last executing test programs: 9m4.320751715s ago: executing program 32 (id=989): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 8m53.339761746s ago: executing program 33 (id=1117): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x4}, @void}}]}]}], {0x14}}, 0xac}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010000fff50000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) 8m17.052838384s ago: executing program 34 (id=1321): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='0', 0x1) io_uring_enter(r0, 0x8, 0xd5db, 0x7, &(0x7f0000000080), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x8f, 0x482c0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15, 0x4, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f0000000000)={[{@dyn}, {@flock_write}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='3', 0x1) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 8m2.072630511s ago: executing program 35 (id=1331): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='ext2\x00', 0x120c001, 0x0) 7m47.821890222s ago: executing program 36 (id=1332): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000080)=[r3, r3], 0x0, 0x2}) close(0x3) 7m31.85780204s ago: executing program 37 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0020000", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000000800068004000200840001801c000280080002000300000008000200fe0b000008000400000000802c0004001400010002004e22e000000200000000000000001400020002004e2464010101000000000000000038000400200001000a004e200000000600000000000000000000ffffe00000014d0000001400020002004e246401010000000000000000004c000480340007800800030049000000080002000600000008000400010000000800020000000000080002000100000008000200240f00001300010062726f6164636173742d6c696e6b"], 0x2d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r8, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x28}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000080)=@arm64={0x7, 0xd, 0x1e, '\x00', 0xaa}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r11, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r11, r0, 0x2f, 0x0, 0x0, @void, @value=r11}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES32=r11, @ANYBLOB="2f0000000000000004000000", @ANYBLOB="062808fdde"], 0x20) 6m5.478248412s ago: executing program 38 (id=1707): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000001c00000008000100e001020308000200ac1414bb0800030001000000", 0x34) 6m4.422462666s ago: executing program 39 (id=1705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r1, r1, 0x0) setreuid(r1, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f00000001c0)='./sys/devices/system/cpu/smt/control/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0) set_robust_list(0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) write(r0, &(0x7f0000000180)='on', 0x2) 6m3.923518854s ago: executing program 40 (id=1708): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000224bd700000000000ffffffff000000000000000000000000000000100000000000000000000000000000ffffe0000002ac1414bb000000000000000000000000ff0200000000000000000000000000014e2100000000ffff0200a0e467000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a0080202e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000ec00001000000040000000000000000000000000000000000000000000000000040000000000000000ffffffff040000000200000300000000fffffeff3800000000040000fdffffff"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffff3f, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) 6m3.829336183s ago: executing program 41 (id=1709): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074"}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r1, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) pread64(r1, &(0x7f0000002200)=""/87, 0x57, 0xfffd) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0xc3b8, 0x7}}, @wr_crn={0x67, 0x20, {0xb, 0x161fceb}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xdb4e}}, @nested_load_code={0x12e, 0x7a, {0x0, "c744240000000000c7442402cec3b0e8c7442406000000000f011c24660f3881498b66ba2000ec48b86b800000000000000f23c80f21f8350c0010000f23f8b8010000000f01c1c4a17e7f3166ba410066edf30fc777a3c421b05d785b460f9a4f02"}}, @code={0xa, 0x5c, {"c744240005000000c744240231000000c7442406000000000f01142466ba2100edb8010000000f01d936430f017d00420f0866dc7e0a45c08107000000000f01ca47d9f2b96d0200000f32"}}, @nested_load_code={0x12e, 0x6e, {0x0, "b805000000b92a0000000f01c1b805000000b900ff3f010f01c166b8fd008ec836660f69ed0f07400f01f83e640f7933b9800000c00f3235004000000f30f339a95c495a08b9150a0000b800000000ba008000000f30"}}, @nested_amd_clgi={0x17f, 0x10}], 0x1cc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m38.880829081s ago: executing program 2 (id=1800): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000003f000000000000000001"], 0xfdef) 5m37.908355494s ago: executing program 2 (id=1806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DISCONNECT(r1, 0xab08) close_range(r0, 0xffffffffffffffff, 0x800000400000000) 5m37.561161359s ago: executing program 2 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000024f1a3401000000000000af00000000400000030000001801000020786c2500000000002020207b0af8ff00000000bda10000000000008dbebcc60b22"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m37.388326113s ago: executing program 2 (id=1810): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) fcntl$getflags(r0, 0x40a) r3 = mq_open(&(0x7f0000000040)='-)*#+[#$\x00', 0x1, 0x66, &(0x7f0000000080)={0x6, 0x3, 0xffffffffffffffff, 0xbb5c}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x15, 0x4, @tid=r4}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x40) 5m37.201745834s ago: executing program 2 (id=1811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0xf5ffffff, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 5m24.380086145s ago: executing program 2 (id=1814): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 5m4.275853594s ago: executing program 42 (id=1808): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0xc}, @remote, 0x1, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x1, "82b0cfc4337965941538be02000000000000080000007400a391793ba7f40000000000fdf700"/48}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x1, 0x0, &(0x7f00000004c0)=[{0x412df, 0x2000000000000004}]}) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 4m59.390897206s ago: executing program 43 (id=1813): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/106, 0x75}, {&(0x7f0000000b00)=""/161, 0xfef5}], 0x2) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 4m57.999283925s ago: executing program 44 (id=1812): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl(r1, 0x4, &(0x7f0000000100)) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000880)={&(0x7f0000000200)=0x337, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f00000008c0)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x3, 0xa87c, 0x100, 0xfa}}}, 0xa) 4m57.881476871s ago: executing program 45 (id=1814): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 4m34.262620522s ago: executing program 6 (id=2064): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0xfffffffffffffd9a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000ffef006e0100003801000001") sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x10000011) 4m33.963693327s ago: executing program 6 (id=2068): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff0000000705"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m32.702716851s ago: executing program 6 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m32.702530909s ago: executing program 6 (id=2075): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/106, 0x75}, {&(0x7f0000000b00)=""/161, 0xfef5}], 0x2) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000fffe00000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 4m31.703061492s ago: executing program 6 (id=2076): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = openat(r1, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x110) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl(r2, 0xc138fd02, &(0x7f0000000000)="04000000000000000000") faccessat2(r2, &(0x7f0000000040)='./dev/mapper/control\x00', 0x42, 0x525423118ccbc620) write$P9_RRENAME(r1, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) 4m31.702757873s ago: executing program 6 (id=2077): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) munlock(&(0x7f000023f000/0x2000)=nil, 0x2000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c69676e6f726571762c005ce410c7a379904d45a85c3ed319a161d8fec20c52b3df927c82bf584b94728db2f3899cf590ca32e6a2ae2c806cd1f2bd3aa319d4333c47218ff66ac8de680e5c9b92ad03105d89bf75ca5179946b9df9c2e80d55e1225f189a26297edc6fff07000000ffb5a8228ed3849b2a89bba797899892ed43098b2e51739beada0264a83e0890e1484d9df2d11014eacab831290246e17f512b0893c00d2beadf75d6f9dbda0b0373e63f2fbc5d9d554c5092141e503fb0d907775b7423274a3594a71195fb2ce58d7d4398a73091c32af44cdc773a4f12b231"]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x344, 0x7f, 0x2, 0x1, 0xff, 0x6, 0x4d, 0xfffffff2, 0x61, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x8, 0x7, 0xfffffffc, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x7, 0x7fff, 0x4c74, 0x8f00, 0x242, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7000000, 0x34, 0x91, 0x5d, 0x6, 0x4, 0x5, 0x8, 0x8, 0x9, 0x1080, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x3, 0x1d, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xb, 0x8, 0x4, 0x6d01, 0xa9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x80000005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x2, 0x5, 0x0, 0x6, 0xdaa9, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x2000bb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x10001, 0x105, 0xb, 0x7, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x4, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x8, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x7fff, 0xb1c, 0x1, 0x200, 0x76a55cfb, 0xfff]}, 0x45c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001380)={0x68, 0x0, &(0x7f0000001280)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @dead_binder_done, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @acquire], 0x69, 0x0, &(0x7f0000001300)="56aeba7c0c2c168d7c6a3571ea2192dee539b12924a69ca2a8b0fc4834abb6fc9dd671e3c5243e6ca7293af0f06d4104daaf75a770d38e2f0c917bf7e97e0470e944438075de86776c01aaec6d77db380babab7f805f4b27bf794644d57aa497490e3adaba58ee85f0"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x3, 0x1) getdents64(r5, 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/152, 0x98) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x45011) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000240)={0x0, 0x8e}) 4m16.551386031s ago: executing program 46 (id=2077): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) munlock(&(0x7f000023f000/0x2000)=nil, 0x2000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c69676e6f726571762c005ce410c7a379904d45a85c3ed319a161d8fec20c52b3df927c82bf584b94728db2f3899cf590ca32e6a2ae2c806cd1f2bd3aa319d4333c47218ff66ac8de680e5c9b92ad03105d89bf75ca5179946b9df9c2e80d55e1225f189a26297edc6fff07000000ffb5a8228ed3849b2a89bba797899892ed43098b2e51739beada0264a83e0890e1484d9df2d11014eacab831290246e17f512b0893c00d2beadf75d6f9dbda0b0373e63f2fbc5d9d554c5092141e503fb0d907775b7423274a3594a71195fb2ce58d7d4398a73091c32af44cdc773a4f12b231"]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x344, 0x7f, 0x2, 0x1, 0xff, 0x6, 0x4d, 0xfffffff2, 0x61, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x8, 0x7, 0xfffffffc, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x7, 0x7fff, 0x4c74, 0x8f00, 0x242, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7000000, 0x34, 0x91, 0x5d, 0x6, 0x4, 0x5, 0x8, 0x8, 0x9, 0x1080, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x9, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x3, 0x1d, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xb, 0x8, 0x4, 0x6d01, 0xa9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x80000005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x2, 0x5, 0x0, 0x6, 0xdaa9, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x2000bb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x10001, 0x105, 0xb, 0x7, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x4, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x8, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x7fff, 0xb1c, 0x1, 0x200, 0x76a55cfb, 0xfff]}, 0x45c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001380)={0x68, 0x0, &(0x7f0000001280)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @dead_binder_done, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x2}, @acquire], 0x69, 0x0, &(0x7f0000001300)="56aeba7c0c2c168d7c6a3571ea2192dee539b12924a69ca2a8b0fc4834abb6fc9dd671e3c5243e6ca7293af0f06d4104daaf75a770d38e2f0c917bf7e97e0470e944438075de86776c01aaec6d77db380babab7f805f4b27bf794644d57aa497490e3adaba58ee85f0"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x3, 0x1) getdents64(r5, 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/152, 0x98) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r4) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x45011) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000240)={0x0, 0x8e}) 2m11.798581618s ago: executing program 5 (id=3748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 2m11.396585316s ago: executing program 5 (id=3754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/241, 0xf1}], 0x7}}], 0x1, 0x0, 0x0) (async) r2 = dup(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x240) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x20048040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078acf83541437e4aa195ec4e34cfa0141400ac1414aa00000000009cd37737e02666d90d0000f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9210047b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd223d6f08b345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba46c3a6bdcd7a1"], 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 2m8.759801338s ago: executing program 7 (id=3769): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a3bffb71ebebbdeff95c6f34ff5a53b284d"], 0x0) mknod$loop(&(0x7f0000000080)='./dev/file0\x00', 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8003, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x7, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0xb0}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5c, 0x10, 0x7, 0x20, 0x9}, 0xee, &(0x7f00000002c0)={0x5, 0xf, 0xee, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xed, "3694c9f1b0d7668c05f618c9e115fc2a"}, @generic={0xd2, 0x10, 0x1, "31cc4b3514b00c9eb0815b5eb1d98bb49668cce3f415f40b229d2e4b5f8f96cde412eeb8004b29f853b30d70e39e69a32c688827766e3bfc38dcd4179478f1351fecd1c96d4b562eb22a27e29a69a36a9a6a0a0d8ba8aad7bd685c9e44574fc396c9741c84d37510585a9f8df7d9e458a7fef387a4bbb4a91c8e1989fa5dda112567cb04867d539f645abffae399c2e7d8377c098eafceb5f860589616daeb493a21e4742c6383851b4142fdce060418978d359892ef524eedbb62cc8548b34214c46d6aa234fe287d8052b224ac75"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41c}}, {0x9, &(0x7f0000000480)=@string={0x9, 0x3, "a4907197c87b07"}}, {0xf2, &(0x7f00000004c0)=@string={0xf2, 0x3, "71be9b033460e045cebb3aae5a526ea7e57ea586913b9c7369f414b84bd7e7c75ce8ce01bbf2c8e76fac8159db6b899b3d9962f086588d23aafc3077fb1736a7c134869aec0a0e01468274c4b477602a3fbeab15f426161cef3b06502bb82a24ff6e447f753f4ef8288cb100f0297c8317af5a1e1db306b097a1b4349cb83233cf1abf4655acefb79531aa46e2a4f3f999930bffe68f240babd11bc25b346245a145d3d7fcea02ee0095bfb202587dc6d8cc42fcdda474f121ae4d5eaa7d0a9e68e646188f7156534a77b041f219e8ad30166453712df62524996625f7698b4e7d480c159dc76307200f8dc60c9e2a0a"}}, {0xce, &(0x7f00000005c0)=@string={0xce, 0x3, "82bf0f1ea3c470de7f725c9768c9e11df8f8fd745f1433591efcea609ca7836b3a7a5a0aef1ad56bd23e0c1766341a47cf5ee378696210776815704109ca142e510498d79d2638b7dce32939c9cfe0c653f2cf0420509ae1cb04e6462ac7f889d4bb40a2cb37334b2b407d574209a0c1121e7b8e5a56439a653ee9f76f3483f58c13efcf53863d8a8ca5c0e550faa46f1228d6a4dee20044ca699d4521871a0b6f4effa2c5051449b085d05b82c00a7a3ae2c800dfc26593b490544f166bb21e2d2a9d2c15e32f28556cf2e7"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$printer(r2, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x2, 0xf1, {0xf1, 0x10, "b0f2d76f89264ac1e6a1b8ba20071b4a843fae93c4ff098ff21a82ce8a683c2cbdc71bf22689f477618663f3262138b76f763adb4acac8ac7d7cdcf544a17e133eb65ce2395e37947795353a72be8868156cbb9f1d1f1552d085d1d64f45f7dc64cb1c86bcec188acf3a822bdda94a6ef19bf1356502fa0698223c81bb6ae36466cc9b57ce36b2cd5705c5ca2deab5010f5e06e58d9d9ae763d6e88f31fcae92e5826f0f8f724c0546df3e353ee855fb5e7cd5e019f61640fd7eb2eb2bc7a04c80a00f5afb5b00115f7aa72206157d4f452439cac9c011af0f1a2ed6fea150feb73ce612904bdeb453be5beb275d7c"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000900)={0x0, 0x16, 0x1e, "03f58f5ee1a1e2eed2cbbfc57c5760e19d1e512d1a445a7aacb7a1af2b26"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x0, 0xf3, {0xf1, "2c5286cdf47f06ba4f2ec85fd1cb9629d91ec49886c8d4671563c2f485b6f7d15eb6669ed45346e4c58efa88ab9fb4ae8caed3e19787aa64d01891e67416a9fffc7359e3935b1623e434b1d6ae9cb86811b60ccfb4d85f916f61045a7ab36857c37bfff576cb201269ff883004a744bff0293372b7ccaab14e97f02f5e90df27fc4792e677a5e38d0e10f46c8742802c9985b58cbdfd1f4f0acc5e783e1d97a46cd13af1250042473b267231f6c256201a7c5885f60a3e68f218bbefe81d1cde590e808177ce35d524874150783b4d4b774df65070c412b740053b9a179e755144db7e47bff8fb27c36a09de3b0ec51e1c"}}, &(0x7f0000000ac0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) ioctl$TIOCMSET(r1, 0x541e, &(0x7f00000001c0)=0x10000) 2m8.679021154s ago: executing program 8 (id=3770): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x600000000000000, 0x0, 0x20004040}, 0x0) 2m8.620435785s ago: executing program 5 (id=3771): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 2m8.608262016s ago: executing program 5 (id=3772): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x0, 0x40}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4021, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x3, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x7, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x58, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0xb, 0x4, 0x8, 0x7, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x9, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x7, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0xffffffff, 0xa75, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x1, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x7, 0x4, 0xced, 0x8, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0xffff]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@can={0x1d, r12}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x4) 2m8.418991563s ago: executing program 8 (id=3773): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001001c00", 0x34) 2m8.24047974s ago: executing program 8 (id=3774): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000fff5000000000000000001"], 0xfdef) 2m7.099247639s ago: executing program 3 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000013000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c00024000000000000000010800"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0) 2m7.030960207s ago: executing program 3 (id=3776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000240)={0xbdb4, 0xe6e, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x16c, 0x30, 0x4, 0x70bd2b, 0x0, {}, [{0x158, 0x1, [@m_tunnel_key={0x60, 0x0, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x94, 0xb, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x19, 0x6, "b0c788834491db917a9a992c9833c17cff3b436365"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x60, 0x1008, 0x0, 0x0, {{0xb}, {0x4}, {0x33, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x16c}}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000001400000504000280"], 0x18}, 0x1, 0x0, 0x0, 0x4e7fef6d7ea12212}, 0x0) r5 = dup(r0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f00000003c0)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000100)=0x9ce}) timer_create(0x1, &(0x7f0000000180)={0x0, 0x30, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r13, r12, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x800, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000400)=0xc) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r11, 0xc0207511, &(0x7f0000000800)={r10, 0xffff, 0x0, 0x0, r14}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 2m5.939823038s ago: executing program 3 (id=3777): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000000)=@gettaction={0x50, 0x32, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x50}}, 0x8000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4097, 0x1001}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000780)=""/26, 0x1a}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000440)={'netdevsim0\x00', @broadcast}) 2m5.721129249s ago: executing program 3 (id=3778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmmsg$inet(r1, &(0x7f00000029c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000480)='R', 0x1}], 0x1, 0x0, 0x0, 0xf000000}}], 0x1, 0x4040040) 2m5.720753755s ago: executing program 7 (id=3779): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,posixacl,noxattr,']) read$FUSE(r2, &(0x7f00000045c0)={0x2020}, 0x2020) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x6, 0x16, 0x2, 0x6, "52b5a38a69a9c3b2c35e250de4c69294499d78322239c471cf312d6b66c1a77a"}) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) r3 = signalfd4(r1, &(0x7f0000000180)={[0x5]}, 0x8, 0x80000) splice(r3, &(0x7f00000001c0)=0x8001, r1, &(0x7f0000000200)=0x2, 0x5, 0x1b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f0000000240)={0x7, 0x1ff}) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,posixacl,noxattr,']) (async) read$FUSE(r2, &(0x7f00000045c0)={0x2020}, 0x2020) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x6, 0x16, 0x2, 0x6, "52b5a38a69a9c3b2c35e250de4c69294499d78322239c471cf312d6b66c1a77a"}) (async) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) (async) signalfd4(r1, &(0x7f0000000180)={[0x5]}, 0x8, 0x80000) (async) splice(r3, &(0x7f00000001c0)=0x8001, r1, &(0x7f0000000200)=0x2, 0x5, 0x1b) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f0000000240)={0x7, 0x1ff}) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async) 2m5.671097218s ago: executing program 3 (id=3780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000010200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x991}, 0x40880) 2m5.596846299s ago: executing program 8 (id=3781): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5ac3f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m5.510886137s ago: executing program 5 (id=3782): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x10700, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x68, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, @in6={0xa, 0x4e22, 0x4, @private0, 0x2}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={r2, 0x9, 0xa471}, 0x8) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) dup2(r3, r0) 2m5.510766114s ago: executing program 7 (id=3783): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) 2m5.429454295s ago: executing program 7 (id=3784): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0xe9}}}, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/202) r1 = socket$l2tp6(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000380)={'trans=virtio,', {[{@aname={'aname', 0x3d, '\xd2\xecs\xe3g8\':\xf1,\xa1\b\x00\x00\x00b\a\xd4\xa1\x052k'}}]}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/172, 0xac}], 0x1, 0x205, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) r4 = epoll_create(0x40) epoll_wait(r4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0xfffffffc) sendmsg$inet6(r1, &(0x7f0000001580)={&(0x7f0000000200)={0xa, 0x4e22, 0x3, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000016ff"], 0x18}, 0x20000c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2m5.429274249s ago: executing program 3 (id=3785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"0000000000000000000000000000000011e57ed000"}}) 2m4.85080188s ago: executing program 8 (id=3786): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xfc40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 2m4.528637173s ago: executing program 8 (id=3787): socket(0x400000000010, 0x3, 0x0) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r3) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x8, 0x48, "02216f830729227a440ec6bc64f0173d2f27d2606923feb56dd6bed45310d4f45a702d8bb2cfb1e72eeb261d0199d772b8ec11e64b2300cb8a4b8a9587a7a4925d8e0d2fae95051b"}}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000001c0)) r6 = dup3(r5, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x200000005c831, r5, 0xffffd000) shmctl$IPC_RMID(r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1100}) 2m4.379162303s ago: executing program 7 (id=3788): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001006000", 0x34) 1m57.932701236s ago: executing program 5 (id=3789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000019}, 0x4840) 1m50.531121868s ago: executing program 7 (id=3790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000010000000100000001000000010000000000000220000000200000000100000001") 1m42.308436171s ago: executing program 47 (id=3787): socket(0x400000000010, 0x3, 0x0) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r3) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x8, 0x48, "02216f830729227a440ec6bc64f0173d2f27d2606923feb56dd6bed45310d4f45a702d8bb2cfb1e72eeb261d0199d772b8ec11e64b2300cb8a4b8a9587a7a4925d8e0d2fae95051b"}}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000001c0)) r6 = dup3(r5, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x200000005c831, r5, 0xffffd000) shmctl$IPC_RMID(r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1100}) 1m5.0730369s ago: executing program 48 (id=3785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"0000000000000000000000000000000011e57ed000"}}) 1m4.292080642s ago: executing program 49 (id=3789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000019}, 0x4840) 1m4.217297216s ago: executing program 50 (id=3790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000010000000100000001000000010000000000000220000000200000000100000001") 4.320269766s ago: executing program 4 (id=4631): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f00000000c0)="030000000000000001000000") r5 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7800, 0x8, 0x10, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x4, 0x6, 0x0, 0x0, 0x0, [{}, {0x2b, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) 3.929530957s ago: executing program 4 (id=4641): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x212040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x210a, r3}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000500)="0f94840200b827008ec866b9750b00000f32f62d0f302ef20f5efbf20f587bbfbaa10066edf30f01f26766c7442400000000806766c74424020a0000006766c744240600000000670f011c24", 0x4c}], 0x1, 0x2d, &(0x7f0000000640)=[@dstype3={0x7, 0x5}], 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) capset(0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000201030000000000000000000a00020001000000300102800300018014997b94e55da87b61000000000000000000020114000400fe881cd2b800fbefb1840000000800010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05816d0c"], 0x7) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x800, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000740)=@in6={0xa, 0x4e22, 0xe6, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000680)="f7a6c217bc516d254634eda5ded74d6dbf81e7f7a48c6c426f3028a0b60b6fc6a4916a4f3b8fdd85a741cf43464f24fe4736", 0x32}], 0x1, 0x0, 0x0, 0x2c04c000}, 0x200040c5) r9 = dup(r7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800090400000000000000000a002000000000000000000008001e000100"], 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000840)={0x0, @in={{0x2, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x100000001, 0x3, 0xffffffffffffffff, 0xc9fb, 0x2, 0x1, 0x2, 0x7, 0xe5, 0x3, 0xf, 0x9, 0x4, 0x63a5, 0x8]}, &(0x7f0000000940)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x9, 0x6, 0x3, 0x8000, 0x1010, 0x8, 0x3da7, {r11, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x3, 0xfffffffe, 0xc0000004, 0xcf42}}, &(0x7f0000000480)=0xb0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r12, r12, 0x0, 0x2000fb) 3.77007718s ago: executing program 4 (id=4646): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) getpeername(r1, 0x0, &(0x7f0000000740)) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000004c0)) unshare(0x20020480) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) unshare(0x42040280) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4000000002}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat(r4, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x101100, 0x0) read$FUSE(r9, &(0x7f0000007fc0)={0x2020}, 0x2020) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x400000f5, 0x0, 0xb}]}) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, 0x3, 0x8ba) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)={'#! ', './config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls', [{0x20, '\xe5j&%[,f{\x9e@#^*}^+-'}, {0x20, 'configfs\x00'}, {}, {0x20, '-!%:,'}, {0x20, '*--%&#@(z'}, {0x20, 'configfs\x00'}, {0x20, 'G.!{.\''}, {0x20, 'configfs\x00'}, {0x20, 'configfs\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "68bc97bda13add95e82f7facfb5973ba65ed38def0ea6c823977d5ab8b5a9d407b0cbd9fc4ef64f38ba6e81cc3667f531507d54fa0e03187861b5f9910858379e583e1f9d4a3"}, 0xf1) 2.729696682s ago: executing program 4 (id=4665): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@mcast2, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xa}, {0x0, 0xfffffffffffffffd, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x3, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x4040020) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x14000040) 2.650385168s ago: executing program 4 (id=4666): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xfc130000) 2.309662707s ago: executing program 4 (id=4673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r4, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0xa, 0xd, 0x1, 0x0, "0a9c08ebbb76"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0xd0) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 1.997785029s ago: executing program 9 (id=4679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0xb, '\x00', 0x5}, {0xf, 0xee, 0xa, '\x00', 0xf}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 1.038362673s ago: executing program 9 (id=4681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x9effffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 1.038137688s ago: executing program 9 (id=4682): bpf$MAP_CREATE(0xf0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 968.695511ms ago: executing program 9 (id=4683): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x38) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000003c0)={0x20, r5, &(0x7f00000003c0)}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4000) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000001c0)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x40810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a17ea0abe1240bffa718306aa4f6eaa267a9b68806c9831ad96c7ee8212be6", @ANYRES16=r8, @ANYBLOB="000028bd7000fbdbdf250300000014000b00fc010000000000000000000000000001080002000100000008000700", @ANYRES32=r9, @ANYBLOB="05000d001500000005000d00010000000800080003000000"], 0x50}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_NMI(r13, 0xae9a) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x319002, 0x100) mkdirat(r14, &(0x7f0000000080)='./file0\x00', 0x20) ioctl$KVM_RUN(r13, 0xae80, 0x0) 638.151272ms ago: executing program 0 (id=4687): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000024f1a3401000000000000af0000000000000003ffffff8501000020786c2500000000002020207b0af8ff00000000bda10000000000008dbebcc60b22"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 578.683355ms ago: executing program 0 (id=4688): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x2000000, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 573.004101ms ago: executing program 0 (id=4691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002000010026bd7000fbdbdf25020014100900000506000100080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x3, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000400)={{0x8}, 'port0\x00', 0x80, 0x60008, 0x3, 0x8, 0x5, 0x0, 0x4, 0x0, 0x1, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x1000) r7 = eventfd(0x6d11) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000180)={r6, 0x5, 0x2, r7}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0xffffff80, 0x4, 0x0, 0xff, 0xff}) madvise(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x8, 0xffff, 0x1, 0x6}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="d1652ba6ded18b3443adc3b7553de6a10100000000000000000001000000090001800600a8bb18e5911e07ab9a17c4c456439901036300000008"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x8d0) 337.735516ms ago: executing program 1 (id=4696): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="ebfa0e81ceb3dc4c43c215ebd015af003afaf21393a2977cab52e35904000000a88aa35b175c12cf29c48c2d4b45c1dc73113beeb9b3a73cd0415b0437839a7b9b3f3968", 0x44}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000000c00000018000380140003801000da0f09000200232f2d7d00000000180001801400020076657468305f746f5f626f6e64"], 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ip6erspan0\x00'}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) r8 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10003, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}}, 0x4040) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001812000020b0a3248942f137fa380c67cb5d98cdae02a666860417393af46d33a51257c1969a2651ba5632e89a0bea9b13ee19b61bc7afe959753687a01ac8b2bebf1314df0b5eb9c427679a9122f68833f07779b192c02537ee6a53d8ac31c69543223108254b73b79d4169bd9b8987a1320256d01469c01f8af0b4336abe9298850c21563ccc313fe87a2e738306836b9361efca6bdee54aa306df3a4a7a14a82f", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x200000, 0x134, 0x14}, 0x18) mkdirat(r12, &(0x7f0000000480)='./file0\x00', 0x10e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x2, 0x2}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0) r13 = request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)='batadv_slave_0\x00', 0x0) keyctl$update(0x2, r13, &(0x7f0000001980)="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", 0x1000) 270.517899ms ago: executing program 0 (id=4697): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xfffffffe) 149.009103ms ago: executing program 1 (id=4698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a3000f5ff0008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c00024000000000000000010800"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0) 148.766085ms ago: executing program 1 (id=4699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0xb, '\x00', 0x5}, {0xf, 0xee, 0xa, '\x00', 0xf}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 60.29086ms ago: executing program 1 (id=4700): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x83, 0x20000a2e, 0x401000, 0x4, 0x3, 0x2000000, 0x1, 0x3000000}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000000000000012", 0x2a}, {&(0x7f0000000280)="f012c7ce60085637bd4b9201802c47e45be5c44b928323df15ae38b067b2230701229e5070f5f56d4d11", 0x2a}], 0x2) 60.056857ms ago: executing program 0 (id=4701): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 59.5756ms ago: executing program 1 (id=4702): syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2440) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002840), 0x0, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100201}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000a}, 0x0, 0x0) 59.502909ms ago: executing program 9 (id=4703): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="01000000000000000100000001000000010000000100000000000000201f0000200000000100000001") 414.429µs ago: executing program 0 (id=4704): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000024f1a3401000000000000af00000000000000030018001801000020786c2500000000002020207b0af8ff00000000bda10000000000008dbebcc60b22"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 246.074µs ago: executing program 9 (id=4705): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x7000000, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 0s ago: executing program 1 (id=4706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"000000000000000000000000000000000000000000000000000200"}}) 0s ago: executing program 9 (id=4707): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f00000006c0)=[{0x30, '\x00', @st={0x4, [{0x3, @uvalue=0x7}, {0x2, @svalue=0x10001}, {0x1, @svalue=0x9ab}, {0x2, @uvalue=0xf59}]}, 0xd}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) kernel console output (not intermixed with test programs): ock_has_perm+0x10/0x10 [ 625.271191][T18881] ? __pfx_sctp_sendmsg+0x10/0x10 [ 625.271219][T18881] inet_sendmsg+0x11c/0x140 [ 625.271285][T18881] ____sys_sendmsg+0x9c9/0xbe0 [ 625.271325][T18881] ? __pfx_inet_sendmsg+0x10/0x10 [ 625.271349][T18881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.271374][T18881] ? _kstrtoull+0x13c/0x1f0 [ 625.271397][T18881] ? __pfx__kstrtoull+0x10/0x10 [ 625.271425][T18881] ___sys_sendmsg+0x190/0x1e0 [ 625.271450][T18881] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.271508][T18881] __sys_sendmmsg+0x20c/0x440 [ 625.271541][T18881] ? __pfx___sys_sendmmsg+0x10/0x10 [ 625.271568][T18881] ? ksys_write+0x190/0x250 [ 625.271610][T18881] ? fput+0x7c/0x100 [ 625.271633][T18881] ? ksys_write+0x1ac/0x250 [ 625.271651][T18881] ? __pfx_ksys_write+0x10/0x10 [ 625.271674][T18881] __x64_sys_sendmmsg+0x9c/0x100 [ 625.271701][T18881] ? lockdep_hardirqs_on+0x7d/0x110 [ 625.271753][T18881] do_syscall_64+0x123/0x790 [ 625.271775][T18881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.271800][T18881] RIP: 0033:0x7f027b99e0d9 [ 625.271819][T18881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.271838][T18881] RSP: 002b:00007f027c856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 625.271868][T18881] RAX: ffffffffffffffda RBX: 00007f027bc25fa0 RCX: 00007f027b99e0d9 [ 625.271881][T18881] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 625.271893][T18881] RBP: 00007f027c856090 R08: 0000000000000000 R09: 0000000000000000 [ 625.271905][T18881] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000002 [ 625.271917][T18881] R13: 00007f027bc26038 R14: 00007f027bc25fa0 R15: 00007ffffeccb6f8 [ 625.271964][T18881] [ 625.441409][T18890] size and base must be multiples of 4 kiB [ 625.443936][T18890] CPU: 3 UID: 0 PID: 18890 Comm: syz.4.3951 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.443966][T18890] Tainted: [L]=SOFTLOCKUP [ 625.443973][T18890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.443985][T18890] Call Trace: [ 625.443993][T18890] [ 625.444002][T18890] dump_stack_lvl+0x100/0x190 [ 625.444059][T18890] mtrr_add.cold+0x74/0x87 [ 625.444085][T18890] mtrr_ioctl+0x25a/0xcf0 [ 625.444114][T18890] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 625.444149][T18890] ? __pfx_mtrr_ioctl+0x10/0x10 [ 625.444175][T18890] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 625.444232][T18890] ? __pfx_mtrr_ioctl+0x10/0x10 [ 625.444262][T18890] proc_reg_unlocked_ioctl+0x229/0x320 [ 625.444293][T18890] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 625.444326][T18890] __x64_sys_ioctl+0x18e/0x210 [ 625.444347][T18890] do_syscall_64+0x123/0x790 [ 625.444368][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.444386][T18890] RIP: 0033:0x7f825f39e0d9 [ 625.444402][T18890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.444420][T18890] RSP: 002b:00007f8260246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.444439][T18890] RAX: ffffffffffffffda RBX: 00007f825f625fa0 RCX: 00007f825f39e0d9 [ 625.444452][T18890] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000006 [ 625.444464][T18890] RBP: 00007f825f435024 R08: 0000000000000000 R09: 0000000000000000 [ 625.444475][T18890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.444487][T18890] R13: 00007f825f626038 R14: 00007f825f625fa0 R15: 00007ffd4f2d6878 [ 625.444518][T18890] [ 625.521122][T18900] netlink: 'syz.0.3949': attribute type 11 has an invalid length. [ 625.546732][T18895] __nla_validate_parse: 2 callbacks suppressed [ 625.546746][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 625.624944][T18907] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3918892086 (125404546752 ns) > initial count (95458267904 ns). Using initial count to start timer. [ 625.638554][T18912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3918892086 (125404546752 ns) > initial count (95458267904 ns). Using initial count to start timer. [ 625.656544][ T5434] 8021q: adding VLAN 0 to HW filter on device eth32 [ 625.670110][T18918] netlink: 'syz.9.3958': attribute type 1 has an invalid length. [ 625.692761][T18919] device-mapper: ioctl: Target spec extends beyond end of parameters [ 625.697113][T18919] device-mapper: ioctl: unable to find target [ 625.702446][T18918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.746814][T18918] bond3: (slave veth7): Enslaving as an active interface with a down link [ 625.771587][T18918] bond2: (slave dummy0): Releasing active interface [ 625.777516][T18918] dummy0: left promiscuous mode [ 625.786779][T18918] bond3: (slave dummy0): making interface the new active one [ 625.792485][T18918] dummy0: entered promiscuous mode [ 625.794900][T18918] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 625.901596][T18931] netlink: 'syz.9.3960': attribute type 4 has an invalid length. [ 625.914170][T18931] netlink: 'syz.9.3960': attribute type 4 has an invalid length. [ 625.991725][ T34] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 625.995783][T18938] libceph: resolve '0' (ret=-3): failed [ 626.154702][ T34] usb 5-1: not running at top speed; connect to a high speed hub [ 626.158079][ T34] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 626.163866][ T34] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 626.171238][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.175386][ T34] usb 5-1: Product: syz [ 626.177282][ T34] usb 5-1: Manufacturer: syz [ 626.179471][ T34] usb 5-1: SerialNumber: syz [ 626.392675][T18925] 9pnet_virtio: no channels available for device syz [ 626.407877][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.412326][ T34] usb 5-1: MIDIStreaming interface descriptor not found [ 626.486999][ T34] usb 5-1: USB disconnect, device number 4 [ 626.575844][T18964] udevd[18964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.592244][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 626.592276][ T42] audit: type=1400 audit(1787259216.475:1602): avc: denied { create } for pid=18966 comm="syz.1.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 626.608464][ T42] audit: type=1400 audit(1787259216.485:1603): avc: denied { setopt } for pid=18966 comm="syz.1.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 626.634045][ T42] audit: type=1400 audit(1787259216.515:1604): avc: denied { ioctl } for pid=18966 comm="syz.1.3966" path="socket:[101306]" dev="sockfs" ino=101306 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 626.762908][ T42] audit: type=1400 audit(1787259216.645:1605): avc: denied { connect } for pid=18974 comm="syz.1.3969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 626.783153][T18977] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3970'. [ 626.814479][ T42] audit: type=1400 audit(1787259216.695:1606): avc: denied { map } for pid=18974 comm="syz.1.3969" path="socket:[99227]" dev="sockfs" ino=99227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 626.822431][ T42] audit: type=1400 audit(1787259216.695:1607): avc: denied { read accept } for pid=18974 comm="syz.1.3969" path="socket:[99227]" dev="sockfs" ino=99227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 626.864676][T18982] Cannot find add_set index 0 as target [ 626.955034][ T42] audit: type=1400 audit(1787259216.835:1608): avc: denied { map } for pid=18987 comm="syz.0.3974" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 626.963065][ T42] audit: type=1400 audit(1787259216.835:1609): avc: denied { execute } for pid=18987 comm="syz.0.3974" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 627.238583][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 627.490533][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3982'. [ 627.530671][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3983'. [ 627.647832][T19023] FAULT_INJECTION: forcing a failure. [ 627.647832][T19023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.656191][T19023] CPU: 0 UID: 0 PID: 19023 Comm: syz.4.3988 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.656211][T19023] Tainted: [L]=SOFTLOCKUP [ 627.656216][T19023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 627.656223][T19023] Call Trace: [ 627.656227][T19023] [ 627.656232][T19023] dump_stack_lvl+0x100/0x190 [ 627.656255][T19023] should_fail_ex.cold+0x5/0xa [ 627.656273][T19023] _copy_from_iter+0x1f4/0x1690 [ 627.656297][T19023] ? __pfx__copy_from_iter+0x10/0x10 [ 627.656321][T19023] ? sctp_addto_chunk+0xfa/0x2a0 [ 627.656335][T19023] ? __asan_memcpy+0x3c/0x60 [ 627.656348][T19023] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 627.656362][T19023] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 627.656377][T19023] sctp_user_addto_chunk+0x84/0x240 [ 627.656392][T19023] sctp_datamsg_from_user+0x60b/0x1360 [ 627.656419][T19023] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 627.656435][T19023] ? __asan_memmove+0x30/0x60 [ 627.656447][T19023] ? sctp_assoc_set_primary+0x276/0x310 [ 627.656463][T19023] ? sctp_assoc_add_peer+0x256/0x1550 [ 627.656483][T19023] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 627.656497][T19023] ? sctp_connect_new_asoc+0x41e/0x770 [ 627.656514][T19023] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 627.656532][T19023] ? selinux_sctp_bind_connect+0xe0/0x230 [ 627.656553][T19023] sctp_sendmsg+0x1144/0x22e0 [ 627.656574][T19023] ? __pfx_sctp_sendmsg+0x10/0x10 [ 627.656589][T19023] ? sock_has_perm+0x25a/0x2f0 [ 627.656604][T19023] ? __pfx_sock_has_perm+0x10/0x10 [ 627.656630][T19023] ? __pfx_sctp_sendmsg+0x10/0x10 [ 627.656648][T19023] inet_sendmsg+0x11c/0x140 [ 627.656664][T19023] ____sys_sendmsg+0x9c9/0xbe0 [ 627.656677][T19023] ? __pfx_inet_sendmsg+0x10/0x10 [ 627.656691][T19023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.656706][T19023] ? _kstrtoull+0x13c/0x1f0 [ 627.656719][T19023] ? __pfx__kstrtoull+0x10/0x10 [ 627.656735][T19023] ___sys_sendmsg+0x190/0x1e0 [ 627.656750][T19023] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.656783][T19023] __sys_sendmmsg+0x20c/0x440 [ 627.656803][T19023] ? __pfx___sys_sendmmsg+0x10/0x10 [ 627.656821][T19023] ? ksys_write+0x190/0x250 [ 627.656844][T19023] ? fput+0x7c/0x100 [ 627.656858][T19023] ? ksys_write+0x1ac/0x250 [ 627.656869][T19023] ? __pfx_ksys_write+0x10/0x10 [ 627.656882][T19023] __x64_sys_sendmmsg+0x9c/0x100 [ 627.656900][T19023] ? lockdep_hardirqs_on+0x7d/0x110 [ 627.656919][T19023] do_syscall_64+0x123/0x790 [ 627.656931][T19023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.656943][T19023] RIP: 0033:0x7f825f39e0d9 [ 627.656953][T19023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.656964][T19023] RSP: 002b:00007f8260246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 627.656976][T19023] RAX: ffffffffffffffda RBX: 00007f825f625fa0 RCX: 00007f825f39e0d9 [ 627.656983][T19023] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 627.656989][T19023] RBP: 00007f8260246090 R08: 0000000000000000 R09: 0000000000000000 [ 627.656995][T19023] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000002 [ 627.657002][T19023] R13: 00007f825f626038 R14: 00007f825f625fa0 R15: 00007ffd4f2d6878 [ 627.657018][T19023] [ 627.787146][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 627.808170][T19031] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 627.820352][T19031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3991'. [ 627.826887][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'. [ 627.976967][T19044] device-mapper: ioctl: Target spec extends beyond end of parameters [ 627.983729][T19044] device-mapper: ioctl: unable to find target [ 627.991379][T19048] netlink: 'syz.1.3996': attribute type 1 has an invalid length. [ 628.023674][ T42] audit: type=1400 audit(1787259217.905:1610): avc: denied { write } for pid=19053 comm="syz.9.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 628.029568][T19048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.078513][T19056] bond1: (slave veth3): Enslaving as an active interface with a down link [ 628.118107][T19048] bond1: (slave dummy0): making interface the new active one [ 628.122250][T19048] dummy0: entered promiscuous mode [ 628.124779][T19048] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 628.349230][T19072] netlink: 'syz.0.4003': attribute type 4 has an invalid length. [ 628.356623][T19072] netlink: 'syz.0.4003': attribute type 4 has an invalid length. [ 628.357577][T19074] 9p: Unknown access argument 18446744073709551615: -34 [ 628.497016][T19081] bridge0: port 3(veth0) entered blocking state [ 628.502186][T19081] bridge0: port 3(veth0) entered disabled state [ 628.504821][T19081] veth0: entered allmulticast mode [ 628.507467][T19081] veth0: entered promiscuous mode [ 628.510253][T19081] bridge0: port 3(veth0) entered blocking state [ 628.512818][T19081] bridge0: port 3(veth0) entered forwarding state [ 628.554012][T19083] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4009'. [ 628.577382][T19085] Cannot find add_set index 0 as target [ 628.917968][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4016'. [ 629.050976][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4020'. [ 629.228755][ T42] audit: type=1400 audit(1787259219.105:1611): avc: denied { mount } for pid=19122 comm="syz.0.4025" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 629.364182][ T9663] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.367190][ T9663] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.392894][ T9663] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 629.433127][T19138] device-mapper: ioctl: Target spec extends beyond end of parameters [ 629.436443][T19138] device-mapper: ioctl: unable to find target [ 629.443730][T19135] fuse: fd is not a fuse device [ 629.629670][T19150] netlink: 'syz.1.4033': attribute type 1 has an invalid length. [ 629.648915][T19150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 629.691239][T19150] bond2: (slave veth5): Enslaving as an active interface with a down link [ 629.704901][T19150] bond1: (slave dummy0): Releasing active interface [ 629.707688][T19150] dummy0: left promiscuous mode [ 629.716006][T19150] bond2: (slave dummy0): making interface the new active one [ 629.721357][T19150] dummy0: entered promiscuous mode [ 629.723907][T19150] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 629.819548][ T29] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 629.992769][ T29] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 629.997311][ T29] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.002087][ T29] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 27695, setting to 1024 [ 630.005624][ T29] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 630.009029][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.015657][T19146] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 630.038829][ T29] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.265435][T19176] Cannot find add_set index 0 as target [ 630.345899][T19185] FAULT_INJECTION: forcing a failure. [ 630.345899][T19185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.350903][T19185] CPU: 2 UID: 0 PID: 19185 Comm: syz.4.4047 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.350922][T19185] Tainted: [L]=SOFTLOCKUP [ 630.350926][T19185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 630.350945][T19185] Call Trace: [ 630.350958][T19185] [ 630.350969][T19185] dump_stack_lvl+0x100/0x190 [ 630.351035][T19185] should_fail_ex.cold+0x5/0xa [ 630.351059][T19185] _copy_from_user+0x2e/0xd0 [ 630.351099][T19185] move_addr_to_kernel+0x65/0x170 [ 630.351146][T19185] __sys_sendto+0x1b8/0x4e0 [ 630.351163][T19185] ? __pfx___sys_sendto+0x10/0x10 [ 630.351183][T19185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.351242][T19185] ? ksys_write+0x1ac/0x250 [ 630.351265][T19185] ? __pfx_ksys_write+0x10/0x10 [ 630.351278][T19185] __x64_sys_sendto+0xe0/0x1c0 [ 630.351293][T19185] ? do_syscall_64+0xae/0x790 [ 630.351304][T19185] ? lockdep_hardirqs_on+0x7d/0x110 [ 630.351322][T19185] do_syscall_64+0x123/0x790 [ 630.351334][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.351346][T19185] RIP: 0033:0x7f825f39e0d9 [ 630.351357][T19185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.351368][T19185] RSP: 002b:00007f8260246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 630.351387][T19185] RAX: ffffffffffffffda RBX: 00007f825f625fa0 RCX: 00007f825f39e0d9 [ 630.351394][T19185] RDX: 000000000001a000 RSI: 0000200000000400 RDI: 0000000000000003 [ 630.351401][T19185] RBP: 00007f8260246090 R08: 0000200000000100 R09: 000000000000001c [ 630.351407][T19185] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 630.351414][T19185] R13: 00007f825f626038 R14: 00007f825f625fa0 R15: 00007ffd4f2d6878 [ 630.351431][T19185] [ 630.896075][T19193] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 630.899031][T19193] overlayfs: missing 'lowerdir' [ 631.539738][T19215] __nla_validate_parse: 3 callbacks suppressed [ 631.539778][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'. [ 631.546770][T19215] FAULT_INJECTION: forcing a failure. [ 631.546770][T19215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.566133][T19215] CPU: 2 UID: 0 PID: 19215 Comm: syz.4.4057 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.566154][T19215] Tainted: [L]=SOFTLOCKUP [ 631.566158][T19215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 631.566173][T19215] Call Trace: [ 631.566186][T19215] [ 631.566197][T19215] dump_stack_lvl+0x100/0x190 [ 631.566264][T19215] should_fail_ex.cold+0x5/0xa [ 631.566287][T19215] _copy_to_user+0x32/0xd0 [ 631.566324][T19215] simple_read_from_buffer+0xcb/0x170 [ 631.566351][T19215] proc_fail_nth_read+0x1af/0x230 [ 631.566366][T19215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.566381][T19215] ? rw_verify_area+0xce/0x6d0 [ 631.566398][T19215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.566411][T19215] vfs_read+0x1e4/0xb40 [ 631.566424][T19215] ? __pfx_vfs_read+0x10/0x10 [ 631.566433][T19215] ? find_held_lock+0x2b/0x80 [ 631.566455][T19215] ? __fget_files+0x215/0x3d0 [ 631.566471][T19215] ? __fget_files+0x21f/0x3d0 [ 631.566489][T19215] ksys_read+0x12a/0x250 [ 631.566499][T19215] ? __pfx_ksys_read+0x10/0x10 [ 631.566515][T19215] do_syscall_64+0x123/0x790 [ 631.566571][T19215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.566583][T19215] RIP: 0033:0x7f825f35e90e [ 631.566593][T19215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 631.566605][T19215] RSP: 002b:00007f8260245fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.566624][T19215] RAX: ffffffffffffffda RBX: 00007f82602466c0 RCX: 00007f825f35e90e [ 631.566631][T19215] RDX: 000000000000000f RSI: 00007f82602460a0 RDI: 0000000000000004 [ 631.566638][T19215] RBP: 00007f8260246090 R08: 0000000000000000 R09: 0000000000000000 [ 631.566644][T19215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.566651][T19215] R13: 00007f825f626038 R14: 00007f825f625fa0 R15: 00007ffd4f2d6878 [ 631.566686][T19215] [ 631.663938][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 631.663994][ T42] audit: type=1400 audit(1787259221.545:1615): avc: denied { mounton } for pid=19219 comm="syz.4.4059" path="/54/sys/devices/pci0000:00/0000:00:02.0/power/control" dev="sysfs" ino=2459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 631.689927][T19223] netlink: 'syz.1.4058': attribute type 4 has an invalid length. [ 631.698816][T19223] netlink: 'syz.1.4058': attribute type 4 has an invalid length. [ 632.167704][T19243] trusted_key: encrypted_key: insufficient parameters specified [ 632.187128][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 632.409815][ T9817] usb 14-1: USB disconnect, device number 5 [ 632.504113][T19249] FAULT_INJECTION: forcing a failure. [ 632.504113][T19249] name failslab, interval 1, probability 0, space 0, times 0 [ 632.508341][T19249] CPU: 3 UID: 0 PID: 19249 Comm: syz.1.4067 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.508359][T19249] Tainted: [L]=SOFTLOCKUP [ 632.508364][T19249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.508371][T19249] Call Trace: [ 632.508375][T19249] [ 632.508380][T19249] dump_stack_lvl+0x100/0x190 [ 632.508400][T19249] should_fail_ex.cold+0x5/0xa [ 632.508428][T19249] should_failslab+0xc2/0x120 [ 632.508458][T19249] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 632.508474][T19249] ? __alloc_skb+0x140/0x710 [ 632.508527][T19249] __alloc_skb+0x140/0x710 [ 632.508542][T19249] ? __alloc_skb+0x5b7/0x710 [ 632.508558][T19249] ? __pfx___alloc_skb+0x10/0x10 [ 632.508579][T19249] _sctp_make_chunk+0x51/0x270 [ 632.508614][T19249] sctp_make_datafrag_empty+0x14e/0x230 [ 632.508628][T19249] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 632.508641][T19249] ? sctp_datamsg_from_user+0x8e/0x1360 [ 632.508662][T19249] sctp_datamsg_from_user+0x5ea/0x1360 [ 632.508688][T19249] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 632.508709][T19249] ? __asan_memmove+0x30/0x60 [ 632.508722][T19249] ? sctp_assoc_set_primary+0x276/0x310 [ 632.508737][T19249] ? sctp_assoc_add_peer+0x256/0x1550 [ 632.508754][T19249] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 632.508768][T19249] ? sctp_connect_new_asoc+0x41e/0x770 [ 632.508785][T19249] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 632.508802][T19249] ? selinux_sctp_bind_connect+0xe0/0x230 [ 632.508823][T19249] sctp_sendmsg+0x1144/0x22e0 [ 632.508843][T19249] ? __pfx_sctp_sendmsg+0x10/0x10 [ 632.508857][T19249] ? sock_has_perm+0x25a/0x2f0 [ 632.508871][T19249] ? __pfx_sock_has_perm+0x10/0x10 [ 632.508896][T19249] ? __pfx_sctp_sendmsg+0x10/0x10 [ 632.508913][T19249] inet_sendmsg+0x11c/0x140 [ 632.508946][T19249] ____sys_sendmsg+0x9c9/0xbe0 [ 632.508959][T19249] ? __pfx_inet_sendmsg+0x10/0x10 [ 632.508973][T19249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.508988][T19249] ? _kstrtoull+0x13c/0x1f0 [ 632.509001][T19249] ? __pfx__kstrtoull+0x10/0x10 [ 632.509017][T19249] ___sys_sendmsg+0x190/0x1e0 [ 632.509032][T19249] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.509065][T19249] __sys_sendmmsg+0x20c/0x440 [ 632.509085][T19249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 632.509102][T19249] ? ksys_write+0x190/0x250 [ 632.509125][T19249] ? fput+0x7c/0x100 [ 632.509138][T19249] ? ksys_write+0x1ac/0x250 [ 632.509149][T19249] ? __pfx_ksys_write+0x10/0x10 [ 632.509162][T19249] __x64_sys_sendmmsg+0x9c/0x100 [ 632.509180][T19249] ? lockdep_hardirqs_on+0x7d/0x110 [ 632.509199][T19249] do_syscall_64+0x123/0x790 [ 632.509211][T19249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.509223][T19249] RIP: 0033:0x7f027b99e0d9 [ 632.509232][T19249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.509243][T19249] RSP: 002b:00007f027c856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 632.509255][T19249] RAX: ffffffffffffffda RBX: 00007f027bc25fa0 RCX: 00007f027b99e0d9 [ 632.509262][T19249] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 632.509268][T19249] RBP: 00007f027c856090 R08: 0000000000000000 R09: 0000000000000000 [ 632.509278][T19249] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000002 [ 632.509284][T19249] R13: 00007f027bc26038 R14: 00007f027bc25fa0 R15: 00007ffffeccb6f8 [ 632.509312][T19249] [ 632.658371][T19253] device-mapper: ioctl: Target spec extends beyond end of parameters [ 632.661907][T19253] device-mapper: ioctl: unable to find target [ 632.694989][T19261] netlink: 'syz.1.4071': attribute type 1 has an invalid length. [ 632.745832][T19261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 632.832832][T19267] bond3: (slave veth7): Enslaving as an active interface with a down link [ 632.841871][T19261] bond2: (slave dummy0): Releasing active interface [ 632.844775][T19261] dummy0: left promiscuous mode [ 632.857236][T19261] bond3: (slave dummy0): making interface the new active one [ 632.864954][T19261] dummy0: entered promiscuous mode [ 632.867694][T19261] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 632.905915][T19266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4072'. [ 632.908829][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 633.085010][T19287] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4081'. [ 633.091618][T19285] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 633.119925][T19285] UDF-fs: Scanning with blocksize 2048 failed [ 633.132845][T19285] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 633.138177][T19285] UDF-fs: Scanning with blocksize 4096 failed [ 633.171215][T19294] Cannot find add_set index 0 as target [ 633.228916][T19285] openvswitch: netlink: IP tunnel dst address not specified [ 633.267026][T19303] FAULT_INJECTION: forcing a failure. [ 633.267026][T19303] name failslab, interval 1, probability 0, space 0, times 0 [ 633.272287][T19303] CPU: 2 UID: 0 PID: 19303 Comm: syz.4.4087 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.272316][T19303] Tainted: [L]=SOFTLOCKUP [ 633.272323][T19303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 633.272333][T19303] Call Trace: [ 633.272340][T19303] [ 633.272347][T19303] dump_stack_lvl+0x100/0x190 [ 633.272378][T19303] should_fail_ex.cold+0x5/0xa [ 633.272400][T19303] should_failslab+0xc2/0x120 [ 633.272427][T19303] __kmalloc_cache_noprof+0x91/0x6b0 [ 633.272446][T19303] ? sctp_has_association+0xdd/0x270 [ 633.272465][T19303] ? sctp_association_new+0xbb/0x2990 [ 633.272496][T19303] sctp_association_new+0xbb/0x2990 [ 633.272526][T19303] sctp_connect_new_asoc+0x1a8/0x770 [ 633.272553][T19303] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 633.272575][T19303] ? selinux_sctp_bind_connect+0xe0/0x230 [ 633.272606][T19303] sctp_sendmsg+0x1743/0x22e0 [ 633.272640][T19303] ? __pfx_sctp_sendmsg+0x10/0x10 [ 633.272665][T19303] ? sock_has_perm+0x25a/0x2f0 [ 633.272686][T19303] ? __pfx_sock_has_perm+0x10/0x10 [ 633.272723][T19303] ? __might_fault+0xc5/0x140 [ 633.272750][T19303] ? __pfx_sctp_sendmsg+0x10/0x10 [ 633.272775][T19303] inet_sendmsg+0x11c/0x140 [ 633.272801][T19303] __sys_sendto+0x453/0x4e0 [ 633.272829][T19303] ? __pfx_inet_sendmsg+0x10/0x10 [ 633.272850][T19303] ? __pfx___sys_sendto+0x10/0x10 [ 633.272881][T19303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.272911][T19303] ? ksys_write+0x1ac/0x250 [ 633.272929][T19303] ? __pfx_ksys_write+0x10/0x10 [ 633.272950][T19303] __x64_sys_sendto+0xe0/0x1c0 [ 633.272977][T19303] ? do_syscall_64+0xae/0x790 [ 633.272995][T19303] ? lockdep_hardirqs_on+0x7d/0x110 [ 633.273022][T19303] do_syscall_64+0x123/0x790 [ 633.273041][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.273059][T19303] RIP: 0033:0x7f825f39e0d9 [ 633.273075][T19303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.273092][T19303] RSP: 002b:00007f8260246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 633.273111][T19303] RAX: ffffffffffffffda RBX: 00007f825f625fa0 RCX: 00007f825f39e0d9 [ 633.273124][T19303] RDX: 000000000001a000 RSI: 0000200000000400 RDI: 0000000000000003 [ 633.273136][T19303] RBP: 00007f8260246090 R08: 0000200000000100 R09: 000000000000001c [ 633.273149][T19303] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 633.273159][T19303] R13: 00007f825f626038 R14: 00007f825f625fa0 R15: 00007ffd4f2d6878 [ 633.273187][T19303] [ 633.715101][T19323] netlink: 92 bytes leftover after parsing attributes in process `syz.9.4095'. [ 633.995376][T19340] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4102'. [ 634.007654][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4099'. [ 634.120260][T19346] netlink: 'syz.4.4103': attribute type 4 has an invalid length. [ 634.157732][T19346] netlink: 'syz.4.4103': attribute type 4 has an invalid length. [ 634.233696][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 634.333237][T19358] device-mapper: ioctl: Target spec extends beyond end of parameters [ 634.341783][T19358] device-mapper: ioctl: unable to find target [ 634.539083][T19371] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 634.556801][T19371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.591345][T19371] bond2: (slave veth3): Enslaving as an active interface with a down link [ 634.605026][T19371] bond2: (slave dummy0): making interface the new active one [ 634.608652][T19371] dummy0: entered promiscuous mode [ 634.610930][T19371] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 634.612530][T19367] infiniband syz2: set down [ 634.617450][T19367] infiniband syz2: added ipvlan0 [ 634.634411][T19367] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 634.639222][T19367] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 634.645655][T19367] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 634.671511][T19367] RDS/IB: syz2: added [ 634.673166][T19367] smc: adding ib device syz2 with port count 1 [ 634.675429][T19367] smc: ib device syz2 port 1 has no pnetid [ 634.774050][T19377] kvm: pic: single mode not supported [ 634.897150][ T42] audit: type=1400 audit(1787259224.775:1616): avc: denied { read } for pid=19384 comm="syz.9.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 634.925083][T19389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4120'. [ 635.001350][T19393] bond1 (unregistering): Released all slaves [ 635.204825][T19399] Cannot find add_set index 0 as target [ 635.413442][T19405] jffs2: notice: (19405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 635.423452][ T42] audit: type=1400 audit(1787259225.305:1617): avc: denied { write } for pid=19404 comm="syz.0.4126" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.431254][T19405] jffs2: error: (19405) jffs2_do_read_inode: requested to read a nonexistent ino 511 [ 635.436812][ T42] audit: type=1400 audit(1787259225.305:1618): avc: denied { add_name } for pid=19404 comm="syz.0.4126" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.447327][T19405] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 635.493355][ T42] audit: type=1400 audit(1787259225.375:1619): avc: denied { write } for pid=19407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.549250][ T42] audit: type=1400 audit(1787259225.425:1620): avc: denied { write } for pid=19411 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.916927][ T42] audit: type=1400 audit(1787259225.795:1621): avc: denied { write } for pid=19432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.986763][ T42] audit: type=1400 audit(1787259225.865:1622): avc: denied { write } for pid=19442 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.000564][T19447] netlink: 'syz.9.4139': attribute type 4 has an invalid length. [ 636.066732][T19454] /dev/sg0: Can't lookup blockdev [ 636.116284][ T42] audit: type=1400 audit(1787259225.995:1623): avc: denied { write } for pid=19455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.135707][ T42] audit: type=1400 audit(1787259226.015:1624): avc: denied { watch watch_reads } for pid=19457 comm="syz.0.4142" path="/95/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 636.181169][T19461] device-mapper: ioctl: Target spec extends beyond end of parameters [ 636.184410][T19461] device-mapper: ioctl: unable to find target [ 636.265359][T19467] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 636.423324][T19484] netlink: 'syz.4.4149': attribute type 1 has an invalid length. [ 636.467147][T19484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.522744][T19491] bond1: (slave veth3): Enslaving as an active interface with a down link [ 636.551087][T19484] bond1: (slave dummy0): making interface the new active one [ 636.554811][T19484] dummy0: entered promiscuous mode [ 636.556934][T19484] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 636.676447][T19509] __nla_validate_parse: 3 callbacks suppressed [ 636.676460][T19509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 636.681417][T19509] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4156'. [ 636.719204][T19514] netlink: 'syz.4.4155': attribute type 4 has an invalid length. [ 636.724592][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 636.724607][ T42] audit: type=1400 audit(1787259226.605:1630): avc: denied { write } for pid=19510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.728546][T19514] netlink: 'syz.4.4155': attribute type 4 has an invalid length. [ 636.774216][T19519] Cannot find add_set index 0 as target [ 636.815214][ T42] audit: type=1400 audit(1787259226.695:1631): avc: denied { write } for pid=19520 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.970705][ T42] audit: type=1400 audit(1787259226.855:1632): avc: denied { write } for pid=19527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.979048][ T9609] dummy0: left promiscuous mode [ 637.045457][ T42] audit: type=1400 audit(1787259226.925:1633): avc: denied { write } for pid=19542 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.131706][T19551] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 637.135284][ T42] audit: type=1400 audit(1787259227.015:1634): avc: denied { relabelto } for pid=19550 comm="syz.9.4169" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 637.170008][ T42] audit: type=1400 audit(1787259227.015:1635): avc: denied { associate } for pid=19550 comm="syz.9.4169" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=565 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 637.189122][ T42] audit: type=1400 audit(1787259227.015:1636): avc: denied { unlink } for pid=18026 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 637.204762][ T42] audit: type=1400 audit(1787259227.055:1637): avc: denied { write } for pid=19555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.265010][ T42] audit: type=1400 audit(1787259227.145:1638): avc: denied { write } for pid=19568 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.298125][T19572] device-mapper: ioctl: Target spec extends beyond end of parameters [ 637.301543][T19572] device-mapper: ioctl: unable to find target [ 637.318773][T19575] netlink: Only one type of NAT may be specified [ 637.324001][T19575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.398574][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4176'. [ 637.408869][ T42] audit: type=1400 audit(1787259227.295:1639): avc: denied { write } for pid=19577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.490895][T19590] Driver unsupported XDP return value 0 on prog (id 262) dev N/A, expect packet loss! [ 637.546282][T19590] 9pnet_virtio: no channels available for device syz [ 637.617828][T19614] netlink: 'syz.4.4183': attribute type 1 has an invalid length. [ 637.639215][T19614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 637.705983][T19624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4187'. [ 637.709134][T19624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4187'. [ 637.718264][T19624] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 637.725589][T19624] iwpm_hello_cb: Unable to parse nlmsg [ 637.727683][T19614] bond2: (slave veth5): Enslaving as an active interface with a down link [ 637.781478][T19626] bond1: (slave dummy0): Releasing active interface [ 637.784609][T19626] dummy0: left promiscuous mode [ 637.796086][T19630] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4189'. [ 637.800399][T19626] bond2: (slave dummy0): making interface the new active one [ 637.801741][T19630] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4189'. [ 637.804654][T19626] dummy0: entered promiscuous mode [ 637.810787][T19626] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 637.894398][T19637] Cannot find add_set index 0 as target [ 638.002238][T19646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 638.531810][T19689] autofs: Unknown parameter 't­ºí¶h~«v/}·JÆ [ 638.531810][T19689] ÞGŒêÀÂõ¤TÖ¢w¢ƒ‹~†ÖÿËÆ: %ïk˜‹-b#P±oxЈã›YwÆ°?nŠ<3sš¾ÞúڂѲLÏ}¬ÞkCLÐ!QçÅ3å;“)믞õ¶tF«€h1~d%éÁƒC{:ˆ%ѸuòKç\¤­' [ 638.605116][T19693] nfs: Unknown parameter '' [ 638.650280][T19695] device-mapper: ioctl: Target spec extends beyond end of parameters [ 638.652978][T19695] device-mapper: ioctl: unable to find target [ 638.703333][T19700] netlink: 'syz.9.4210': attribute type 1 has an invalid length. [ 638.730776][T19700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 638.740150][T19700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52415 sclass=netlink_route_socket pid=19700 comm=syz.9.4210 [ 638.777058][T19700] bond4: (slave geneve2): making interface the new active one [ 638.781646][T19700] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 638.789717][ T13] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 638.792739][ T13] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 638.795790][ T13] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 638.798800][ T13] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 638.891892][T19708] netlink: 'syz.9.4211': attribute type 4 has an invalid length. [ 638.904027][T19708] netlink: 'syz.9.4211': attribute type 4 has an invalid length. [ 638.926369][T19711] netlink: 'syz.4.4214': attribute type 1 has an invalid length. [ 638.929647][T19711] netlink: 'syz.4.4214': attribute type 4 has an invalid length. [ 638.933913][T19711] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4214'. [ 638.944627][T19711] netlink: 'syz.4.4214': attribute type 1 has an invalid length. [ 638.947777][T19711] netlink: 'syz.4.4214': attribute type 4 has an invalid length. [ 638.952432][T19711] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4214'. [ 638.960545][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'. [ 639.251820][ T9663] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 639.279957][T19740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.308975][T19740] bond4: (slave veth9): Enslaving as an active interface with a down link [ 639.326599][T19740] bond3: (slave dummy0): Releasing active interface [ 639.328801][T19740] dummy0: left promiscuous mode [ 639.334805][T19740] bond4: (slave dummy0): making interface the new active one [ 639.337938][T19740] dummy0: entered promiscuous mode [ 639.340929][T19740] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 639.419920][ T5079] Bluetooth: hci2: command 0x0406 tx timeout [ 639.450527][T19752] Cannot find add_set index 0 as target [ 643.866671][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 643.866705][ T42] audit: type=1400 audit(1787259233.745:1654): avc: denied { write } for pid=19765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.926180][ T42] audit: type=1400 audit(1787259233.805:1655): avc: denied { write } for pid=19768 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.740459][ T9803] dummy0: left promiscuous mode [ 646.039594][ T42] audit: type=1400 audit(1787259235.915:1656): avc: denied { write } for pid=19770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.089020][ T42] audit: type=1400 audit(1787259235.965:1657): avc: denied { write } for pid=19773 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.920282][ T13] dummy0: left promiscuous mode [ 649.355656][T19790] __nla_validate_parse: 1 callbacks suppressed [ 649.355674][T19790] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4235'. [ 649.427387][ T42] audit: type=1400 audit(1787259239.305:1658): avc: denied { listen } for pid=19799 comm="syz.1.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 649.577594][T19813] kernel read not supported for file /file0 (pid: 19813 comm: syz.1.4243) [ 649.584637][ T42] audit: type=1800 audit(1787259239.465:1659): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4243" name="file0" dev="mqueue" ino=107798 res=0 errno=0 [ 649.639468][ T5870] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 649.785705][T19825] validate_nla: 1 callbacks suppressed [ 649.785723][T19825] netlink: 'syz.1.4248': attribute type 1 has an invalid length. [ 649.799409][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 649.802921][ T5870] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 649.803610][T19825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 649.807312][ T5870] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 649.817067][ T5870] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 649.825096][ T5870] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.831125][ T5870] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 649.843566][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.846311][ T5870] usb 5-1: Product: syz [ 649.847652][ T5870] usb 5-1: Manufacturer: syz [ 649.849205][ T5870] usb 5-1: SerialNumber: syz [ 649.859014][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 649.862209][T19825] bond5: (slave veth11): Enslaving as an active interface with a down link [ 649.867645][ T5870] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input24 [ 649.874741][T19825] bond4: (slave dummy0): Releasing active interface [ 649.877682][T19825] dummy0: left promiscuous mode [ 649.886584][T19825] bond5: (slave dummy0): making interface the new active one [ 649.896027][T19825] dummy0: entered promiscuous mode [ 649.903702][T19825] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 649.913023][T19829] SET target dimension over the limit! [ 649.968657][T19833] netlink: 'syz.1.4251': attribute type 4 has an invalid length. [ 649.977728][T19833] netlink: 'syz.1.4251': attribute type 4 has an invalid length. [ 650.092054][ T5870] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 650.097294][ T5870] (id 0x00) [ 650.169503][ T5870] rc_core: IR keymap rc-imon-pad not found [ 650.172017][ T5870] Registered IR keymap rc-empty [ 650.174063][ T5870] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 650.178254][ T5870] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 650.233332][T19855] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4259'. [ 650.290450][ T5870] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 650.315657][ T5870] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input25 [ 650.327701][ T5870] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:5> initialized [ 650.464495][T19871] device-mapper: ioctl: Target spec extends beyond end of parameters [ 650.473355][T19871] device-mapper: ioctl: unable to find target [ 650.527109][ T5789] usb 5-1: USB disconnect, device number 5 [ 650.527428][T19792] imon:send_packet: packet tx failed (-71) [ 650.563825][T19792] imon:vfd_write: send packet #0 failed [ 650.621823][T19880] Cannot find add_set index 0 as target [ 650.717039][T19888] netlink: 'syz.9.4271': attribute type 1 has an invalid length. [ 650.753200][T19888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 650.767416][ T42] audit: type=1400 audit(1787259240.645:1660): avc: denied { mounton } for pid=19885 comm="syz.4.4270" path="/file0" dev="bpf" ino=107895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 650.807692][T19888] bond5: (slave veth9): Enslaving as an active interface with a down link [ 650.819815][T19888] bond3: (slave dummy0): Releasing active interface [ 650.837243][T19888] bond5: (slave dummy0): making interface the new active one [ 650.841359][T19888] dummy0: entered promiscuous mode [ 650.843981][T19888] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 650.955062][T19897] netlink: 'syz.9.4273': attribute type 4 has an invalid length. [ 650.963971][T19897] netlink: 'syz.9.4273': attribute type 4 has an invalid length. [ 651.387413][T19907] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4279'. [ 651.546094][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4285'. [ 651.700730][T19932] netlink: 'syz.1.4289': attribute type 1 has an invalid length. [ 651.729183][T19932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 651.831811][T19932] bond6: (slave veth13): Enslaving as an active interface with a down link [ 651.841619][T19945] bond5: (slave dummy0): Releasing active interface [ 651.844373][T19945] dummy0: left promiscuous mode [ 651.854640][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4292'. [ 651.868839][T19945] bond6: (slave dummy0): making interface the new active one [ 651.873194][T19945] dummy0: entered promiscuous mode [ 651.876824][T19945] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 651.930223][T19954] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4296'. [ 652.035767][T19967] netlink: 'syz.0.4301': attribute type 4 has an invalid length. [ 652.057363][T19969] netlink: 'syz.1.4304': attribute type 4 has an invalid length. [ 652.067031][T19969] netlink: 'syz.1.4304': attribute type 4 has an invalid length. [ 652.102375][T19973] lo: entered allmulticast mode [ 652.105385][T19973] bond0: entered allmulticast mode [ 652.108523][T19973] dummy0: entered allmulticast mode [ 652.115081][T19973] eql: entered allmulticast mode [ 652.117442][T19973] ifb0: entered allmulticast mode [ 652.120181][T19973] ifb1: entered allmulticast mode [ 652.126191][T19973] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 652.138867][T19973] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 652.146523][T19973] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 652.150519][T19973] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 652.155171][T19973] hwsim0: entered allmulticast mode [ 652.157682][T19973] ieee802154 phy0 wpan0: entered allmulticast mode [ 652.161494][T19973] ieee802154 phy1 wpan1: entered allmulticast mode [ 652.164609][T19973] teql0: entered allmulticast mode [ 652.167295][T19973] tunl0: entered allmulticast mode [ 652.170650][T19973] gre0: entered allmulticast mode [ 652.172737][T19973] gretap0: entered allmulticast mode [ 652.174895][T19973] erspan0: entered allmulticast mode [ 652.177068][T19973] ip_vti0: entered allmulticast mode [ 652.179198][T19973] ip6_vti0: entered allmulticast mode [ 652.181883][T19973] sit0: entered allmulticast mode [ 652.184587][T19973] ip6tnl0: entered allmulticast mode [ 652.186970][T19973] ip6gre0: entered allmulticast mode [ 652.189165][T19973] lapb0: entered allmulticast mode [ 652.192212][T19973] lapb1: entered allmulticast mode [ 652.194992][T19973] lapb2: entered allmulticast mode [ 652.197483][T19973] lapb3: entered allmulticast mode [ 652.199780][T19973] lapb4: entered allmulticast mode [ 652.201954][T19973] lapb5: entered allmulticast mode [ 652.204037][T19973] lapb6: entered allmulticast mode [ 652.206747][T19973] lowpan0: entered allmulticast mode [ 652.210109][T19973] netdevsim netdevsim2 eth12: entered allmulticast mode [ 652.214205][T19973] netdevsim netdevsim2 eth13: entered allmulticast mode [ 652.218195][T19973] netdevsim netdevsim2 eth14: entered allmulticast mode [ 652.221587][T19973] netdevsim netdevsim2 eth15: entered allmulticast mode [ 652.224888][T19973] netdevsim netdevsim6 eth9: entered allmulticast mode [ 652.228102][T19973] netdevsim netdevsim6 eth22: entered allmulticast mode [ 652.231717][T19973] netdevsim netdevsim6 eth23: entered allmulticast mode [ 652.235140][T19973] netdevsim netdevsim6 eth24: entered allmulticast mode [ 652.238596][T19973] gadget gadget.0 upnlink0: entered allmulticast mode [ 652.242244][T19973] netdevsim netdevsim8 eth8: entered allmulticast mode [ 652.245559][T19973] netdevsim netdevsim8 eth21: entered allmulticast mode [ 652.248634][T19973] netdevsim netdevsim8 eth25: entered allmulticast mode [ 652.252569][T19973] netdevsim netdevsim8 eth26: entered allmulticast mode [ 652.255670][T19973] netdevsim netdevsim3 eth11: entered allmulticast mode [ 652.258906][T19973] netdevsim netdevsim3 eth18: entered allmulticast mode [ 652.263477][T19973] netdevsim netdevsim3 eth19: entered allmulticast mode [ 652.266413][T19973] netdevsim netdevsim3 eth20: entered allmulticast mode [ 652.269673][T19973] netdevsim netdevsim5 eth27: entered allmulticast mode [ 652.272920][T19973] netdevsim netdevsim5 eth30: entered allmulticast mode [ 652.276336][T19973] netdevsim netdevsim5 eth31: entered allmulticast mode [ 652.280753][T19973] netdevsim netdevsim5 eth32: entered allmulticast mode [ 652.300618][T19984] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 652.357095][ T42] audit: type=1400 audit(1787259242.235:1661): avc: denied { write } for pid=19987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.445782][ T42] audit: type=1400 audit(1787259242.325:1662): avc: denied { write } for pid=19997 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.481227][T20001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.530383][ T42] audit: type=1400 audit(1787259242.415:1663): avc: denied { write } for pid=20004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.538548][T20001] bond3: (slave veth7): Enslaving as an active interface with a down link [ 652.548501][T20007] bond2: (slave dummy0): Releasing active interface [ 652.557997][T20007] bond3: (slave dummy0): making interface the new active one [ 652.561483][T20007] dummy0: entered promiscuous mode [ 652.564181][T20007] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 652.575278][ T42] audit: type=1400 audit(1787259242.455:1664): avc: denied { write } for pid=20008 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.664011][ T42] audit: type=1400 audit(1787259242.545:1665): avc: denied { write } for pid=20010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.734165][ T42] audit: type=1400 audit(1787259242.615:1666): avc: denied { write } for pid=20013 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.152262][ T42] audit: type=1400 audit(1787259243.035:1667): avc: denied { listen } for pid=20019 comm="syz.9.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 653.208301][T20029] Cannot find add_set index 0 as target [ 653.230544][T20031] team0: Device vlan2 is already an upper device of the team interface [ 653.438348][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4328'. [ 653.451194][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4328'. [ 653.488598][ T9803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.497041][ T9803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.504439][ T9803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.524081][ T6960] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.560989][T20057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.562201][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4332'. [ 653.880751][T20063] bond4: (slave veth9): Enslaving as an active interface with a down link [ 654.016985][T20065] bond7: (slave geneve2): making interface the new active one [ 654.023503][T20065] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 654.035362][T20057] bond3: (slave dummy0): Releasing active interface [ 654.038126][T20057] dummy0: left promiscuous mode [ 654.046104][T20057] bond4: (slave dummy0): making interface the new active one [ 654.050478][T20057] dummy0: entered promiscuous mode [ 654.053288][T20057] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 654.059759][T12132] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.091002][T12132] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.094866][T12132] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.098700][T12132] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.248264][T20104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62746 sclass=netlink_route_socket pid=20104 comm=syz.9.4343 [ 654.393010][T20115] device-mapper: ioctl: Target spec extends beyond end of parameters [ 654.396582][T20115] device-mapper: ioctl: unable to find target [ 654.448491][T20122] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4351'. [ 654.804455][T11821] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 655.032712][T20157] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4366'. [ 655.183240][T20165] validate_nla: 7 callbacks suppressed [ 655.183257][T20165] netlink: 'syz.1.4370': attribute type 13 has an invalid length. [ 655.188874][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 655.205486][T20165] netlink: 'syz.1.4370': attribute type 13 has an invalid length. [ 655.208087][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 655.219507][T20071] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.223170][T20071] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.226895][T20071] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.231201][T20071] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.445727][T20174] netlink: 'syz.1.4374': attribute type 1 has an invalid length. [ 655.467445][T20174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 655.518660][T20174] bond8: (slave veth15): Enslaving as an active interface with a down link [ 655.536843][T20174] bond6: (slave dummy0): Releasing active interface [ 655.546185][T20174] dummy0: left promiscuous mode [ 655.556154][T20174] bond8: (slave dummy0): making interface the new active one [ 655.561226][T20174] dummy0: entered promiscuous mode [ 655.564282][T20174] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 655.617628][T20181] netlink: 'syz.1.4377': attribute type 21 has an invalid length. [ 655.622908][T20181] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4377'. [ 655.625804][T20181] netlink: 'syz.1.4377': attribute type 4 has an invalid length. [ 655.628231][T20181] netlink: 'syz.1.4377': attribute type 5 has an invalid length. [ 655.631329][T20181] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4377'. [ 655.641110][T20183] device-mapper: ioctl: Target spec extends beyond end of parameters [ 655.643989][T20183] device-mapper: ioctl: unable to find target [ 655.687248][T20188] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4380'. [ 655.740898][T20192] Cannot find add_set index 359 as target [ 655.846762][T12348] IPVS: starting estimator thread 0... [ 655.870840][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 655.870852][ T42] audit: type=1400 audit(1787259245.755:1669): avc: denied { ioctl } for pid=20202 comm="syz.1.4387" path="socket:[108104]" dev="sockfs" ino=108104 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 655.871786][T20205] netlink: 'syz.0.4386': attribute type 4 has an invalid length. [ 655.894819][T20205] netlink: 'syz.0.4386': attribute type 4 has an invalid length. [ 655.929420][T20204] IPVS: using max 31 ests per chain, 74400 per kthread [ 655.963119][T20212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4390'. [ 656.055690][T20220] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4393'. [ 656.141725][T20228] syz_tun: entered allmulticast mode [ 656.145599][T20228] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 656.151502][T20228] mroute: pending queue full, dropping entries [ 656.277652][T20238] device-mapper: ioctl: Target spec extends beyond end of parameters [ 656.281465][T20238] device-mapper: ioctl: unable to find target [ 656.389603][T20243] tipc: Started in network mode [ 656.391856][T20243] tipc: Node identity 2000004, cluster identity 4711 [ 656.394847][T20243] tipc: Node number set to 33554436 [ 657.183652][T20257] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 657.207227][T20257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 657.254853][T20257] bond5: (slave veth11): Enslaving as an active interface with a down link [ 657.266624][T20257] bond4: (slave dummy0): Releasing active interface [ 657.270240][T20257] dummy0: left promiscuous mode [ 657.278631][T20257] bond5: (slave dummy0): making interface the new active one [ 657.284617][T20257] dummy0: entered promiscuous mode [ 657.287591][T20257] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 657.293800][T20257] netlink: 'syz.4.4408': attribute type 10 has an invalid length. [ 657.297193][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4408'. [ 657.313721][T20257] bond5: (slave dummy0): Releasing active interface [ 657.368486][T20262] xt_hashlimit: size too large, truncated to 1048576 [ 657.633429][T20278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.703230][T20278] bond6: (slave veth13): Enslaving as an active interface with a down link [ 657.706201][T20286] dummy0: left promiscuous mode [ 657.724116][T20286] bond6: (slave dummy0): making interface the new active one [ 657.727630][T20286] dummy0: entered promiscuous mode [ 657.730137][T20286] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 657.738642][T20278] bond6: (slave dummy0): Releasing active interface [ 657.957676][T20320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.013423][T20320] bond3: (slave veth5): Enslaving as an active interface with a down link [ 658.025991][T20320] bond2: (slave dummy0): Releasing active interface [ 658.036329][T20320] bond3: (slave dummy0): making interface the new active one [ 658.040580][T20320] dummy0: entered promiscuous mode [ 658.043198][T20320] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 658.379529][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 658.395539][T20349] syzkaller1: entered promiscuous mode [ 658.397917][T20349] syzkaller1: entered allmulticast mode [ 658.404487][T20349] trusted_key: encrypted_key: hex blob is missing [ 658.524914][T20352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 658.559504][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 658.562470][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 658.566468][T20352] bond7: (slave veth15): Enslaving as an active interface with a down link [ 658.569643][ T29] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 658.573440][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 658.574261][T20352] dummy0: left promiscuous mode [ 658.577443][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 658.583946][T20352] bond7: (slave dummy0): making interface the new active one [ 658.584110][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 658.587208][T20352] dummy0: entered promiscuous mode [ 658.592430][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 658.597118][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.597173][T20352] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 658.603120][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.617795][T20352] bond7: (slave dummy0): Releasing active interface [ 658.818399][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 658.820247][ T29] usbtmc 5-1:16.0: can't read capabilities [ 658.989414][ T8784] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 659.026148][ T5829] usb 5-1: USB disconnect, device number 6 [ 659.090922][T20222] syz_tun: left allmulticast mode [ 659.140801][ T8784] usb 14-1: not running at top speed; connect to a high speed hub [ 659.144821][ T8784] usb 14-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 659.149095][ T8784] usb 14-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 659.155097][ T8784] usb 14-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 659.157706][ T8784] usb 14-1: Product: syz [ 659.159053][ T8784] usb 14-1: SerialNumber: syz [ 659.318582][T20383] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 659.369166][T20364] 9pnet_virtio: no channels available for device syz [ 659.387958][ T8784] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.390717][ T8784] usb 14-1: MIDIStreaming interface descriptor not found [ 659.443472][ T8784] usb 14-1: USB disconnect, device number 6 [ 659.454398][T20390] __nla_validate_parse: 5 callbacks suppressed [ 659.454426][T20390] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4460'. [ 659.501546][T20391] udevd[20391]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.504749][T20394] Cannot find add_set index 1792 as target [ 659.585611][ T42] audit: type=1400 audit(1787259249.465:1670): avc: denied { create } for pid=20397 comm="syz.0.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 659.700135][T20403] 8021q: adding VLAN 0 to HW filter on device bond9 [ 659.749179][T20403] bond9: (slave veth17): Enslaving as an active interface with a down link [ 659.762374][T20403] bond8: (slave dummy0): Releasing active interface [ 659.765148][T20403] dummy0: left promiscuous mode [ 659.773381][T20403] bond9: (slave dummy0): making interface the new active one [ 659.777381][T20403] dummy0: entered promiscuous mode [ 659.780231][T20403] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 659.790755][T20403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4465'. [ 659.795678][T20403] bond9: (slave dummy0): Releasing active interface [ 659.968241][T20418] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 659.972997][T20418] CIFS mount error: No usable UNC path provided in device string! [ 659.972997][T20418] [ 659.977080][T20418] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 660.303467][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4478'. [ 660.683503][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4482'. [ 660.767545][T20442] syzkaller1: entered promiscuous mode [ 660.770666][T20442] syzkaller1: entered allmulticast mode [ 660.785869][T20442] validate_nla: 7 callbacks suppressed [ 660.785887][T20442] netlink: 'syz.9.4483': attribute type 1 has an invalid length. [ 660.792468][T20442] netlink: 'syz.9.4483': attribute type 4 has an invalid length. [ 660.795852][T20442] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4483'. [ 660.862179][T20448] overlayfs: failed to clone upperpath [ 661.028738][T20465] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY) [ 661.032919][T20465] device-mapper: ioctl: error adding target to table [ 661.066002][T20470] netlink: 'syz.0.4491': attribute type 4 has an invalid length. [ 661.082819][T20470] netlink: 'syz.0.4491': attribute type 4 has an invalid length. [ 661.127382][ T42] audit: type=1400 audit(1787259251.005:1671): avc: denied { read } for pid=20469 comm="syz.1.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 661.162497][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.166689][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.169055][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.171518][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.173839][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.176317][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.178552][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.181471][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.184197][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.186480][T20479] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 661.338495][T20491] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4502'. [ 661.401521][T20494] tmpfs: Bad value for 'mpol' [ 661.410126][T20494] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 661.415072][ T42] audit: type=1400 audit(1787259251.295:1672): avc: denied { watch } for pid=20490 comm="syz.9.4502" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 661.426837][ T42] audit: type=1400 audit(1787259251.305:1673): avc: denied { watch_sb watch_reads } for pid=20490 comm="syz.9.4502" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 661.452835][T20498] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 661.495960][T20498] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4505'. [ 661.532578][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'. [ 661.561587][ T42] audit: type=1400 audit(1787259251.445:1674): avc: denied { accept } for pid=20502 comm="syz.1.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 661.612844][T20507] netlink: 'syz.1.4508': attribute type 1 has an invalid length. [ 661.633582][T20507] 8021q: adding VLAN 0 to HW filter on device bond10 [ 661.674570][T20507] bond10: (slave veth19): Enslaving as an active interface with a down link [ 661.682709][T20507] dummy0: left promiscuous mode [ 661.688583][T20507] bond10: (slave dummy0): making interface the new active one [ 661.693050][T20507] dummy0: entered promiscuous mode [ 661.695804][T20507] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 661.876876][ T42] audit: type=1400 audit(1787259251.755:1675): avc: denied { name_bind } for pid=20516 comm="syz.4.4512" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 661.887385][T20519] TCP: TCP_TX_DELAY enabled [ 661.951316][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'. [ 662.000398][ T12] dummy0: left promiscuous mode [ 662.010395][T20531] Cannot find del_set index 359 as target [ 662.191396][T20550] netlink: 'syz.1.4526': attribute type 4 has an invalid length. [ 662.205593][T20550] netlink: 'syz.1.4526': attribute type 4 has an invalid length. [ 662.618724][T20576] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 662.723258][T20579] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4535'. [ 662.834702][T20584] Cannot find add_set index 0 as target [ 662.926730][T20588] Cannot find add_set index 0 as target [ 663.109585][ T42] audit: type=1400 audit(1787259252.995:1676): avc: denied { write } for pid=20593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.221508][ T42] audit: type=1400 audit(1787259253.095:1677): avc: denied { write } for pid=20602 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.484695][T20622] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY) [ 663.488548][T20622] device-mapper: ioctl: error adding target to table [ 663.580813][ T42] audit: type=1400 audit(1787259253.455:1678): avc: denied { compute_member } for pid=20634 comm="syz.9.4559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 663.949448][T20670] netlink: 'syz.0.4572': attribute type 1 has an invalid length. [ 663.993996][T20670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 663.998662][T20675] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 664.055774][T20670] bond4: (slave veth7): Enslaving as an active interface with a down link [ 664.068863][T20678] bond3: (slave dummy0): Releasing active interface [ 664.071967][T20678] dummy0: left promiscuous mode [ 664.080185][T20678] bond4: (slave dummy0): making interface the new active one [ 664.084590][T20678] dummy0: entered promiscuous mode [ 664.087260][T20678] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 664.099855][T20670] netlink: 'syz.0.4572': attribute type 10 has an invalid length. [ 664.130138][T20670] bond4: (slave dummy0): Releasing active interface [ 664.255639][T20703] netlink: 'syz.0.4583': attribute type 4 has an invalid length. [ 664.496478][T20733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 664.580465][T20737] 8021q: adding VLAN 0 to HW filter on device bond11 [ 664.634674][T20737] bond11: (slave veth21): Enslaving as an active interface with a down link [ 664.650426][T20737] bond10: (slave dummy0): Releasing active interface [ 664.653378][T20737] dummy0: left promiscuous mode [ 664.664013][T20737] bond11: (slave dummy0): making interface the new active one [ 664.668186][T20737] dummy0: entered promiscuous mode [ 664.671491][T20737] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 664.679994][T20737] __nla_validate_parse: 3 callbacks suppressed [ 664.680010][T20737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4597'. [ 664.687898][T20737] bond11: (slave dummy0): Releasing active interface [ 664.818640][T20751] overlayfs: missing 'lowerdir' [ 664.899396][ T5828] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 665.052225][ T5828] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 665.061832][ T5828] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 665.070159][ T5828] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25866, setting to 1024 [ 665.076103][ T5828] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 665.084288][ T5828] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25866, setting to 1024 [ 665.104158][ T5828] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.106922][ T5828] usb 14-1: Product: syz [ 665.108441][ T5828] usb 14-1: Manufacturer: syz [ 665.110749][ T5828] usb 14-1: SerialNumber: syz [ 665.116189][T20742] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 665.121082][ T5828] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 665.135589][ T5828] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 665.141597][ T5828] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 665.166284][T20784] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4617'. [ 665.265964][T20793] binder: 20791:20793 ioctl 4018620d 0 returned -22 [ 665.295115][T20795] Cannot find del_set index 1200 as target [ 665.327680][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.330608][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.333320][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.336114][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.339796][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.343276][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.346598][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.347308][ T42] audit: type=1400 audit(1787259255.225:1679): avc: denied { write } for pid=20798 comm="syz.1.4622" name="/" dev="configfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 665.350150][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.358718][ T42] audit: type=1400 audit(1787259255.245:1680): avc: denied { create } for pid=20798 comm="syz.1.4622" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 665.361543][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.361728][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.361914][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.362090][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.362267][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.383114][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.386021][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.388704][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.391375][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.394425][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.397218][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.399961][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.402474][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.404999][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.407508][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.410033][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.412508][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.414978][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.417480][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.420684][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.423641][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.428670][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.431675][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.434687][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.437703][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.440704][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.443666][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.446673][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.449661][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.452635][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.455631][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.458659][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.461644][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.464626][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.467616][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.470668][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.473704][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.476728][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.479713][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.482726][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.485698][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.488702][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.491737][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.494817][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.497795][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.500779][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.503727][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.506739][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.509839][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.512844][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.515799][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.518794][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.521787][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.524785][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.527839][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.530872][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.533839][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.536825][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.539773][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.542791][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.545795][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.548335][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.550867][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.553381][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.555919][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.558417][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.560908][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.563403][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.565929][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.568453][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.570996][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.573484][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.575995][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.578513][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.581034][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.583548][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.586066][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.588576][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.591115][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.593659][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.596128][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.598772][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.601376][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.603877][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.606395][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.608902][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.611463][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.613984][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.616498][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.619008][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.621629][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.624161][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.626702][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.629210][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.631693][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.634218][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.636780][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.639303][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.641846][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.644381][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.646947][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.649467][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.651968][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.654473][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.657037][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.659554][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.662101][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.664659][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.667185][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.669736][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.672444][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.675131][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.677692][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.680259][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.682752][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.685279][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.687835][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.690388][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.692934][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.695483][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.698048][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.700668][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.703194][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.705702][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.708229][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.710769][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.715131][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.718826][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.722526][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.725230][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.727786][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.730392][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.732903][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.735386][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.737878][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.740303][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.742797][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.745328][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.747916][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.750430][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.752827][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.755311][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.757845][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.760452][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.763010][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.765512][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.768043][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.770584][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.773109][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.775607][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.778126][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.780607][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.783100][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.785552][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.788121][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.790622][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.793115][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.795558][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.798249][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.801067][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.803993][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.806847][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.809681][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.812666][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.815338][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.818351][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.821531][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.824519][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.827548][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.830829][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.833850][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.836665][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.839175][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.841799][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.844311][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.847362][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.849916][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.852975][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.855951][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.858950][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.861936][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.864953][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.867494][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.870056][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.872599][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.875099][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.877606][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.880141][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.882670][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.885207][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.887804][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.890347][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.892847][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.895367][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.898005][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.900951][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.903541][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.906197][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.908836][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.911530][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.914114][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.916685][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.919926][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.922898][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.925995][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.928924][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.931590][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.934188][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.936848][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.940269][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.943255][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.946102][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.948857][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.951497][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.954281][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.957113][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.960049][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.962893][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.965898][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.969079][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.972142][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.975141][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.978343][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.980917][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.983804][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.987028][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.990269][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.993502][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 665.996801][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.000021][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.003259][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.006823][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.010278][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.013645][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.016989][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.020313][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.023524][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.026786][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.030037][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.033354][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.036664][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.039919][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.043058][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.046276][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.049527][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.052931][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.056225][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.059512][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.062797][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.066003][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.069214][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.072573][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.075715][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.078980][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.082247][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.085470][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.088713][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.091936][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.095164][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.098340][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.101516][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.104747][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.107958][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.111775][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.115307][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.118683][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.122058][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.125282][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.128551][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.131827][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.134921][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.138088][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.141329][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.144506][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.147692][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.150871][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.154019][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.157194][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.160353][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.163631][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.166975][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.170208][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.173391][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.176637][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.179923][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.183115][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.186343][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.189468][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.192724][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.195962][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.199225][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.202497][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.205752][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.208993][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.212493][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.215929][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.219531][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.223052][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.226360][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.229627][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.232805][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.236155][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.239568][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.242954][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.246259][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.249537][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.252776][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.256028][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.259413][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.262685][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.265981][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.269149][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.272450][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.275685][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.278935][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.282148][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.285207][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.288446][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.291552][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.294780][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.297937][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.300877][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.303757][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.306077][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.308548][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.310902][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.313657][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.317447][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.320563][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.323189][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.326305][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.329023][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.332167][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.335133][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.337396][T20838] FAULT_INJECTION: forcing a failure. [ 666.337396][T20838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.338391][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.346564][T20838] CPU: 0 UID: 0 PID: 20838 Comm: syz.0.4636 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.346584][T20838] Tainted: [L]=SOFTLOCKUP [ 666.346588][T20838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 666.346595][T20838] Call Trace: [ 666.346626][T20838] [ 666.346637][T20838] dump_stack_lvl+0x100/0x190 [ 666.346693][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.346701][T20838] should_fail_ex.cold+0x5/0xa [ 666.346724][T20838] _copy_from_user+0x2e/0xd0 [ 666.346762][T20838] __sys_bpf+0x2f5/0x4a30 [ 666.346800][T20838] ? __pfx___sys_bpf+0x10/0x10 [ 666.346814][T20838] ? find_held_lock+0x2b/0x80 [ 666.346844][T20838] ? get_pid_task+0xfc/0x250 [ 666.346860][T20838] ? get_pid_task+0xfc/0x250 [ 666.346884][T20838] ? find_held_lock+0x2b/0x80 [ 666.346909][T20838] ? rcu_read_lock_any_held+0x6a/0x90 [ 666.346929][T20838] ? find_held_lock+0x2b/0x80 [ 666.346942][T20838] ? ksys_write+0x190/0x250 [ 666.346968][T20838] ? ksys_write+0x190/0x250 [ 666.347006][T20838] ? fput+0x7c/0x100 [ 666.347027][T20838] ? ksys_write+0x1ac/0x250 [ 666.347043][T20838] ? __x64_sys_bpf+0xce/0x140 [ 666.347063][T20838] __x64_sys_bpf+0xce/0x140 [ 666.347086][T20838] ? do_syscall_64+0xae/0x790 [ 666.347155][T20838] do_syscall_64+0x123/0x790 [ 666.347174][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.347193][T20838] RIP: 0033:0x7fd61019e0d9 [ 666.347208][T20838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.347221][T20838] RSP: 002b:00007fd610fb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.347246][T20838] RAX: ffffffffffffffda RBX: 00007fd610425fa0 RCX: 00007fd61019e0d9 [ 666.347258][T20838] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 666.347268][T20838] RBP: 00007fd610fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 666.347279][T20838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.347289][T20838] R13: 00007fd610426038 R14: 00007fd610425fa0 R15: 00007fff7eb707d8 [ 666.347312][T20838] [ 666.429708][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.433145][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.436431][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.439819][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.443218][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.446531][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.449841][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.453126][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.456378][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.460073][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.463556][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.467082][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.470310][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.473101][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.476125][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.478889][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.481754][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.484832][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.487894][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.490489][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.492996][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.495516][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.498192][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.500996][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.503506][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.506018][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.508724][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.511315][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.513817][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.516428][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.519124][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.521686][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.524208][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.526731][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.529253][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.531788][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.534454][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.537101][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.539721][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.542270][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.544953][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.547711][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.550538][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.553206][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.555948][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.558469][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.561046][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.563503][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.566109][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.568752][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.571284][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.573803][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.575821][T20847] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4639'. [ 666.576333][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.582364][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.584893][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.587415][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.589920][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.592452][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.595367][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.597918][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.600412][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.602921][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.605456][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.607990][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.610572][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.613606][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.616393][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.619167][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.622636][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.625728][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.628985][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.631719][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.634406][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.637136][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.640372][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.644359][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.647685][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.650745][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.653915][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.657177][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.660557][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.660831][T20853] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4641'. [ 666.663784][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.670072][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.672433][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4641'. [ 666.672604][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.678617][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.681675][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.684996][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.688316][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.692387][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.695651][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.698949][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.702256][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.705518][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.708851][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.712229][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.715502][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.718881][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.722144][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.725573][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.728891][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.732349][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.735644][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.738942][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.741694][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.744591][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.747423][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.750245][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.753223][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.755913][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.758514][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.761324][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.764274][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.767030][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.769725][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.772606][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.775083][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.777583][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.780196][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.782653][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.785116][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.787592][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.790274][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.792749][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.795234][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.809158][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.812345][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.814972][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.817516][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.820155][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.822671][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.825197][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.828535][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.831560][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.834175][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.836662][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.839120][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.842256][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.844859][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.847337][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.849939][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.852457][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.854930][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.857416][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.859985][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.862657][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.865134][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.865133][T20742] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 666.867618][ C3] usb 14-1: ti_interrupt_callback - nonzero urb status, -71 [ 666.873310][ C3] usb 14-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 666.948337][T20873] validate_nla: 3 callbacks suppressed [ 666.948357][T20873] netlink: 'syz.0.4649': attribute type 1 has an invalid length. [ 666.981223][T20873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.013107][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 667.013119][ T42] audit: type=1400 audit(1787259256.895:1682): avc: denied { write } for pid=20860 comm="syz.4.4646" name="functions" dev="configfs" ino=32724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 667.031831][T20873] bond5: (slave veth9): Enslaving as an active interface with a down link [ 667.035298][ T42] audit: type=1400 audit(1787259256.915:1683): avc: denied { write } for pid=20860 comm="syz.4.4646" name="extensions" dev="configfs" ino=112678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 667.044668][T20873] dummy0: left promiscuous mode [ 667.051278][T20873] bond5: (slave dummy0): making interface the new active one [ 667.055735][T20873] dummy0: entered promiscuous mode [ 667.058799][T20873] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 667.303355][T20894] netlink: 'syz.1.4657': attribute type 4 has an invalid length. [ 667.314588][T20894] netlink: 'syz.1.4657': attribute type 4 has an invalid length. [ 667.431401][T20897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20897 comm=syz.1.4658 [ 667.480689][ T42] audit: type=1800 audit(1787259257.365:1684): pid=20899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4659" name="nullb0" dev="tmpfs" ino=1188 res=0 errno=0 [ 667.625597][T20903] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 667.887699][T20918] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 667.916967][T20918] 8021q: adding VLAN 0 to HW filter on device bond8 [ 667.969458][T11798] usb 14-1: USB disconnect, device number 7 [ 668.027807][T11798] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 668.068164][T11798] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 668.081449][T20918] bond8: (slave veth17): Enslaving as an active interface with a down link [ 668.082121][T11798] ti_usb_3410_5052 14-1:2.0: device disconnected [ 668.085662][T20925] dummy0: left promiscuous mode [ 668.133879][T20925] bond8: (slave dummy0): making interface the new active one [ 668.149003][T20925] dummy0: entered promiscuous mode [ 668.154476][T20925] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 668.233675][T20935] Cannot find add_set index 0 as target [ 668.540493][ T5870] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 668.689498][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 668.692219][ T5870] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 668.696316][ T5870] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 668.699834][ T5870] usb 5-1: config 179 has no interface number 0 [ 668.701918][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 668.705328][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 668.709092][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 668.713662][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 668.717999][ T5870] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 668.722436][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.728432][T20941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.962396][ T5870] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input26 [ 669.066384][T20957] net_ratelimit: 3255 callbacks suppressed [ 669.066397][T20957] netlink: ct_mark mask cannot be 0 [ 669.070545][T20957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.137537][T20955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.140829][T20955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.146520][ T5870] usb 5-1: USB disconnect, device number 7 [ 669.146588][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 669.146617][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 669.545701][T20966] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 669.686433][T20970] netlink: 'syz.0.4684': attribute type 1 has an invalid length. [ 669.704563][T20970] bond6: entered promiscuous mode [ 669.706605][T20970] 8021q: adding VLAN 0 to HW filter on device bond6 [ 669.718280][T20970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4684'. [ 669.722376][T20970] bond6: entered allmulticast mode [ 669.726281][T20970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20970 comm=syz.0.4684 [ 669.745939][T20970] bond6: (slave bridge2): making interface the new active one [ 669.748972][T20970] bridge2: entered promiscuous mode [ 669.751537][T20970] bridge2: entered allmulticast mode [ 669.756094][T20970] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 669.835774][T20975] program syz.0.4686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.004506][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4691'. [ 670.053155][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'. [ 670.127504][T20988] kvm: pic: non byte write [ 670.278527][T21005] netlink: 'syz.0.4697': attribute type 1 has an invalid length. [ 670.311940][T21005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 670.353788][T21009] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4698'. [ 670.363684][T21005] bond7: (slave veth11): Enslaving as an active interface with a down link [ 670.376936][T21005] bond5: (slave dummy0): Releasing active interface [ 670.381315][T21005] dummy0: left promiscuous mode [ 670.391486][T21005] bond7: (slave dummy0): making interface the new active one [ 670.398196][T21005] dummy0: entered promiscuous mode [ 670.410228][T21005] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 670.584453][T21027] ================================================================== [ 670.586883][T21027] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 670.589197][T21027] Read of size 8 at addr ffff88802ebede18 by task syz.9.4707/21027 [ 670.592719][T21027] [ 670.594069][T21027] CPU: 0 UID: 0 PID: 21027 Comm: syz.9.4707 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.594088][T21027] Tainted: [L]=SOFTLOCKUP [ 670.594095][T21027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 670.594115][T21027] Call Trace: [ 670.594130][T21027] [ 670.594144][T21027] dump_stack_lvl+0x100/0x190 [ 670.594205][T21027] print_report+0x13d/0x4b0 [ 670.594235][T21027] ? __virt_addr_valid+0x239/0x430 [ 670.594271][T21027] ? dvb_device_open+0x33f/0x3b0 [ 670.594289][T21027] kasan_report+0xdf/0x1c0 [ 670.594327][T21027] ? dvb_device_open+0x33f/0x3b0 [ 670.594346][T21027] ? __pfx_dvb_device_open+0x10/0x10 [ 670.594363][T21027] dvb_device_open+0x33f/0x3b0 [ 670.594405][T21027] ? __pfx_dvb_device_open+0x10/0x10 [ 670.594424][T21027] chrdev_open+0x234/0x6a0 [ 670.594442][T21027] ? __pfx_chrdev_open+0x10/0x10 [ 670.594457][T21027] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 670.594480][T21027] do_dentry_open+0x6ab/0x14d0 [ 670.594494][T21027] ? __pfx_chrdev_open+0x10/0x10 [ 670.594512][T21027] vfs_open+0x82/0x3f0 [ 670.594530][T21027] path_openat+0x19fa/0x2440 [ 670.594547][T21027] ? __pfx_path_openat+0x10/0x10 [ 670.594565][T21027] do_file_open+0x20e/0x430 [ 670.594580][T21027] ? __pfx_do_file_open+0x10/0x10 [ 670.594601][T21027] ? _raw_spin_unlock+0x28/0x50 [ 670.594667][T21027] ? alloc_fd+0x471/0x7a0 [ 670.594688][T21027] do_sys_openat2+0x10f/0x1e0 [ 670.594708][T21027] ? __pfx_do_sys_openat2+0x10/0x10 [ 670.594726][T21027] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 670.594750][T21027] __x64_sys_openat+0x12d/0x210 [ 670.594769][T21027] ? __pfx___x64_sys_openat+0x10/0x10 [ 670.594799][T21027] do_syscall_64+0x123/0x790 [ 670.594817][T21027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.594840][T21027] RIP: 0033:0x7fecad15e90e [ 670.594856][T21027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 670.594881][T21027] RSP: 002b:00007fecae10ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 670.594916][T21027] RAX: ffffffffffffffda RBX: 00007fecae10b6c0 RCX: 00007fecad15e90e [ 670.594932][T21027] RDX: 0000000000000400 RSI: 00007fecae10ac00 RDI: ffffffffffffff9c [ 670.594944][T21027] RBP: 00007fecae10ac00 R08: 0000000000000000 R09: 0000000000000000 [ 670.594953][T21027] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 670.594962][T21027] R13: 00007fecad426038 R14: 00007fecad425fa0 R15: 00007fffbd1d9b08 [ 670.594979][T21027] [ 670.594985][T21027] [ 670.603473][T21029] FAULT_INJECTION: forcing a failure. [ 670.603473][T21029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.604439][T21027] Allocated by task 1: [ 670.604465][T21027] kasan_save_stack+0x30/0x50 [ 670.606556][T21029] CPU: 1 UID: 0 PID: 21029 Comm: syz.0.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.606585][T21029] Tainted: [L]=SOFTLOCKUP [ 670.606592][T21029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 670.606603][T21029] Call Trace: [ 670.606611][T21029] [ 670.606635][T21029] dump_stack_lvl+0x100/0x190 [ 670.606666][T21029] should_fail_ex.cold+0x5/0xa [ 670.606692][T21029] _copy_from_user+0x2e/0xd0 [ 670.606753][T21029] do_ip6t_set_ctl+0x9b8/0xd00 [ 670.606819][T21029] ? nf_sockopt_find.isra.0+0x222/0x290 [ 670.606862][T21029] ? nf_sockopt_find.isra.0+0x222/0x290 [ 670.606894][T21029] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 670.606921][T21029] ? __mutex_unlock_slowpath+0x35d/0x930 [ 670.606944][T21029] ? get_pid_task+0x106/0x250 [ 670.606967][T21029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 670.606997][T21029] ? nf_sockopt_find.isra.0+0x222/0x290 [ 670.607029][T21029] nf_setsockopt+0x8d/0xf0 [ 670.607061][T21029] ipv6_setsockopt+0x135/0x170 [ 670.607105][T21029] udpv6_setsockopt+0x64/0xb0 [ 670.607123][T21029] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 670.607171][T21029] do_sock_setsockopt+0xf3/0x1d0 [ 670.607196][T21029] __sys_setsockopt+0x195/0x220 [ 670.607229][T21029] __x64_sys_setsockopt+0xbd/0x160 [ 670.607255][T21029] ? do_syscall_64+0xae/0x790 [ 670.607273][T21029] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.607300][T21029] do_syscall_64+0x123/0x790 [ 670.607320][T21029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.607340][T21029] RIP: 0033:0x7fd61019e0d9 [ 670.607356][T21029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.607373][T21029] RSP: 002b:00007fd610fb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 670.607392][T21029] RAX: ffffffffffffffda RBX: 00007fd610425fa0 RCX: 00007fd61019e0d9 [ 670.607405][T21029] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 670.607417][T21029] RBP: 00007fd610fb1090 R08: 00000000000005e0 R09: 0000000000000000 [ 670.607429][T21029] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 670.607440][T21029] R13: 00007fd610426038 R14: 00007fd610425fa0 R15: 00007fff7eb707d8 [ 670.607469][T21029] [ 670.619741][T21031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.619914][T21027] kasan_save_track+0x14/0x30 [ 670.768515][T21027] __kasan_kmalloc+0xaa/0xb0 [ 670.770332][T21027] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 670.772417][T21027] dvb_register_device+0x1d6/0x1e20 [ 670.774439][T21027] dvb_register_frontend+0x552/0x820 [ 670.776551][T21027] vidtv_bridge_probe+0x44b/0xa30 [ 670.778501][T21027] platform_probe+0x106/0x1d0 [ 670.780367][T21027] really_probe+0x241/0xa60 [ 670.782115][T21027] __driver_probe_device+0x210/0x460 [ 670.784186][T21027] driver_probe_device+0x4a/0x140 [ 670.786174][T21027] __driver_attach+0x21f/0x5b0 [ 670.788072][T21027] bus_for_each_dev+0x13e/0x1d0 [ 670.789985][T21027] bus_add_driver+0x305/0x5b0 [ 670.791855][T21027] driver_register+0x1e2/0x360 [ 670.793709][T21027] vidtv_bridge_init+0x52/0x80 [ 670.795613][T21027] do_one_initcall+0x11c/0x6f0 [ 670.797522][T21027] kernel_init_freeable+0x6ea/0x7b0 [ 670.799559][T21027] kernel_init+0x21/0x1e0 [ 670.801256][T21027] ret_from_fork+0x730/0xd60 [ 670.803066][T21027] ret_from_fork_asm+0x1a/0x30 [ 670.804919][T21027] [ 670.805853][T21027] Freed by task 20816: [ 670.807478][T21027] kasan_save_stack+0x30/0x50 [ 670.809371][T21027] kasan_save_track+0x14/0x30 [ 670.810862][T21027] kasan_save_free_info+0x3b/0x70 [ 670.812631][T21027] __kasan_slab_free+0x5f/0x80 [ 670.814559][T21027] kfree+0x22b/0x6c0 [ 670.816231][T21027] dvb_device_put.part.0+0x57/0x90 [ 670.818253][T21027] dvb_device_open+0x2ba/0x3b0 [ 670.820133][T21027] chrdev_open+0x234/0x6a0 [ 670.821878][T21027] do_dentry_open+0x6ab/0x14d0 [ 670.823857][T21027] vfs_open+0x82/0x3f0 [ 670.825445][T21027] path_openat+0x19fa/0x2440 [ 670.827288][T21027] do_file_open+0x20e/0x430 [ 670.829148][T21027] do_sys_openat2+0x10f/0x1e0 [ 670.831040][T21027] __x64_sys_openat+0x12d/0x210 [ 670.832977][T21027] do_syscall_64+0x123/0x790 [ 670.834852][T21027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.837448][T21027] [ 670.838474][T21027] The buggy address belongs to the object at ffff88802ebede00 [ 670.838474][T21027] which belongs to the cache kmalloc-256 of size 256 [ 670.843821][T21027] The buggy address is located 24 bytes inside of [ 670.843821][T21027] freed 256-byte region [ffff88802ebede00, ffff88802ebedf00) [ 670.849021][T21027] [ 670.849962][T21027] The buggy address belongs to the physical page: [ 670.852536][T21027] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ebede00 pfn:0x2ebec [ 670.856723][T21027] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 670.860340][T21027] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 670.863819][T21027] page_type: f5(slab) [ 670.865546][T21027] raw: 00fff00000000240 ffff88801c042b40 ffffea0000bee310 ffffea0000de2d10 [ 670.869138][T21027] raw: ffff88802ebede00 000000080010000f 00000000f5000000 0000000000000000 [ 670.872623][T21027] head: 00fff00000000240 ffff88801c042b40 ffffea0000bee310 ffffea0000de2d10 [ 670.876111][T21027] head: ffff88802ebede00 000000080010000f 00000000f5000000 0000000000000000 [ 670.879643][T21027] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 670.883077][T21027] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 670.886600][T21027] page dumped because: kasan: bad access detected [ 670.889190][T21027] page_owner tracks the page as allocated [ 670.891488][T21027] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14098432110, free_ts 0 [ 670.899329][T21027] post_alloc_hook+0xfd/0x120 [ 670.901256][T21027] get_page_from_freelist+0xf46/0x3500 [ 670.903480][T21027] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 670.905926][T21027] new_slab+0xa2/0x660 [ 670.907627][T21027] refill_objects+0xe3/0x410 [ 670.909535][T21027] __pcs_replace_empty_main+0x372/0x680 [ 670.911799][T21027] __kmalloc_cache_noprof+0x47b/0x6b0 [ 670.914005][T21027] bus_add_driver+0x92/0x5b0 [ 670.915920][T21027] driver_register+0x1e2/0x360 [ 670.917917][T21027] usb_register_driver+0x21c/0x3e0 [ 670.919953][T21027] do_one_initcall+0x11c/0x6f0 [ 670.921897][T21027] kernel_init_freeable+0x6ea/0x7b0 [ 670.924079][T21027] kernel_init+0x21/0x1e0 [ 670.925854][T21027] ret_from_fork+0x730/0xd60 [ 670.927798][T21027] ret_from_fork_asm+0x1a/0x30 [ 670.929770][T21027] page_owner free stack trace missing [ 670.931947][T21027] [ 670.932926][T21027] Memory state around the buggy address: [ 670.935077][T21027] ffff88802ebedd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 670.938356][T21027] ffff88802ebedd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 670.941480][T21027] >ffff88802ebede00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 670.944548][T21027] ^ [ 670.946453][T21027] ffff88802ebede80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 670.949504][T21027] ffff88802ebedf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 670.952637][T21027] ================================================================== [ 670.958979][T21027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 670.961905][T21027] CPU: 1 UID: 0 PID: 21027 Comm: syz.9.4707 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.966181][T21027] Tainted: [L]=SOFTLOCKUP [ 670.967913][T21027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 670.971856][T21027] Call Trace: [ 670.973220][T21027] [ 670.974424][T21027] dump_stack_lvl+0x100/0x190 [ 670.976346][T21027] vpanic+0x553/0x970 [ 670.977972][T21027] ? __pfx_vpanic+0x10/0x10 [ 670.979796][T21027] ? mark_held_locks+0x40/0x70 [ 670.981765][T21027] ? dvb_device_open+0x33f/0x3b0 [ 670.983772][T21027] panic+0xd1/0xe0 [ 670.985330][T21027] ? __pfx_panic+0x10/0x10 [ 670.987136][T21027] ? dvb_device_open+0x33f/0x3b0 [ 670.989164][T21027] ? preempt_schedule_common+0x3c/0xb0 [ 670.991361][T21027] check_panic_on_warn.cold+0x19/0x34 [ 670.993510][T21027] end_report.part.0+0x3a/0x90 [ 670.995793][T21027] kasan_report.cold+0xe/0x18 [ 670.997737][T21027] ? dvb_device_open+0x33f/0x3b0 [ 670.999773][T21027] ? __pfx_dvb_device_open+0x10/0x10 [ 671.001885][T21027] dvb_device_open+0x33f/0x3b0 [ 671.003776][T21027] ? __pfx_dvb_device_open+0x10/0x10 [ 671.005920][T21027] chrdev_open+0x234/0x6a0 [ 671.007728][T21027] ? __pfx_chrdev_open+0x10/0x10 [ 671.009736][T21027] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 671.012272][T21027] do_dentry_open+0x6ab/0x14d0 [ 671.014179][T21027] ? __pfx_chrdev_open+0x10/0x10 [ 671.016249][T21027] vfs_open+0x82/0x3f0 [ 671.017886][T21027] path_openat+0x19fa/0x2440 [ 671.019732][T21027] ? __pfx_path_openat+0x10/0x10 [ 671.021671][T21027] do_file_open+0x20e/0x430 [ 671.023442][T21027] ? __pfx_do_file_open+0x10/0x10 [ 671.025457][T21027] ? _raw_spin_unlock+0x28/0x50 [ 671.027406][T21027] ? alloc_fd+0x471/0x7a0 [ 671.029089][T21027] do_sys_openat2+0x10f/0x1e0 [ 671.030954][T21027] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.033014][T21027] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 671.035512][T21027] __x64_sys_openat+0x12d/0x210 [ 671.037532][T21027] ? __pfx___x64_sys_openat+0x10/0x10 [ 671.039912][T21027] do_syscall_64+0x123/0x790 [ 671.042013][T21027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.044656][T21027] RIP: 0033:0x7fecad15e90e [ 671.046557][T21027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 671.054492][T21027] RSP: 002b:00007fecae10ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 671.057909][T21027] RAX: ffffffffffffffda RBX: 00007fecae10b6c0 RCX: 00007fecad15e90e [ 671.061070][T21027] RDX: 0000000000000400 RSI: 00007fecae10ac00 RDI: ffffffffffffff9c [ 671.064365][T21027] RBP: 00007fecae10ac00 R08: 0000000000000000 R09: 0000000000000000 [ 671.067589][T21027] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 671.070884][T21027] R13: 00007fecad426038 R14: 00007fecad425fa0 R15: 00007fffbd1d9b08 [ 671.074383][T21027] [ 671.076415][T21027] Kernel Offset: disabled [ 671.078201][T21027] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:54:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a73cb5 RDI=ffffffff9bc0e340 RBP=ffffffff9bc0e300 RSP=ffffc9000c15f358 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b900227 R15=ffffffff85a73c50 RIP=ffffffff85a73cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fecae10b6c0 ffffffff 00c00000 GS =0000 ffff8880d5bb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fecad187700 CR3=0000000058c9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000f802fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbd1d9ff6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbd1d9ff6 00007fffbd1d9ffc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecad235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecad235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecad2357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecad235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fecad3f25f8 00007fecad3f25c8 00007fecad3f2600 00007fecad3f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000640 RBX=ffff88805db23240 RCX=0000000000000200 RDX=8db84454d49187e5 RSI=00000000a291cf78 RDI=000000009243c287 RBP=000000000000001e RSP=ffffc9002219f2d8 R8 =00000000c4437af4 R9 =000000000000001e R10=0000000000000007 R11=0000000000000001 R12=ffff88805db22580 R13=0000000000000007 R14=0000000000000003 R15=8db84454d49187e5 RIP=ffffffff81e6310f RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556be64500 ffffffff 00c00000 GS =0000 ffff8880d5cb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f027c7556c8 CR3=000000002c74f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffeccbbe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffeccbbe6 00007ffffeccbbec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f027ba35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f027ba35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f027ba357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f027ba35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000230 RBX=0000000000000000 RCX=0000000000000078 RDX=0000000000000000 RSI=ffff88802373d6f8 RDI=ffffffff8ede9ac0 RBP=0000000000000007 RSP=ffffc9000671f4f0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000001 R12=ffff88802373cb00 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8ede9ac0 RIP=ffffffff81e622fe RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555cdae500 ffffffff 00c00000 GS =0000 ffff8880d5db6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6101aed40 CR3=0000000022ec9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0000003 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 732f7570632f7075 6f7267637a79732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79732f7570632f 70756f7267637a79 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7eb70cc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7eb70cc6 00007fff7eb70ccc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd610235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd610235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6102357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd610235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 250073657479625f 6e695f74696d696c 5f74666f732e7972 6f6d656d2f732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005640515c475f 4b4c5f514c484c49 5f51434a560b5c57 4a4840480a560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff888037af8380 RCX=1ffffffff2286514 RDX=0000000000000020 RSI=ffffffffffffffff RDI=ffffffff8ea14800 RBP=ffff888037af83c0 RSP=ffffc90007467dc8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffffff8ea14800 R14=ffffffffffffffff R15=0000000000000020 RIP=ffffffff85554f75 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f586cd4f880 ffffffff 00c00000 GS =0000 ffff8880d5eb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fecad427dac CR3=000000004bc0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004014 Opmask01=0000000000000001 Opmask02=00000000ffbfeb7f Opmask03=0000000080000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c00dbd6f0 0000555c00dbc6f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c00dbc6f0 0000555c00dbc6f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c00c65070 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c00c57f50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f586cf25b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c47705642425a4b 2f2f7a732f8e6cdd ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f1e 2f2f2f2f2f2f2f4a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3165314132307042 41006364755f796d 6d75640045003731 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c580c410f0d4d42 41005e59485f4450 5048590045000a0c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73796f6a2d35362e 3937313a313a302d 6273752d302e6463 685f796d6d750039 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772c30362c41352c 39352c38352c3135 2c303566736c6d2c 31312c30312c352c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342c332c322c312c 3061722c4533312c 4433312c4333312c 4233312c4133312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733312c3633312c 3433312c3333312c 3133312c3033316b 2c35312c332c312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d4245453165 3141323070424132 317633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000