter+0xc3/0x480 [ 494.097026][ C1] can_receive+0x13e/0x190 [ 494.101477][ C1] can_rcv+0x17d/0x1f0 [ 494.105596][ C1] process_backlog+0x354/0x680 [ 494.110386][ C1] __napi_poll+0x61/0x300 [ 494.114732][ C1] net_rx_action+0x456/0x930 [ 494.119338][ C1] handle_softirqs+0xb9/0x280 [ 494.124038][ C1] do_softirq+0x45/0x60 [ 494.128211][ C1] __local_bh_enable_ip+0x70/0x80 [ 494.133254][ C1] __alloc_skb+0x6b1/0x6f0 [ 494.137694][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 494.143355][ C1] process_scheduled_works+0x4d4/0x9a0 [ 494.148932][ C1] worker_thread+0x569/0x750 [ 494.153556][ C1] kthread+0x221/0x270 [ 494.157653][ C1] ret_from_fork+0x146/0x330 [ 494.162274][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.167075][ C1] [ 494.169425][ C1] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 1: [ 494.177512][ C1] can_can_gw_rcv+0x812/0x820 [ 494.182319][ C1] can_rcv_filter+0xc3/0x480 [ 494.186955][ C1] can_receive+0x13e/0x190 [ 494.191588][ C1] can_rcv+0x17d/0x1f0 [ 494.195677][ C1] process_backlog+0x354/0x680 [ 494.200467][ C1] __napi_poll+0x61/0x300 [ 494.204818][ C1] net_rx_action+0x456/0x930 [ 494.209515][ C1] handle_softirqs+0xb9/0x280 [ 494.214213][ C1] do_softirq+0x45/0x60 [ 494.218476][ C1] __local_bh_enable_ip+0x70/0x80 [ 494.223518][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 494.228482][ C1] batadv_tt_local_purge+0x1a7/0x1f0 [ 494.233827][ C1] batadv_tt_purge+0x2b/0x610 [ 494.238525][ C1] process_scheduled_works+0x4d4/0x9a0 [ 494.244015][ C1] worker_thread+0x569/0x750 [ 494.248658][ C1] kthread+0x221/0x270 [ 494.252918][ C1] ret_from_fork+0x146/0x330 [ 494.257540][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.262332][ C1] [ 494.264672][ C1] value changed: 0x00029ce7 -> 0x00029ce8 [ 494.270405][ C1] [ 494.272747][ C1] Reported by Kernel Concurrency Sanitizer on: [ 494.278913][ C1] CPU: 1 UID: 0 PID: 7851 Comm: kworker/u8:23 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 494.290068][ C1] Tainted: [W]=WARN [ 494.293892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.303977][ C1] Workqueue: bat_events batadv_tt_purge [ 494.309561][ C1] ================================================================== [ 494.360289][ C0] ================================================================== [ 494.368415][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 494.374941][ C0] [ 494.377258][ C0] read-write to 0xffff88811a6e8240 of 8 bytes by interrupt on cpu 1: [ 494.385397][ C0] vxcan_xmit+0x2da/0x370 [ 494.389733][ C0] dev_hard_start_xmit+0x10c/0x380 [ 494.394843][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 494.399778][ C0] can_send+0x584/0x720 [ 494.403943][ C0] can_can_gw_rcv+0x7c6/0x820 [ 494.408688][ C0] can_rcv_filter+0xc3/0x480 [ 494.413305][ C0] can_receive+0x13e/0x190 [ 494.417725][ C0] can_rcv+0x17d/0x1f0 [ 494.421980][ C0] process_backlog+0x354/0x680 [ 494.426745][ C0] __napi_poll+0x61/0x300 [ 494.431068][ C0] net_rx_action+0x456/0x930 [ 494.435650][ C0] handle_softirqs+0xb9/0x280 [ 494.440327][ C0] do_softirq+0x45/0x60 [ 494.444488][ C0] __local_bh_enable_ip+0x70/0x80 [ 494.449510][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 494.454482][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 494.460213][ C0] process_scheduled_works+0x4d4/0x9a0 [ 494.465673][ C0] worker_thread+0x569/0x750 [ 494.470266][ C0] kthread+0x221/0x270 [ 494.474325][ C0] ret_from_fork+0x146/0x330 [ 494.478916][ C0] ret_from_fork_asm+0x1a/0x30 [ 494.483703][ C0] [ 494.486017][ C0] read-write to 0xffff88811a6e8240 of 8 bytes by interrupt on cpu 0: [ 494.494085][ C0] vxcan_xmit+0x2da/0x370 [ 494.498440][ C0] dev_hard_start_xmit+0x10c/0x380 [ 494.503576][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 494.508541][ C0] can_send+0x584/0x720 [ 494.512707][ C0] can_can_gw_rcv+0x7c6/0x820 [ 494.517374][ C0] can_rcv_filter+0xc3/0x480 [ 494.521968][ C0] can_receive+0x13e/0x190 [ 494.526555][ C0] can_rcv+0x17d/0x1f0 [ 494.530618][ C0] process_backlog+0x354/0x680 [ 494.535374][ C0] __napi_poll+0x61/0x300 [ 494.539717][ C0] net_rx_action+0x456/0x930 [ 494.544300][ C0] handle_softirqs+0xb9/0x280 [ 494.548974][ C0] run_ksoftirqd+0x1c/0x30 [ 494.553403][ C0] smpboot_thread_fn+0x32a/0x510 [ 494.558343][ C0] kthread+0x221/0x270 [ 494.562416][ C0] ret_from_fork+0x146/0x330 [ 494.567031][ C0] ret_from_fork_asm+0x1a/0x30 [ 494.571799][ C0] [ 494.574129][ C0] value changed: 0x0000000000174d88 -> 0x0000000000174d90 [ 494.581224][ C0] [ 494.583540][ C0] Reported by Kernel Concurrency Sanitizer on: [ 494.589708][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 494.600464][ C0] Tainted: [W]=WARN [ 494.604255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.614306][ C0] ================================================================== [ 494.949386][ T4012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.089484][ C1] ================================================================== [ 495.097609][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 495.104130][ C1] [ 495.106466][ C1] read-write to 0xffff88811a6a8228 of 8 bytes by interrupt on cpu 0: [ 495.114519][ C1] vxcan_xmit+0x2f7/0x370 [ 495.118853][ C1] dev_hard_start_xmit+0x10c/0x380 [ 495.123976][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 495.128922][ C1] can_send+0x584/0x720 [ 495.133101][ C1] can_can_gw_rcv+0x7c6/0x820 [ 495.137780][ C1] can_rcv_filter+0xc3/0x480 [ 495.142468][ C1] can_receive+0x13e/0x190 [ 495.147069][ C1] can_rcv+0x17d/0x1f0 [ 495.151240][ C1] process_backlog+0x354/0x680 [ 495.156096][ C1] __napi_poll+0x61/0x300 [ 495.160416][ C1] net_rx_action+0x456/0x930 [ 495.165001][ C1] handle_softirqs+0xb9/0x280 [ 495.169676][ C1] do_softirq+0x45/0x60 [ 495.173822][ C1] __local_bh_enable_ip+0x70/0x80 [ 495.178843][ C1] __alloc_skb+0x6b1/0x6f0 [ 495.183269][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 495.188902][ C1] process_scheduled_works+0x4d4/0x9a0 [ 495.194462][ C1] worker_thread+0x569/0x750 [ 495.199079][ C1] kthread+0x221/0x270 [ 495.203238][ C1] ret_from_fork+0x146/0x330 [ 495.207826][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.212688][ C1] [ 495.215007][ C1] read-write to 0xffff88811a6a8228 of 8 bytes by interrupt on cpu 1: [ 495.223320][ C1] vxcan_xmit+0x2f7/0x370 [ 495.227757][ C1] dev_hard_start_xmit+0x10c/0x380 [ 495.232878][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 495.237892][ C1] can_send+0x584/0x720 [ 495.242061][ C1] can_can_gw_rcv+0x7c6/0x820 [ 495.246727][ C1] can_rcv_filter+0xc3/0x480 [ 495.251314][ C1] can_receive+0x13e/0x190 [ 495.255729][ C1] can_rcv+0x17d/0x1f0 [ 495.259968][ C1] process_backlog+0x354/0x680 [ 495.264722][ C1] __napi_poll+0x61/0x300 [ 495.269135][ C1] net_rx_action+0x456/0x930 [ 495.273730][ C1] handle_softirqs+0xb9/0x280 [ 495.278400][ C1] do_softirq+0x45/0x60 [ 495.282571][ C1] __local_bh_enable_ip+0x70/0x80 [ 495.287593][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 495.292526][ C1] batadv_tt_local_purge+0x1a7/0x1f0 [ 495.297807][ C1] batadv_tt_purge+0x2b/0x610 [ 495.302488][ C1] process_scheduled_works+0x4d4/0x9a0 [ 495.307958][ C1] worker_thread+0x569/0x750 [ 495.312565][ C1] kthread+0x221/0x270 [ 495.316899][ C1] ret_from_fork+0x146/0x330 [ 495.321498][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.326256][ C1] [ 495.328573][ C1] value changed: 0x00000000000378a6 -> 0x00000000000378a7 [ 495.335677][ C1] [ 495.337998][ C1] Reported by Kernel Concurrency Sanitizer on: [ 495.344234][ C1] CPU: 1 UID: 0 PID: 7851 Comm: kworker/u8:23 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 495.355425][ C1] Tainted: [W]=WARN [ 495.359228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 495.369545][ C1] Workqueue: bat_events batadv_tt_purge [ 495.375107][ C1] ================================================================== [ 495.437919][ C1] ================================================================== [ 495.446406][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 495.452916][ C1] [ 495.455232][ C1] read-write to 0xffff88811a6a8238 of 8 bytes by interrupt on cpu 0: [ 495.463282][ C1] vxcan_xmit+0x311/0x370 [ 495.467676][ C1] dev_hard_start_xmit+0x10c/0x380 [ 495.472815][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 495.477757][ C1] can_send+0x584/0x720 [ 495.481926][ C1] can_can_gw_rcv+0x7c6/0x820 [ 495.486599][ C1] can_rcv_filter+0xc3/0x480 [ 495.491190][ C1] can_receive+0x13e/0x190 [ 495.495603][ C1] can_rcv+0x17d/0x1f0 [ 495.499668][ C1] process_backlog+0x354/0x680 [ 495.504422][ C1] __napi_poll+0x61/0x300 [ 495.508751][ C1] net_rx_action+0x456/0x930 [ 495.513345][ C1] handle_softirqs+0xb9/0x280 [ 495.518024][ C1] run_ksoftirqd+0x1c/0x30 [ 495.522459][ C1] smpboot_thread_fn+0x32a/0x510 [ 495.527393][ C1] kthread+0x221/0x270 [ 495.531452][ C1] ret_from_fork+0x146/0x330 [ 495.536046][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.540803][ C1] [ 495.543124][ C1] read-write to 0xffff88811a6a8238 of 8 bytes by interrupt on cpu 1: [ 495.551190][ C1] vxcan_xmit+0x311/0x370 [ 495.555527][ C1] dev_hard_start_xmit+0x10c/0x380 [ 495.560632][ C1] __dev_queue_xmit+0xb97/0x1e60 [ 495.565567][ C1] can_send+0x584/0x720 [ 495.569721][ C1] can_can_gw_rcv+0x7c6/0x820 [ 495.574394][ C1] can_rcv_filter+0xc3/0x480 [ 495.578984][ C1] can_receive+0x13e/0x190 [ 495.583409][ C1] can_rcv+0x17d/0x1f0 [ 495.587472][ C1] process_backlog+0x354/0x680 [ 495.592227][ C1] __napi_poll+0x61/0x300 [ 495.596545][ C1] net_rx_action+0x456/0x930 [ 495.601123][ C1] handle_softirqs+0xb9/0x280 [ 495.605792][ C1] do_softirq+0x45/0x60 [ 495.609955][ C1] __local_bh_enable_ip+0x70/0x80 [ 495.614996][ C1] __alloc_skb+0x6b1/0x6f0 [ 495.619406][ C1] alloc_skb_with_frags+0x7e/0x3d0 [ 495.624511][ C1] sock_alloc_send_pskb+0x44d/0x500 [ 495.629706][ C1] unix_dgram_sendmsg+0x384/0x1030 [ 495.634895][ C1] __sys_sendto+0x411/0x470 [ 495.639393][ C1] __x64_sys_sendto+0x76/0x90 [ 495.644063][ C1] x64_sys_call+0x2d35/0x3020 [ 495.648739][ C1] do_syscall_64+0x136/0x3c0 [ 495.653330][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.659220][ C1] [ 495.661539][ C1] value changed: 0x00000000001c4b90 -> 0x00000000001c4b98 [ 495.668640][ C1] [ 495.670960][ C1] Reported by Kernel Concurrency Sanitizer on: [ 495.677115][ C1] CPU: 1 UID: 0 PID: 2969 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 495.687521][ C1] Tainted: [W]=WARN [ 495.691313][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 495.701359][ C1] ================================================================== [ 496.717898][ C0] ================================================================== [ 496.726028][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 496.732533][ C0] [ 496.734848][ C0] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 1: [ 496.742898][ C0] vxcan_xmit+0x2ba/0x370 [ 496.747232][ C0] dev_hard_start_xmit+0x10c/0x380 [ 496.752340][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 496.757277][ C0] can_send+0x584/0x720 [ 496.761516][ C0] can_can_gw_rcv+0x7c6/0x820 [ 496.766191][ C0] can_rcv_filter+0xc3/0x480 [ 496.770777][ C0] can_receive+0x13e/0x190 [ 496.775190][ C0] can_rcv+0x17d/0x1f0 [ 496.779264][ C0] process_backlog+0x354/0x680 [ 496.784032][ C0] __napi_poll+0x61/0x300 [ 496.788360][ C0] net_rx_action+0x456/0x930 [ 496.792954][ C0] handle_softirqs+0xb9/0x280 [ 496.797641][ C0] run_ksoftirqd+0x1c/0x30 [ 496.802070][ C0] smpboot_thread_fn+0x32a/0x510 [ 496.807006][ C0] kthread+0x221/0x270 [ 496.811066][ C0] ret_from_fork+0x146/0x330 [ 496.815652][ C0] ret_from_fork_asm+0x1a/0x30 [ 496.820429][ C0] [ 496.822743][ C0] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 0: [ 496.830794][ C0] vxcan_xmit+0x2ba/0x370 [ 496.835120][ C0] dev_hard_start_xmit+0x10c/0x380 [ 496.840242][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 496.845201][ C0] can_send+0x584/0x720 [ 496.849354][ C0] can_can_gw_rcv+0x7c6/0x820 [ 496.854022][ C0] can_rcv_filter+0xc3/0x480 [ 496.858612][ C0] can_receive+0x13e/0x190 [ 496.863039][ C0] can_rcv+0x17d/0x1f0 [ 496.867101][ C0] process_backlog+0x354/0x680 [ 496.871861][ C0] __napi_poll+0x61/0x300 [ 496.876184][ C0] net_rx_action+0x456/0x930 [ 496.880765][ C0] handle_softirqs+0xb9/0x280 [ 496.885459][ C0] do_softirq+0x45/0x60 [ 496.889608][ C0] __local_bh_enable_ip+0x70/0x80 [ 496.894623][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 496.899552][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 496.905198][ C0] process_scheduled_works+0x4d4/0x9a0 [ 496.910663][ C0] worker_thread+0x569/0x750 [ 496.915248][ C0] kthread+0x221/0x270 [ 496.919314][ C0] ret_from_fork+0x146/0x330 [ 496.923900][ C0] ret_from_fork_asm+0x1a/0x30 [ 496.928667][ C0] [ 496.930988][ C0] value changed: 0x000000000004bcd0 -> 0x000000000004bcd1 [ 496.938181][ C0] [ 496.940502][ C0] Reported by Kernel Concurrency Sanitizer on: [ 496.946641][ C0] CPU: 0 UID: 0 PID: 7852 Comm: kworker/u8:24 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 496.957765][ C0] Tainted: [W]=WARN [ 496.961567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 496.971612][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 496.978379][ C0] ================================================================== [ 497.123484][ C0] ================================================================== [ 497.131789][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 497.139020][ C0] [ 497.141363][ C0] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 1: [ 497.149444][ C0] can_can_gw_rcv+0x812/0x820 [ 497.154146][ C0] can_rcv_filter+0xc3/0x480 [ 497.158855][ C0] can_receive+0x13e/0x190 [ 497.163302][ C0] can_rcv+0x17d/0x1f0 [ 497.167398][ C0] process_backlog+0x354/0x680 [ 497.172192][ C0] __napi_poll+0x61/0x300 [ 497.176541][ C0] net_rx_action+0x456/0x930 [ 497.181330][ C0] handle_softirqs+0xb9/0x280 [ 497.186038][ C0] do_softirq+0x45/0x60 [ 497.190218][ C0] __local_bh_enable_ip+0x70/0x80 [ 497.195347][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 497.200350][ C0] batadv_tt_local_purge+0x1a7/0x1f0 [ 497.205662][ C0] batadv_tt_purge+0x2b/0x610 [ 497.210368][ C0] process_scheduled_works+0x4d4/0x9a0 [ 497.215949][ C0] worker_thread+0x569/0x750 [ 497.220571][ C0] kthread+0x221/0x270 [ 497.224663][ C0] ret_from_fork+0x146/0x330 [ 497.229294][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.234087][ C0] [ 497.236428][ C0] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 0: [ 497.244511][ C0] can_can_gw_rcv+0x812/0x820 [ 497.249218][ C0] can_rcv_filter+0xc3/0x480 [ 497.253926][ C0] can_receive+0x13e/0x190 [ 497.258368][ C0] can_rcv+0x17d/0x1f0 [ 497.262466][ C0] process_backlog+0x354/0x680 [ 497.267263][ C0] __napi_poll+0x61/0x300 [ 497.271621][ C0] net_rx_action+0x456/0x930 [ 497.276229][ C0] handle_softirqs+0xb9/0x280 [ 497.280932][ C0] do_softirq+0x45/0x60 [ 497.285109][ C0] __local_bh_enable_ip+0x70/0x80 [ 497.290268][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 497.295321][ C0] neigh_periodic_work+0x5e2/0x690 [ 497.300471][ C0] process_scheduled_works+0x4d4/0x9a0 [ 497.305964][ C0] worker_thread+0x569/0x750 [ 497.310588][ C0] kthread+0x221/0x270 [ 497.314680][ C0] ret_from_fork+0x146/0x330 [ 497.319299][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.324087][ C0] [ 497.326430][ C0] value changed: 0x0004a757 -> 0x0004a758 [ 497.332202][ C0] [ 497.334536][ C0] Reported by Kernel Concurrency Sanitizer on: [ 497.340705][ C0] CPU: 0 UID: 0 PID: 3361 Comm: kworker/0:2 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 497.351669][ C0] Tainted: [W]=WARN [ 497.355500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 497.365669][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 497.372658][ C0] ================================================================== [ 497.534334][ C0] ================================================================== [ 497.542559][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 497.549075][ C0] [ 497.551397][ C0] read-write to 0xffff88811a6e8240 of 8 bytes by interrupt on cpu 1: [ 497.559472][ C0] vxcan_xmit+0x2da/0x370 [ 497.563801][ C0] dev_hard_start_xmit+0x10c/0x380 [ 497.568922][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 497.573873][ C0] can_send+0x584/0x720 [ 497.578031][ C0] can_can_gw_rcv+0x7c6/0x820 [ 497.582740][ C0] can_rcv_filter+0xc3/0x480 [ 497.587593][ C0] can_receive+0x13e/0x190 [ 497.592021][ C0] can_rcv+0x17d/0x1f0 [ 497.596136][ C0] process_backlog+0x354/0x680 [ 497.600896][ C0] __napi_poll+0x61/0x300 [ 497.605253][ C0] net_rx_action+0x456/0x930 [ 497.609878][ C0] handle_softirqs+0xb9/0x280 [ 497.614564][ C0] do_softirq+0x45/0x60 [ 497.618716][ C0] __local_bh_enable_ip+0x70/0x80 [ 497.623774][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 497.628713][ C0] batadv_tt_local_purge+0x1a7/0x1f0 [ 497.634023][ C0] batadv_tt_purge+0x2b/0x610 [ 497.638695][ C0] process_scheduled_works+0x4d4/0x9a0 [ 497.644179][ C0] worker_thread+0x569/0x750 [ 497.648772][ C0] kthread+0x221/0x270 [ 497.652845][ C0] ret_from_fork+0x146/0x330 [ 497.657428][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.662209][ C0] [ 497.664523][ C0] read-write to 0xffff88811a6e8240 of 8 bytes by interrupt on cpu 0: [ 497.672575][ C0] vxcan_xmit+0x2da/0x370 [ 497.676906][ C0] dev_hard_start_xmit+0x10c/0x380 [ 497.682080][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 497.687015][ C0] can_send+0x584/0x720 [ 497.691201][ C0] can_can_gw_rcv+0x7c6/0x820 [ 497.695955][ C0] can_rcv_filter+0xc3/0x480 [ 497.700544][ C0] can_receive+0x13e/0x190 [ 497.704957][ C0] can_rcv+0x17d/0x1f0 [ 497.709025][ C0] process_backlog+0x354/0x680 [ 497.713813][ C0] __napi_poll+0x61/0x300 [ 497.718136][ C0] net_rx_action+0x456/0x930 [ 497.722739][ C0] handle_softirqs+0xb9/0x280 [ 497.727406][ C0] do_softirq+0x45/0x60 [ 497.731560][ C0] __local_bh_enable_ip+0x70/0x80 [ 497.736573][ C0] __alloc_skb+0x6b1/0x6f0 [ 497.740983][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 497.746718][ C0] process_scheduled_works+0x4d4/0x9a0 [ 497.752185][ C0] worker_thread+0x569/0x750 [ 497.756770][ C0] kthread+0x221/0x270 [ 497.760829][ C0] ret_from_fork+0x146/0x330 [ 497.765418][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.770174][ C0] [ 497.772485][ C0] value changed: 0x00000000002a3560 -> 0x00000000002a3568 [ 497.779578][ C0] [ 497.781905][ C0] Reported by Kernel Concurrency Sanitizer on: [ 497.788049][ C0] CPU: 0 UID: 0 PID: 3858 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 497.799255][ C0] Tainted: [W]=WARN [ 497.803074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 497.813238][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 497.820042][ C0] ================================================================== [ 498.153726][ C0] ================================================================== [ 498.162036][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 498.168548][ C0] [ 498.170871][ C0] read-write to 0xffff88811a6a8228 of 8 bytes by interrupt on cpu 1: [ 498.178928][ C0] vxcan_xmit+0x2f7/0x370 [ 498.183388][ C0] dev_hard_start_xmit+0x10c/0x380 [ 498.188498][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 498.193459][ C0] can_send+0x584/0x720 [ 498.197617][ C0] can_can_gw_rcv+0x7c6/0x820 [ 498.202300][ C0] can_rcv_filter+0xc3/0x480 [ 498.206887][ C0] can_receive+0x13e/0x190 [ 498.211298][ C0] can_rcv+0x17d/0x1f0 [ 498.215798][ C0] process_backlog+0x354/0x680 [ 498.220572][ C0] __napi_poll+0x61/0x300 [ 498.224892][ C0] net_rx_action+0x456/0x930 [ 498.229477][ C0] handle_softirqs+0xb9/0x280 [ 498.234148][ C0] do_softirq+0x45/0x60 [ 498.238297][ C0] __local_bh_enable_ip+0x70/0x80 [ 498.243343][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 498.248279][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 498.253938][ C0] process_scheduled_works+0x4d4/0x9a0 [ 498.259393][ C0] worker_thread+0x569/0x750 [ 498.263984][ C0] kthread+0x221/0x270 [ 498.268047][ C0] ret_from_fork+0x146/0x330 [ 498.272647][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.277405][ C0] [ 498.279719][ C0] read-write to 0xffff88811a6a8228 of 8 bytes by interrupt on cpu 0: [ 498.287776][ C0] vxcan_xmit+0x2f7/0x370 [ 498.292118][ C0] dev_hard_start_xmit+0x10c/0x380 [ 498.297227][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 498.302162][ C0] can_send+0x584/0x720 [ 498.306328][ C0] can_can_gw_rcv+0x7c6/0x820 [ 498.310997][ C0] can_rcv_filter+0xc3/0x480 [ 498.315597][ C0] can_receive+0x13e/0x190 [ 498.320023][ C0] can_rcv+0x17d/0x1f0 [ 498.324192][ C0] process_backlog+0x354/0x680 [ 498.328956][ C0] __napi_poll+0x61/0x300 [ 498.333293][ C0] net_rx_action+0x456/0x930 [ 498.337878][ C0] handle_softirqs+0xb9/0x280 [ 498.342558][ C0] do_softirq+0x45/0x60 [ 498.346742][ C0] __local_bh_enable_ip+0x70/0x80 [ 498.351758][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 498.356783][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 498.362411][ C0] process_scheduled_works+0x4d4/0x9a0 [ 498.367869][ C0] worker_thread+0x569/0x750 [ 498.372644][ C0] kthread+0x221/0x270 [ 498.376701][ C0] ret_from_fork+0x146/0x330 [ 498.381284][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.386053][ C0] [ 498.388373][ C0] value changed: 0x000000000005abf2 -> 0x000000000005abf3 [ 498.395481][ C0] [ 498.397804][ C0] Reported by Kernel Concurrency Sanitizer on: [ 498.403957][ C0] CPU: 0 UID: 0 PID: 3851 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 498.415065][ C0] Tainted: [W]=WARN [ 498.418862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 498.429020][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 498.435814][ C0] ================================================================== [ 498.869133][ C0] ================================================================== [ 498.877353][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 498.883875][ C0] [ 498.886198][ C0] read-write to 0xffff88811a6a8238 of 8 bytes by interrupt on cpu 1: [ 498.894271][ C0] vxcan_xmit+0x311/0x370 [ 498.898604][ C0] dev_hard_start_xmit+0x10c/0x380 [ 498.903735][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 498.908685][ C0] can_send+0x584/0x720 [ 498.912880][ C0] can_can_gw_rcv+0x7c6/0x820 [ 498.917583][ C0] can_rcv_filter+0xc3/0x480 [ 498.922176][ C0] can_receive+0x13e/0x190 [ 498.926658][ C0] can_rcv+0x17d/0x1f0 [ 498.930770][ C0] process_backlog+0x354/0x680 [ 498.935541][ C0] __napi_poll+0x61/0x300 [ 498.939884][ C0] net_rx_action+0x456/0x930 [ 498.944477][ C0] handle_softirqs+0xb9/0x280 [ 498.949160][ C0] run_ksoftirqd+0x1c/0x30 [ 498.953589][ C0] smpboot_thread_fn+0x32a/0x510 [ 498.958555][ C0] kthread+0x221/0x270 [ 498.962629][ C0] ret_from_fork+0x146/0x330 [ 498.967221][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.972065][ C0] [ 498.974378][ C0] read-write to 0xffff88811a6a8238 of 8 bytes by interrupt on cpu 0: [ 498.982445][ C0] vxcan_xmit+0x311/0x370 [ 498.986798][ C0] dev_hard_start_xmit+0x10c/0x380 [ 498.991934][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 498.996965][ C0] can_send+0x584/0x720 [ 499.001115][ C0] can_can_gw_rcv+0x7c6/0x820 [ 499.005791][ C0] can_rcv_filter+0xc3/0x480 [ 499.010375][ C0] can_receive+0x13e/0x190 [ 499.014789][ C0] can_rcv+0x17d/0x1f0 [ 499.018857][ C0] process_backlog+0x354/0x680 [ 499.023635][ C0] __napi_poll+0x61/0x300 [ 499.027958][ C0] net_rx_action+0x456/0x930 [ 499.032568][ C0] handle_softirqs+0xb9/0x280 [ 499.037234][ C0] do_softirq+0x45/0x60 [ 499.041378][ C0] __local_bh_enable_ip+0x70/0x80 [ 499.046393][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 499.051325][ C0] neigh_periodic_work+0x5e2/0x690 [ 499.056428][ C0] process_scheduled_works+0x4d4/0x9a0 [ 499.061975][ C0] worker_thread+0x569/0x750 [ 499.066559][ C0] kthread+0x221/0x270 [ 499.070633][ C0] ret_from_fork+0x146/0x330 [ 499.075239][ C0] ret_from_fork_asm+0x1a/0x30 [ 499.079995][ C0] [ 499.082309][ C0] value changed: 0x0000000000317468 -> 0x0000000000317470 [ 499.089403][ C0] [ 499.091718][ C0] Reported by Kernel Concurrency Sanitizer on: [ 499.097966][ C0] CPU: 0 UID: 0 PID: 3361 Comm: kworker/0:2 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 499.109173][ C0] Tainted: [W]=WARN [ 499.113076][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 499.123139][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 499.130080][ C0] ================================================================== [ 499.764204][ C0] ================================================================== [ 499.772336][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 499.778850][ C0] [ 499.781174][ C0] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 1: [ 499.789233][ C0] vxcan_xmit+0x2ba/0x370 [ 499.793615][ C0] dev_hard_start_xmit+0x10c/0x380 [ 499.798725][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 499.803680][ C0] can_send+0x584/0x720 [ 499.807838][ C0] can_can_gw_rcv+0x7c6/0x820 [ 499.812523][ C0] can_rcv_filter+0xc3/0x480 [ 499.817122][ C0] can_receive+0x13e/0x190 [ 499.821541][ C0] can_rcv+0x17d/0x1f0 [ 499.825605][ C0] process_backlog+0x354/0x680 [ 499.830360][ C0] __napi_poll+0x61/0x300 [ 499.834705][ C0] net_rx_action+0x456/0x930 [ 499.839303][ C0] handle_softirqs+0xb9/0x280 [ 499.844059][ C0] do_softirq+0x45/0x60 [ 499.848208][ C0] __local_bh_enable_ip+0x70/0x80 [ 499.853249][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 499.858187][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 499.863830][ C0] process_scheduled_works+0x4d4/0x9a0 [ 499.869289][ C0] worker_thread+0x569/0x750 [ 499.873876][ C0] kthread+0x221/0x270 [ 499.877944][ C0] ret_from_fork+0x146/0x330 [ 499.882548][ C0] ret_from_fork_asm+0x1a/0x30 [ 499.887325][ C0] [ 499.889643][ C0] read-write to 0xffff88811a6e8230 of 8 bytes by interrupt on cpu 0: [ 499.897703][ C0] vxcan_xmit+0x2ba/0x370 [ 499.902065][ C0] dev_hard_start_xmit+0x10c/0x380 [ 499.907173][ C0] __dev_queue_xmit+0xb97/0x1e60 [ 499.912105][ C0] can_send+0x584/0x720 [ 499.916258][ C0] can_can_gw_rcv+0x7c6/0x820 [ 499.920927][ C0] can_rcv_filter+0xc3/0x480 [ 499.925600][ C0] can_receive+0x13e/0x190 [ 499.930031][ C0] can_rcv+0x17d/0x1f0 [ 499.934095][ C0] process_backlog+0x354/0x680 [ 499.938959][ C0] __napi_poll+0x61/0x300 [ 499.943304][ C0] net_rx_action+0x456/0x930 [ 499.947906][ C0] handle_softirqs+0xb9/0x280 [ 499.952587][ C0] do_softirq+0x45/0x60 [ 499.956732][ C0] __local_bh_enable_ip+0x70/0x80 [ 499.961755][ C0] __alloc_skb+0x6b1/0x6f0 [ 499.966180][ C0] alloc_skb_with_frags+0x7e/0x3d0 [ 499.971403][ C0] sock_alloc_send_pskb+0x44d/0x500 [ 499.976607][ C0] unix_dgram_sendmsg+0x384/0x1030 [ 499.981716][ C0] __sys_sendto+0x411/0x470 [ 499.986215][ C0] __x64_sys_sendto+0x76/0x90 [ 499.990903][ C0] x64_sys_call+0x2d35/0x3020 [ 499.995574][ C0] do_syscall_64+0x136/0x3c0 [ 500.000158][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.006067][ C0] [ 500.008407][ C0] value changed: 0x000000000006eb1a -> 0x000000000006eb1b [ 500.015563][ C0] [ 500.017883][ C0] Reported by Kernel Concurrency Sanitizer on: [ 500.024058][ C0] CPU: 0 UID: 0 PID: 2969 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 500.034477][ C0] Tainted: [W]=WARN [ 500.038286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 500.048353][ C0] ================================================================== [ 500.158397][ C0] ================================================================== [ 500.166630][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 500.174034][ C0] [ 500.176371][ C0] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 1: [ 500.184453][ C0] can_can_gw_rcv+0x812/0x820 [ 500.189155][ C0] can_rcv_filter+0xc3/0x480 [ 500.193799][ C0] can_receive+0x13e/0x190 [ 500.198249][ C0] can_rcv+0x17d/0x1f0 [ 500.202342][ C0] process_backlog+0x354/0x680 [ 500.207123][ C0] __napi_poll+0x61/0x300 [ 500.211477][ C0] net_rx_action+0x456/0x930 [ 500.216088][ C0] handle_softirqs+0xb9/0x280 [ 500.220786][ C0] do_softirq+0x45/0x60 [ 500.224958][ C0] __local_bh_enable_ip+0x70/0x80 [ 500.230001][ C0] kernel_fpu_end+0x6c/0x80 [ 500.234525][ C0] blake2s_compress+0x67/0x16d0 [ 500.239399][ C0] blake2s_final+0x6a/0xc0 [ 500.243835][ C0] hmac+0x219/0x400 [ 500.247680][ C0] message_ephemeral+0x1e6/0x260 [ 500.252650][ C0] wg_noise_handshake_create_initiation+0x14b/0x600 [ 500.259279][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 500.265395][ C0] process_scheduled_works+0x4d4/0x9a0 [ 500.270884][ C0] worker_thread+0x569/0x750 [ 500.275508][ C0] kthread+0x221/0x270 [ 500.279596][ C0] ret_from_fork+0x146/0x330 [ 500.284224][ C0] ret_from_fork_asm+0x1a/0x30 [ 500.289028][ C0] [ 500.291381][ C0] read-write to 0xffff88811ca1af80 of 4 bytes by interrupt on cpu 0: [ 500.299644][ C0] can_can_gw_rcv+0x812/0x820 [ 500.304348][ C0] can_rcv_filter+0xc3/0x480 [ 500.308977][ C0] can_receive+0x13e/0x190 [ 500.313449][ C0] can_rcv+0x17d/0x1f0 [ 500.317547][ C0] process_backlog+0x354/0x680 [ 500.322334][ C0] __napi_poll+0x61/0x300 [ 500.326677][ C0] net_rx_action+0x456/0x930 [ 500.331290][ C0] handle_softirqs+0xb9/0x280 [ 500.335990][ C0] run_ksoftirqd+0x1c/0x30 [ 500.340436][ C0] smpboot_thread_fn+0x32a/0x510 [ 500.345502][ C0] kthread+0x221/0x270 [ 500.349591][ C0] ret_from_fork+0x146/0x330 [ 500.354210][ C0] ret_from_fork_asm+0x1a/0x30 [ 500.358997][ C0] [ 500.361334][ C0] value changed: 0x00069a61 -> 0x00069a62 [ 500.367065][ C0] [ 500.369409][ C0] Reported by Kernel Concurrency Sanitizer on: [ 500.375574][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 500.386365][ C0] Tainted: [W]=WARN [ 500.390190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 500.400263][ C0] ==================================================================