last executing test programs: 2m25.418195489s ago: executing program 3 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r5, &(0x7f0000000000/0x2000)=nil, 0x5000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) 2m25.417491598s ago: executing program 3 (id=147): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x101002, 0x0) lseek(r1, 0x3, 0x1) r2 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) poll(&(0x7f00000000c0)=[{r0, 0x4}, {r2, 0x10}, {r2, 0x6000}], 0x3, 0x5) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x80, 0x2, 0x2, "d454ce81ad7d527a0e7447de4048315cdd0700000000000000d399e0a56bff03"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x101002, 0x0) (async) lseek(r1, 0x3, 0x1) (async) accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) (async) poll(&(0x7f00000000c0)=[{r0, 0x4}, {r2, 0x10}, {r2, 0x6000}], 0x3, 0x5) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x80, 0x2, 0x2, "d454ce81ad7d527a0e7447de4048315cdd0700000000000000d399e0a56bff03"}) (async) 2m25.326860839s ago: executing program 3 (id=149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x806, 0x26, 0x5}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x22b, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x160, 0x180, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@hl={{0x28}, {0x2, 0x5}}, @common=@srh1={{0x90}, {0xc, 0x9, 0x7, 0x0, 0xfc01, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xff0000ff, 0xffff00], 0x773112106688b153, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@icmp6={{0x28}, {0xb, "2917", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 2m25.326602326s ago: executing program 3 (id=150): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-', 0x1}], 0x2) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0xfffffffffffffffe) 2m25.325573963s ago: executing program 3 (id=152): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) (async) close(r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xe0000015}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) io_uring_setup(0x142e, &(0x7f00000004c0)={0x0, 0xe7ff, 0x1, 0x2, 0x15b, 0x0, r5}) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280), &(0x7f0000000480)=@v3={0x3000000, [{0xd3d, 0x5}, {0x66e, 0x8}], r8}, 0x18, 0x2) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00', @local}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@empty, @in=@initdev}}, {{@in6=@dev}}}, &(0x7f0000000580)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000580)=0xe8) quotactl$Q_SETINFO(0x3, &(0x7f0000000540)=@filename='./file1\x00', r9, &(0x7f0000000700)={0xd6cf, 0x7, 0x0, 0x7}) (async) quotactl$Q_SETINFO(0x3, &(0x7f0000000540)=@filename='./file1\x00', r9, &(0x7f0000000700)={0xd6cf, 0x7, 0x0, 0x7}) 2m25.226578177s ago: executing program 3 (id=155): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0}, 0xff}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x4}, {0x4}, {0x6, 0x5}, {0xa, 0x5}, {0x3, 0x2}]}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x9}, {0x7, 0x5088}]}, @const={0x4, 0x0, 0x0, 0xa, 0x4}, @union={0x6, 0x2, 0x0, 0x5, 0x0, 0x518, [{0xf, 0x3, 0x3}, {0xd, 0x4}]}, @enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x0, [{0xa, 0x5cb, 0xc4fd}, {0xe, 0x3, 0x1}, {0x7, 0x2, 0x2}, {0x9, 0x2, 0x8}, {0xc, 0x6, 0x4}, {0xd, 0x800, 0x101}]}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000480)=""/88, 0xf4, 0x58, 0x1, 0x1, 0x10000, @value}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x26, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @exit, @snprintf], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000740)=[{0x3, 0x5, 0x2}, {0x2, 0x3, 0xf, 0x3}, {0x3, 0x1, 0x10}, {0x4, 0x1, 0x10, 0xa}, {0x2, 0x3, 0xe, 0x2}], 0x10, 0x9401, @void, @value}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x40}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfa9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000a00)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xca4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x45, &(0x7f0000000300)=""/69, 0x40f00, 0x46, '\x00', r6, 0x19, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xc, 0x6, 0x6}, 0x10, 0x2bc87, r8, 0x9, &(0x7f0000000bc0)=[r9, r10, r11, r0, r12, r13], &(0x7f0000000c00)=[{0x2, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x4, 0xb}, {0x0, 0x1, 0x1, 0x8}, {0x1, 0x5, 0xf}, {0x5, 0x1, 0x8, 0xb}, {0x5, 0x1, 0xa}, {0x1, 0x5, 0x10, 0xa}, {0x2, 0x3, 0x7, 0xd}, {0x1, 0x3, 0xd, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x7, 0x4, 0x5a7}]}]}, {0x0, [0x5f, 0x0, 0x30, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) 2m12.393540186s ago: executing program 1 (id=292): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESDEC=r1], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x7, &(0x7f00000001c0)=@framed={{}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x10, 0x8}, @alu={0x4, 0x1, 0x1, 0xb, 0xb, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x6d5b4bd5c8b914d6, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 2m12.392559077s ago: executing program 1 (id=293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000600001"], 0x0) 2m12.327064185s ago: executing program 1 (id=295): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) cachestat(r0, &(0x7f0000000000)={0x4, 0x10}, &(0x7f0000000040), 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, 0x0) 2m12.256846814s ago: executing program 1 (id=299): r0 = memfd_secret(0x80000) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:shell_exec_t:s0\x00', 0x22, 0x1) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000c40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}) ftruncate(r0, 0x3) (async) io_setup(0x5, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_io_uring_setup(0x649d, &(0x7f0000000000)={0x0, 0xbb14, 0x0, 0x0, 0x32e}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000440)={r3}, 0x1) (async) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) (async, rerun: 32) read$FUSE(r0, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x110c230000, 0x18, 0x2, @tid=r7}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {r5, r6}}, './file0\x00'}) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f0000000c00), &(0x7f0000005280)=0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) r11 = getgid() (async) statx(r2, &(0x7f0000000840)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002cc0)="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", 0x2000, &(0x7f00000051c0)={&(0x7f0000000180)={0x50, 0xfffffffffffffff5, 0xd6, {0x7, 0x2b, 0x4, 0x20400000, 0x7ff, 0xc, 0x3, 0x4, 0x0, 0x0, 0x2, 0x1bc}}, &(0x7f0000000240)={0x18, 0x0, 0x5, {0x4}}, &(0x7f00000002c0)={0x18, 0x0, 0x2, {0x83}}, &(0x7f0000000300)={0x18, 0x0, 0x1}, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x7, {0x401}}, &(0x7f00000003c0)={0x28, 0x0, 0x9, {{0x0, 0x5, 0x3, r7}}}, &(0x7f0000000480)={0x60, 0x0, 0x3, {{0xfffffffffffffff9, 0x10000, 0xfffffffffffffffe, 0x4, 0x2, 0x8020000, 0x2, 0x7715}}}, &(0x7f0000000400)={0x18, 0x0, 0x3, {0x9}}, &(0x7f0000000500)={0x1c, 0x0, 0x8, {'-]*%/--@#&:\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0x401, {0x0, 0x10}}, &(0x7f00000005c0)={0x78, 0x0, 0x8, {0x7, 0x4, 0x0, {0x4, 0x101, 0x2, 0x0, 0x4, 0xffffffffffffffff, 0x2, 0x3, 0xb52e, 0x4000, 0x7fff, r8, r6, 0x3, 0x8001}}}, &(0x7f0000000640)={0x90, 0x0, 0x6, {0x1000, 0x0, 0x881a, 0x2, 0x8, 0x5, {0x4, 0x5, 0x2, 0x8, 0x10000, 0x6, 0x8, 0x7, 0x1, 0xa000, 0x2, r5, r6, 0x1000, 0x7}}}, &(0x7f0000000700)={0x50, 0x0, 0x7, [{0x4, 0xfff2, 0x1, 0x0, '\''}, {0x0, 0x401, 0x1, 0x1ff, '\x00'}]}, &(0x7f0000004cc0)={0x388, 0x0, 0x7, [{{0x4, 0x0, 0xfffffffffffffffe, 0xb1ba, 0x100, 0x800, {0x5, 0x0, 0x7, 0x2, 0x2, 0x9, 0x0, 0x4, 0x284, 0x8000, 0x2, r10, r11, 0x8, 0xab9e}}, {0x3, 0x9, 0x1, 0x6, '&'}}, {{0x4, 0x1, 0x7fff, 0x2, 0x5, 0x6, {0x1, 0x2, 0x7, 0x4, 0x7, 0x4, 0x7fffffff, 0x10000, 0x6, 0x1000, 0x2, r5, r12, 0x3, 0x6}}, {0x5, 0x6, 0x22, 0x9, 'system_u:object_r:shell_exec_t:s0\x00'}}, {{0x0, 0x0, 0x9, 0x67e3, 0xfffffffc, 0xf, {0x1, 0x9, 0x3, 0x5, 0x5, 0x1, 0xc, 0xfffffc00, 0x7, 0x1000, 0x0, r5, r6, 0x81, 0x7}}, {0x6, 0x9, 0x11, 0x9, 'security.selinux\x00'}}, {{0x3, 0x1, 0x3, 0x9, 0x75ae, 0x7, {0x6, 0x32, 0x7, 0x0, 0x0, 0x100, 0x100, 0xfffffffe, 0x1, 0x2000, 0x8, r5, r13, 0x7, 0x8}}, {0x5, 0x4, 0x22, 0x7cb39e0d, 'system_u:object_r:shell_exec_t:s0\x00'}}, {{0x0, 0x2, 0x81, 0x3ff, 0x8, 0x1, {0x2, 0x8001, 0xe44, 0x6, 0x6, 0xb, 0x64, 0xf, 0x7, 0x0, 0x5, r5, r14, 0x80000001, 0x101}}, {0x0, 0x48, 0x10, 0xd, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, &(0x7f0000000b00)={0xa0, 0x0, 0x3, {{0x0, 0x3, 0xb8, 0x7f, 0x3, 0x56, {0x6, 0x800, 0xb91e, 0x8, 0x0, 0x3, 0x200, 0x5, 0x0, 0x6000, 0x7fff, r5, r6, 0xffffffff, 0x9}}, {0x0, 0x11}}}, &(0x7f0000000bc0)={0x20, 0xfffffffffffffffe, 0xe, {0x58, 0x4, 0x8, 0x1}}, &(0x7f0000005080)={0x130, 0xfffffffffffffff5, 0x3, {0x7, 0xa112, 0x0, '\x00', {0x10000, 0x3, 0x1, 0x67bd, r5, r6, 0x1000, '\x00', 0x6, 0x8, 0x2, 0x6, {0xa, 0x80000000}, {0xffffffffffffff33, 0x3}, {0xffffffffffffffff, 0x6}, {0x9, 0x9}, 0x101, 0x4, 0x800, 0x1}}}}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m12.178427017s ago: executing program 1 (id=300): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000600)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r1, 0x25, 0x0, @void}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x7}, {0xffffffffffffffff}, 0x10, 0x0, 0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)="351fcef2161646dab1a1baafea282a9b3c909c3d04116524395fa4984dc09795108301a6d65219169362e25d6b5e75afe91be90509577214ac2a87b01de6d978bd5b240575ebf79367c92a1e302ff977a71febdfb9e03c14bdb1ff436811f98463091c0880ec1b7a8b0338f2dfe7f73811774b94d9346ffc87be2f502c8479089a57569d892a60dd3d4a", 0x8a, 0x0, &(0x7f0000000640)={0x2, 0x156, {0x1, 0xc, 0x5c, "ddadf5998d6b63b56b3ae7c19e6887398963a52bef56c5e6296888de041c7be97f65dec54c03c98d88e24fd5ef390dfe002c2cc36043d623da9304b2f7adabf6b68a70230eeef7a8922664d5b4ceb1e29ad0b9105336f35c817725e2", 0xed, "cb8a6b69ab46fbafa259e7fa295bd667e732c456bb175fb5171f5187124fe333ca7c75a4a4bb573190fae1482d5d3f0abced339e25a4de24d4e9a56fc08456320300607155ed9d5fa1d1f2dc6d66292061afc91f06e2bdc3b8a19fd070621c534916d2884b9a14602844dba9655df07c7e0b9be208775d1e0109d7a860bb40174ceac91cfb18529c9a0153d24fb4aae13140aaaefaa885a1dc4d64a6f42885950d97331a55d7ca51fa78d2219bb11efe6763eba928f9f7d64f8603d2756ba28b2a55393df265bb48d1809817b482a91c3146874e8b009656e10f8843c948de2eba35cb3d344aca3da47bffdc91"}, 0xe2, "bad9de17a6c1704f6f4c6c25928bbae83c798cb7a2454398e4a9c2b468c647cd72c69aedbaae296dfd7a62edf5d7ec6f11315faa651beb24c136ef54f28562d433b11e666516de7dd2c2d782413c02f442a65115e13f3ff918c6924d61866edac418358808a37ef66eda9b8ee8fd230526e79d4770d403aeea78b5b68e2d3d5bcd8969e4c49e61e1ee12caff8b948d888bb80fa8d9e719dd815860ae6ff62052d528d0eb6ff24e326930fde3b03eae2a5acb4d29b0b8521b9a4d06d514c3db01fe5268bc398f40ce5db8c3a3f052cbaa95a5874fca6309350b930086473b866527ef"}, 0x244}) 2m12.07094644s ago: executing program 1 (id=302): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x9, 0x8, 0x9, 0x1be}, 0x0, 0xfffffffe, &(0x7f00000000c0)={{0x9, 0x0, 0x6, 0xc}}, 0x8, &(0x7f0000000200)="9b58f19e977f1bea17ee273dcc8885e657d508d0f139b0eebdff6a416d958fa3ae93ebb9464518ab7a943315e38ccb090aca9001bce248b05b117fff2fb2a303f0fef2c05b27084778cf8ecbb1fd679916001da861a2f2aaea8b69241ff55972f2baa4c02fffc6362802cca7f0499b7a7b2098c5a04ca9ba9df766e8687ab7e2b2df662abcff9a30e1537d4c74f6d8d6c363fc46ae42c8cf95b3f223611a8384e99dfc9bcd566ca3b5f3c0361fb1ca9e21233b2fa033a4476ad04085a0689e30763986c3fc", 0x4}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0900000010000e0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 2m9.840142816s ago: executing program 32 (id=155): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x40209}, {0xffffff7e, 0x5461d6e9}]}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0}, 0xff}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x4}, {0x4}, {0x6, 0x5}, {0xa, 0x5}, {0x3, 0x2}]}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x9}, {0x7, 0x5088}]}, @const={0x4, 0x0, 0x0, 0xa, 0x4}, @union={0x6, 0x2, 0x0, 0x5, 0x0, 0x518, [{0xf, 0x3, 0x3}, {0xd, 0x4}]}, @enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x0, [{0xa, 0x5cb, 0xc4fd}, {0xe, 0x3, 0x1}, {0x7, 0x2, 0x2}, {0x9, 0x2, 0x8}, {0xc, 0x6, 0x4}, {0xd, 0x800, 0x101}]}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000480)=""/88, 0xf4, 0x58, 0x1, 0x1, 0x10000, @value}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x26, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @exit, @snprintf], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000740)=[{0x3, 0x5, 0x2}, {0x2, 0x3, 0xf, 0x3}, {0x3, 0x1, 0x10}, {0x4, 0x1, 0x10, 0xa}, {0x2, 0x3, 0xe, 0x2}], 0x10, 0x9401, @void, @value}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x40}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfa9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000a00)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xca4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000180)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x45, &(0x7f0000000300)=""/69, 0x40f00, 0x46, '\x00', r6, 0x19, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xc, 0x6, 0x6}, 0x10, 0x2bc87, r8, 0x9, &(0x7f0000000bc0)=[r9, r10, r11, r0, r12, r13], &(0x7f0000000c00)=[{0x2, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x4, 0xb}, {0x0, 0x1, 0x1, 0x8}, {0x1, 0x5, 0xf}, {0x5, 0x1, 0x8, 0xb}, {0x5, 0x1, 0xa}, {0x1, 0x5, 0x10, 0xa}, {0x2, 0x3, 0x7, 0xd}, {0x1, 0x3, 0xd, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x7, 0x4, 0x5a7}]}]}, {0x0, [0x5f, 0x0, 0x30, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) 1m57.104028635s ago: executing program 33 (id=302): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @win={{0x9, 0x8, 0x9, 0x1be}, 0x0, 0xfffffffe, &(0x7f00000000c0)={{0x9, 0x0, 0x6, 0xc}}, 0x8, &(0x7f0000000200)="9b58f19e977f1bea17ee273dcc8885e657d508d0f139b0eebdff6a416d958fa3ae93ebb9464518ab7a943315e38ccb090aca9001bce248b05b117fff2fb2a303f0fef2c05b27084778cf8ecbb1fd679916001da861a2f2aaea8b69241ff55972f2baa4c02fffc6362802cca7f0499b7a7b2098c5a04ca9ba9df766e8687ab7e2b2df662abcff9a30e1537d4c74f6d8d6c363fc46ae42c8cf95b3f223611a8384e99dfc9bcd566ca3b5f3c0361fb1ca9e21233b2fa033a4476ad04085a0689e30763986c3fc", 0x4}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0900000010000e0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 1m29.226809509s ago: executing program 0 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000600)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$getflags(r6, 0x401) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000006e4799ee82a353505d06aca58f77000400"/38, @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000004000380"], 0x18}}, 0x0) r8 = creat(&(0x7f0000002dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xdd) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0xc0) 1m29.065255572s ago: executing program 0 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r3], 0x14) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0xffff, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000040)="e1", 0x1, 0x200008c4, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfff, 0x7) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) userfaultfd(0x801) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8282200}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/3571], 0xe0c}, 0x1, 0x0, 0x0, 0x800}, 0x240000c1) syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0x7d7c, 0x8, 0x3, 0x3d1}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1810000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRESDEC=r2, @ANYRESOCT=r0], 0x58}}, 0x0) 1m28.997971032s ago: executing program 0 (id=924): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x2, 0x2, 0xd5}) r0 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfa, 0x181000) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfa, 0x181000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1f, 0x0, &(0x7f0000000980)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m28.996159362s ago: executing program 0 (id=926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000001140)=""/4104, 0x1008}], 0x2}, 0x40000102) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82", 0x3d}], 0x2}}], 0x1, 0x8058) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001040), 0x20000, 0x0) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000001080)={&(0x7f0000002240)={{}, {@host, 0x8fe6}, 0x400, "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"}, 0x418, 0x12}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) read(r7, &(0x7f0000000000)=""/60, 0x3c) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a183000000000000000005"], 0x28}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYRES8=r3], 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x44800) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001300e9990100000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000a00300000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4000) 1m28.117236408s ago: executing program 0 (id=934): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x420400, 0x12) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xcb) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)={0xb0, 0x0, 0x0, [{{0x6, 0x1, 0x21, 0x9, 0x10000, 0xfff, {0x5, 0x9, 0x2, 0x3, 0x8, 0x2, 0x5, 0x3f, 0x1, 0x8000, 0x91b1, 0x0, 0x0, 0x2, 0xb6}}, {0x4, 0x1, 0x1, 0xa, ')'}}]}, 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x90}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m27.827722546s ago: executing program 0 (id=938): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000500)='K|'}, 0x20) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r3) 1m27.73013841s ago: executing program 34 (id=938): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000500)='K|'}, 0x20) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r3) 1m24.535615179s ago: executing program 4 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x800000, 0xc0001) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r2, 0x3}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xb}) socket$nl_route(0x10, 0x3, 0x0) 1m24.317819888s ago: executing program 4 (id=1008): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x58}, 0x8000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r7, 0x1000) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[], 0x88}, 0x20000800) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x980902, 0x4}) 1m24.1156154s ago: executing program 4 (id=1014): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000001040)='./file0/file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupCid', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x0, 0x37, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xfff, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r1, r2, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000052c0)=@newtfilter={0x438, 0x2c, 0xd27, 0x70bd28, 0x7f8, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfffffffa, 0x4, 0x3, 0x101, 0xd39, 0x6, 0x5, 0xfffffff7, 0x5, 0xffff9938, 0xb, 0xf, 0x4a05cbe0, 0x1, 0x8, 0x9, 0x4, 0x42a, 0x4, 0xfff00000, 0xd6f, 0x6, 0xfffffff8, 0x6, 0x8, 0x5, 0xe3, 0x0, 0x0, 0xff000000, 0x0, 0x56, 0x5, 0x14, 0xff, 0x8000, 0xfffffffa, 0x7, 0x52f1, 0x38a4, 0x1, 0x31f8000, 0x45, 0x1, 0x8, 0x5, 0x9, 0x2, 0x0, 0x4, 0x5, 0x8, 0x1, 0x800, 0xd, 0x7fc4bea3, 0x5, 0x15, 0x7, 0x6, 0xa, 0x8, 0x5, 0xe9c2, 0x6, 0xb, 0x49ce0000, 0x0, 0x7, 0x2, 0xf, 0x9, 0x5, 0x0, 0x1800, 0x8000, 0x7, 0x8, 0x0, 0x0, 0x3ff, 0x5, 0x9, 0x0, 0x5, 0x0, 0x80000001, 0x4, 0x7, 0x6ab5, 0xff, 0x9, 0xb93, 0x3, 0x7fffffff, 0x4, 0x0, 0xae, 0xffffffff, 0xb, 0x1, 0x8, 0x2, 0x7fffffff, 0x1, 0x2400000, 0x9, 0x80000000, 0x7, 0x7, 0x200, 0xffffffff, 0xc, 0x65, 0xfff, 0x9, 0x4, 0x8, 0x100, 0x9e, 0x8, 0x3, 0x8, 0x6, 0x7ff, 0x4, 0x73, 0x9, 0x4, 0xffff0000, 0xdd, 0x7fff, 0x9, 0x487c, 0x5, 0xcdc8, 0xfffffffc, 0x7fe00, 0x1, 0x1000, 0xc, 0x3, 0x4, 0x4, 0xffffffff, 0x5bf, 0x6000000, 0x511f, 0x2, 0x81, 0x2, 0xc0, 0x87a, 0x1, 0x3, 0x4, 0x7, 0x7ff, 0x7ff, 0x5, 0xc43, 0x1665, 0x63, 0x8, 0x8, 0x9, 0x5f, 0xf, 0x242, 0x0, 0x5, 0xf8bf, 0x24, 0x4f, 0xdcd, 0xd6, 0x9, 0xf72, 0x2c7e, 0x101, 0x70, 0x4, 0xfffffbff, 0x5eff, 0x6, 0x0, 0x6, 0x7ed, 0x1, 0x101, 0xfffffffe, 0x9, 0x7, 0x10, 0x8, 0x713, 0x9a1, 0xb, 0xc, 0x2bf, 0x0, 0xd16, 0x2005, 0x0, 0x7ff, 0x3, 0x1, 0xd59a, 0x5, 0x25a3, 0x2, 0x7, 0x0, 0xe, 0x4, 0x1, 0x0, 0x9, 0x69, 0x4, 0x5, 0x0, 0x1, 0x4, 0x10, 0x0, 0xe, 0x101, 0x2, 0x7fff, 0x24a, 0x1, 0x1000, 0x3, 0xfe06, 0x66e, 0x400, 0x5, 0x5, 0x6, 0x81, 0x80000001, 0x6, 0x1, 0x9, 0x101, 0xffff, 0x1, 0x3ff, 0x8, 0x8, 0x7, 0xfffffff9, 0xffff, 0x57]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m23.977800502s ago: executing program 4 (id=1018): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xc860}], 0x1, &(0x7f0000000140), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x212002, 0x90) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x402, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x0, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x0, {0x8, 0xffffffff}, 0xd1, 0x9}}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='syzkaller0\x00'}) 1m23.794601702s ago: executing program 4 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0585611, &(0x7f0000000200)={0x2, 0xe, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 1m23.50707732s ago: executing program 4 (id=1034): r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000180)) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000740)={0x3d, 0x1a, &(0x7f0000000340)="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"}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000026c0)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x4000, 0x2, 0x7, 0x2, 0x8, 0x9, 0x4, 0x7, 0x9, 0xc55d0, 0xd, 0x8, 0x5, 0x80000001, 0x0, 0x9, 0x10000006, 0x4, 0x2, 0x81, 0xfff, 0x0, 0x4, 0x6, 0x80000000, 0x7, 0x3, 0x5, 0x7, 0x8001, 0xfffffffb, 0x3]}) 1m23.462831621s ago: executing program 35 (id=1034): r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000180)) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000740)={0x3d, 0x1a, &(0x7f0000000340)="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"}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000026c0)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x4000, 0x2, 0x7, 0x2, 0x8, 0x9, 0x4, 0x7, 0x9, 0xc55d0, 0xd, 0x8, 0x5, 0x80000001, 0x0, 0x9, 0x10000006, 0x4, 0x2, 0x81, 0xfff, 0x0, 0x4, 0x6, 0x80000000, 0x7, 0x3, 0x5, 0x7, 0x8001, 0xfffffffb, 0x3]}) 43.981403217s ago: executing program 7 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r2 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x8}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) read$snapshot(r6, &(0x7f0000000580)=""/111, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x5, 0x14, 0x0, &(0x7f0000000440)="259a53f271a76d2686dd4c5488a8f4b9ff8a58c1", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000000c0)={"20faff48", 0x2, 0x24, 0xff, 0xa9, 0x203c, "f700e7ff00000000e200", '\x00\x00\a\x00', "f800", "fcffffff", ["f8ff03000000000000008000", "808e88e2e9ffffffffff00", "00040000007600f466648800", "ff81000000000300"]}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000200)=0x1) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 43.864127878s ago: executing program 7 (id=1807): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5", 0x9) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 43.862119962s ago: executing program 7 (id=1808): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x3, 0x0) getdents64(r1, &(0x7f0000003440)=""/99, 0x63) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1c80000, 0xd0000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x1000}) 43.789075174s ago: executing program 7 (id=1809): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 43.787891162s ago: executing program 7 (id=1810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079190000000000007a0000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 42.483734555s ago: executing program 7 (id=1821): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x401, 0x6, 0x2}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x400c005) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x1, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x101}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf72}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x79}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x40) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000380)=@bcast) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x140, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xd9, 0xc5, "c7aa723d730830874313bc758ab39e8748733ba3ca11e71ceeab2ca9866cbd992a292a3ad973ed785b290d498222c0fb7647d5414189e381b48dcbdc489d0261979bb035bde5b70584434449fc6e79381ebc79946ceb1d7bfa196a09923e6935213ef1b53e6e800aa004b54b28a6ba2ea2c2a98ce208d2bbebd45593a133a77063318fe62c8681423590e4c37db67c7acdec6bc62a7355afe8d06e8aa60117d052465eb01572fae934652bce2cbe998acf1de100d9f41ee42bf9d10a759609e6f43607e4e2a9050e86c9b4789445620b92f5ad4cf3"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe77}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x6000000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe4, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x1, 0x6, 0x600, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r3, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x4}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x814) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, r10, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb05f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x200490f5}, 0x24008040) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r1) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xf0, r11, 0x500, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x32}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80a0}]}]}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1ef7a45a58f32b157531be75ec"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001380), r12) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x801) 42.407438425s ago: executing program 36 (id=1821): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x401, 0x6, 0x2}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x400c005) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x1, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x101}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf72}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x79}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x40) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000380)=@bcast) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x140, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xd9, 0xc5, "c7aa723d730830874313bc758ab39e8748733ba3ca11e71ceeab2ca9866cbd992a292a3ad973ed785b290d498222c0fb7647d5414189e381b48dcbdc489d0261979bb035bde5b70584434449fc6e79381ebc79946ceb1d7bfa196a09923e6935213ef1b53e6e800aa004b54b28a6ba2ea2c2a98ce208d2bbebd45593a133a77063318fe62c8681423590e4c37db67c7acdec6bc62a7355afe8d06e8aa60117d052465eb01572fae934652bce2cbe998acf1de100d9f41ee42bf9d10a759609e6f43607e4e2a9050e86c9b4789445620b92f5ad4cf3"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe77}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x6000000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe4, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x1, 0x6, 0x600, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r3, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x4}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x814) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, r10, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb05f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x200490f5}, 0x24008040) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r1) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xf0, r11, 0x500, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x32}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80a0}]}]}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1ef7a45a58f32b157531be75ec"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001380), r12) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x801) 12.144229336s ago: executing program 8 (id=2441): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r3, 0x8, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000002c0)=0x6, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2e, 0x0, 0x0, @void, @value}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 11.807236575s ago: executing program 8 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x50, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x220600, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000001060103000000000000000007050000009f7cf544e439296cfe7fd690be13ef030c0407f756a9900436a20a"], 0x24}, 0x1, 0x0, 0x0, 0x4003}, 0x40880) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000f5"], 0x125) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xd4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB='decodes '], 0xd) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d617371"], 0xbc}}, 0x4000040) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r2, 0x21, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="010000000020000000000000", @ANYRES32, @ANYBLOB="e47b28d809ebcee075e6bf029a698439509d59d71d271ba98134d9be8ca4759c05531c6264e523250e1819fe060000005f7c5a3452c774f37625b83534e426e0ad52cd2ae853aa996e013e0844d59fbdae35582f05fa039eea", @ANYRES64=r12], 0x20) syz_open_dev$evdev(&(0x7f00000001c0), 0xa, 0x501c40) 10.476282448s ago: executing program 8 (id=2491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)=0x28) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000280)) 1.16566116s ago: executing program 6 (id=2650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r3, &(0x7f00000002c0)="53a8d1a9", 0x4, 0x2880, &(0x7f0000000380)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) 1.165436733s ago: executing program 6 (id=2651): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x880) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000}, 0x0) 1.15315945s ago: executing program 6 (id=2652): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket(0x28, 0x1, 0x5) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0xfffffffffffffdd4, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {}, {0x1, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) 1.026818849s ago: executing program 6 (id=2653): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000200)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.026146501s ago: executing program 6 (id=2654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x41, 0x2, @tid=r5}, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x100, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000540)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1, 0x3a, '[', 0x3a, '-@', 0x3a, './file0', 0x3a, [0x4f, 0x9976defa49bbb28]}, 0x2c) (async) write$binfmt_register(r6, &(0x7f0000000540)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1, 0x3a, '[', 0x3a, '-@', 0x3a, './file0', 0x3a, [0x4f, 0x9976defa49bbb28]}, 0x2c) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7fffffff, 0x2c340) socket$kcm(0x10, 0x2, 0x0) statx(r7, &(0x7f0000000000)='./file0\x00', 0x6000, 0x200, 0x0) mmap$snddsp_control(&(0x7f0000be2000/0x2000)=nil, 0x1000, 0x100001c, 0x50, r7, 0x83000000) (async) mmap$snddsp_control(&(0x7f0000be2000/0x2000)=nil, 0x1000, 0x100001c, 0x50, r7, 0x83000000) 818.774205ms ago: executing program 8 (id=2656): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7fce9da264454c4603240095028000000000000003003e0001010000940200000000000040000000000000fff6ff38000100fdff7f000800031cca481700000007000000000000000a000006000000b3ac386c"], 0x78) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1f100020", @ANYRES16=r1, @ANYBLOB="1bb30100000000000000010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x2]}}) r5 = dup(r4) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000000c0)) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fremovexattr(r7, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ppoll(&(0x7f00000000c0)=[{r10, 0x10}, {r8, 0x4401}], 0x2, &(0x7f0000000140), &(0x7f0000000180)={[0xdd1]}, 0x8) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 743.394243ms ago: executing program 6 (id=2659): r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x28c5, &(0x7f0000000200)={0x0, 0xa5a8, 0x100, 0x3, 0x311}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setrlimit(0x1, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xffffffff7fffffff, 0x12) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@getqdisc={0x48, 0x26, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x9}, {0xb, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffed1}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x1dd46e6c79d659a3) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x10, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, 0x0, 0x0, 0x1810000, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) 673.352347ms ago: executing program 8 (id=2662): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "9fd3401aab08620205ecbdad5bbdecb4fc99ad4bf134e08f13c248900830d5c8e2cd11250389aca26bcf3433d454cc198794e702e2e27a822946558a88ef9e44b48eb19cf8f8ca68401332b50fd0240512c4d1", ["", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0xc004) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x907b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x4044090) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xad, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x9, 0x5}}]}}, 0x11) syz_open_dev$dri(&(0x7f0000000580), 0xc99, 0x40180) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0xffffffffffffffff}, 0x17, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x6, 0x118, 0xfa00, {{0x0, 0x800, "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", 0x3, 0xfc, 0x1, 0xc, 0x7, 0x2, 0x3, 0x1}, r5}}, 0x120) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000008c0), 0x102, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000000900)) r7 = dup(r6) r8 = dup(r7) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000940)) r9 = open$dir(&(0x7f0000000980)='./file0\x00', 0x8000, 0x131) fanotify_mark(r7, 0x1, 0x20, r9, &(0x7f00000009c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0x541c, &(0x7f0000000a40)) getsockname$packet(r8, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008091}, 0x20040000) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000c00)={"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"}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000001040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffff, @empty, 0x8}, {0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, r5, 0x6cc3}}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000001100)) 673.118531ms ago: executing program 2 (id=2663): r0 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xa205, 0x1046, 0x6}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r2, @ANYBLOB="19d8b62001b1aed8999be24ac59858742c382903575a3bb5312dd013cdae69eeb778a5d7d9da0477245574c181d657c042ede776edbdef59b7c519f22c478ff1560ee2a620b66164d8d06f8187015e4bc65f7baf4d2aab6ca48928f0360800107c3135964d253ac1ab205197946d9616b5ebf3dc0a7a47d5ae2095010b00000000000000dcb98dc53acfe5b61b7f5fcb261ab1dfc7"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') r7 = getpid() r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_GETNSID={0x2c, 0x5a, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001017c4958fbd700000c0c21327be1eb096ead90ba38d4de8000000", @ANYRES32=r2, @ANYBLOB="00050000000000000a000100aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 522.289688ms ago: executing program 2 (id=2667): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) ioprio_set$uid(0x3, r0, 0x4007) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xbfa}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) sync() 362.83927ms ago: executing program 2 (id=2672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x1}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) getsockname$packet(r5, &(0x7f0000000000), &(0x7f0000000040)=0x14) socket$unix(0x1, 0x1, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c1, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000100)={0xf000, 0x104000}) 362.411762ms ago: executing program 5 (id=2673): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x313900, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) splice(r4, &(0x7f00000002c0)=0x62, r2, &(0x7f0000000300)=0x73, 0x5, 0xd) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x2, 0x6469620a, 0x3, @discrete={0xfffffff8, 0x9183}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r7, 0x1) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r5}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r9, 0x0, 0x180000}, 0x18) close(r8) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r13, 0x40047438, &(0x7f0000000180)=""/246) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$PPPIOCSMRU1(r13, 0x40047452, 0x0) close_range(r11, r10, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0xe}, 0x8) 266.52242ms ago: executing program 5 (id=2674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) (fail_nth: 7) 266.241586ms ago: executing program 5 (id=2675): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x8, 0x7}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x9}, @TCA_RED_PARMS={0x14, 0x1, {0x8f, 0x198b, 0x7, 0xa, 0x9, 0x6, 0x8}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) semget$private(0x0, 0x4, 0x20) (async) r3 = semget$private(0x0, 0x4, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x8, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x10) semctl$SEM_INFO(r3, 0x2, 0x13, &(0x7f0000000380)=""/253) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 203.031436ms ago: executing program 2 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x114, 0x28, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x4, 0x18}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40016141, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000de8a6300"/19, @ANYRES16=r3, @ANYBLOB="00020000000000000000030000004c00018038000400200001000a0000000000000000000000000000000000000000000001000000001400020002004e22ac1414bb00000000000000000d0001007564703a73797a3000000000"], 0x60}}, 0x24a416314a867c7a) 202.237096ms ago: executing program 5 (id=2677): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 136.514433ms ago: executing program 2 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r1 = syz_io_uring_complete(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 136.137261ms ago: executing program 5 (id=2679): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1001) fcntl$notify(r0, 0x402, 0x8) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) setrlimit(0x9, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40) fanotify_mark(r3, 0x1, 0x40000032, r2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000100)=0x2) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) io_setup(0x2008, &(0x7f00000007c0)) 66.273166ms ago: executing program 2 (id=2680): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x0, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000340)="6a0cc193beb70a52", 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a22"], 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) 65.153416ms ago: executing program 8 (id=2681): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='fsi_master_acf_cmd_rel_addr\x00', r2, 0x0, 0x100000001}, 0x18) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)=0x28) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000001c0)=""/93, 0x5d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x7ff, 0x101, 0x44004, r0, 0x1, '\x00', r1, r2, 0x3, 0x1, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) 0s ago: executing program 5 (id=2682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10) r4 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r9, 0x89e0, &(0x7f0000000000)={0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r13, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r11, @ANYBLOB="00410000000000000c002b8008000100", @ANYRES32=r14], 0x2c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r6, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 5 (id=2684): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) (async) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x20000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x81) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000100)='syz1\x00') kernel console output (not intermixed with test programs): usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.952843][ T1465] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.132477][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1575'. [ 156.187352][ T1465] usb 11-1: usb_control_msg returned -32 [ 156.187855][T11284] fuse: Bad value for 'fd' [ 156.189740][ T1465] usbtmc 11-1:16.0: can't read capabilities [ 156.201916][ T1465] usb 11-1: USB disconnect, device number 14 [ 156.933497][T11358] netlink: 'syz.6.1590': attribute type 15 has an invalid length. [ 156.982314][T11364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1593'. [ 157.043935][T11370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1596'. [ 157.633990][T11420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.636409][T11420] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.638340][T11420] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.641000][T11420] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.641338][ T5952] Bluetooth: hci0: command 0x0405 tx timeout [ 157.650026][T11420] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.652207][T11420] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.655351][T11420] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.658493][T11420] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.997355][T11426] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1618'. [ 158.136775][T11443] fuse: Unknown parameter 'qootmode' [ 158.155674][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.156216][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 158.258855][T11454] netlink: 'syz.6.1625': attribute type 8 has an invalid length. [ 158.303224][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 158.303235][ T40] audit: type=1400 audit(156.911:832): avc: denied { read } for pid=11455 comm="syz.6.1626" path="socket:[37248]" dev="sockfs" ino=37248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.447447][T11471] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 158.452004][T11471] qnx6: wrong signature (magic) in superblock #1. [ 158.455247][T11471] qnx6: unable to read the first superblock [ 158.524714][ T40] audit: type=1400 audit(157.126:833): avc: denied { write } for pid=11478 comm="syz.7.1636" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 158.659457][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1637'. [ 158.663839][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1637'. [ 158.829595][T11503] sctp: [Deprecated]: syz.7.1645 (pid 11503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.829595][T11503] Use struct sctp_sack_info instead [ 158.843729][ T40] audit: type=1400 audit(157.426:834): avc: denied { map } for pid=11501 comm="syz.7.1645" path="socket:[37307]" dev="sockfs" ino=37307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.853503][ T40] audit: type=1400 audit(157.435:835): avc: denied { map } for pid=11501 comm="syz.7.1645" path="socket:[37304]" dev="sockfs" ino=37304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.945585][ T837] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 158.971320][ T40] audit: type=1326 audit(157.547:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.7.1649" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f568778e929 code=0x0 [ 158.994933][ T40] audit: type=1400 audit(157.566:837): avc: denied { ioctl } for pid=11520 comm="syz.2.1650" path="socket:[39185]" dev="sockfs" ino=39185 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.079171][T11524] overlay: ./bus is not a directory [ 159.118705][ T837] usb 11-1: device descriptor read/64, error -71 [ 159.123221][ T40] audit: type=1400 audit(157.688:838): avc: denied { override_creds } for pid=11528 comm="syz.5.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.131865][T11532] vivid-004: ================= START STATUS ================= [ 159.135157][T11532] vivid-004: Radio HW Seek Mode: Bounded [ 159.139259][T11532] vivid-004: Radio Programmable HW Seek: false [ 159.141309][T11532] vivid-004: RDS Rx I/O Mode: Block I/O [ 159.143288][T11532] vivid-004: Generate RBDS Instead of RDS: false [ 159.145442][T11532] vivid-004: RDS Reception: true [ 159.147124][T11532] vivid-004: RDS Program Type: 0 inactive [ 159.149609][T11532] vivid-004: RDS PS Name: inactive [ 159.151374][T11532] vivid-004: RDS Radio Text: inactive [ 159.153413][T11532] vivid-004: RDS Traffic Announcement: false inactive [ 159.156074][T11532] vivid-004: RDS Traffic Program: false inactive [ 159.158730][T11532] vivid-004: RDS Music: false inactive [ 159.161120][T11532] vivid-004: ================== END STATUS ================== [ 159.268928][ T40] audit: type=1400 audit(157.828:839): avc: denied { execute } for pid=11546 comm="syz.2.1661" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.373094][ T837] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 159.435951][ T40] audit: type=1400 audit(157.978:840): avc: denied { setopt } for pid=11563 comm="syz.5.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.489815][ T40] audit: type=1400 audit(158.024:841): avc: denied { create } for pid=11571 comm="syz.2.1669" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.523530][ T837] usb 11-1: device descriptor read/64, error -71 [ 159.532493][T11576] xt_hashlimit: size too large, truncated to 1048576 [ 159.589957][T11585] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 159.652587][ T837] usb usb11-port1: attempt power cycle [ 159.655786][T11590] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 159.658258][T11590] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1675'. [ 159.661263][T11590] team0: entered promiscuous mode [ 159.663532][T11590] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.665853][T11590] bridge0: port 1(team0) entered blocking state [ 159.668040][T11590] bridge0: port 1(team0) entered disabled state [ 159.670199][T11590] team0: entered allmulticast mode [ 159.694290][ T5946] Bluetooth: hci1: command 0x0419 tx timeout [ 159.770779][T11602] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 159.779376][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.856037][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 159.858922][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 159.866491][ T5946] Bluetooth: hci0: command 0x0405 tx timeout [ 159.982618][T11622] netlink: 'syz.2.1686': attribute type 5 has an invalid length. [ 160.026308][ T837] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 160.047024][ T837] usb 11-1: device descriptor read/8, error -71 [ 160.314053][ T837] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 160.348159][ T837] usb 11-1: device descriptor read/8, error -71 [ 160.380820][T11655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11655 comm=syz.5.1699 [ 160.384992][T11655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11655 comm=syz.5.1699 [ 160.389397][T11655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11655 comm=syz.5.1699 [ 160.463952][ T837] usb usb11-port1: unable to enumerate USB device [ 160.470570][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.474126][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.731001][ T52] usb 12-1: new low-speed USB device number 10 using dummy_hcd [ 160.896854][ T52] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 160.901174][ T52] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 160.905405][ T52] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 160.912710][ T52] usb 12-1: string descriptor 0 read error: -22 [ 160.915520][ T52] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.919354][ T52] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.925905][T11661] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 161.146731][ T52] cdc_ncm 12-1:1.0: bind() failure [ 161.150476][ T52] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 161.152808][ T52] cdc_ncm 12-1:1.1: bind() failure [ 161.157194][ T52] usb 12-1: USB disconnect, device number 10 [ 161.244122][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 161.415108][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 161.419440][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 161.422734][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.426484][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.429462][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.432373][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.437241][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.440768][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.665370][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.669066][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.674394][ T9] usb 7-1: usb_control_msg returned -71 [ 161.676790][ T9] usbtmc 7-1:16.0: can't read capabilities [ 161.694151][ T9] usb 7-1: USB disconnect, device number 25 [ 162.006688][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.088774][ T5946] Bluetooth: hci0: command 0x0405 tx timeout [ 162.307688][T11730] __nla_validate_parse: 3 callbacks suppressed [ 162.307704][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 162.314055][T11730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'. [ 162.343783][T11737] netlink: 'syz.5.1725': attribute type 10 has an invalid length. [ 162.347988][T11737] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1725'. [ 162.368348][T11741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.368837][T11737] team0: Port device geneve0 added [ 162.472315][T11755] netlink: 'syz.2.1730': attribute type 39 has an invalid length. [ 162.583635][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1734'. [ 162.754366][T11783] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 162.953902][T11800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11800 comm=syz.7.1746 [ 162.958848][T11800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11800 comm=syz.7.1746 [ 162.967889][T11800] ipvlan2: entered promiscuous mode [ 162.970891][T11800] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 162.973855][T11800] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.130943][T11821] netlink: 'syz.6.1751': attribute type 3 has an invalid length. [ 163.233465][T11834] xt_cgroup: xt_cgroup: no path or classid specified [ 163.329686][T11845] netlink: 'syz.5.1762': attribute type 1 has an invalid length. [ 163.410539][T11851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11851 comm=syz.5.1765 [ 163.423597][T11853] usb 2-1: USB disconnect, device number 2 [ 163.452970][T11857] mmap: syz.2.1768 (11857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.701225][T11886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1773'. [ 163.736570][T11890] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 163.787760][T11902] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1777'. [ 163.831903][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 163.831913][ T40] audit: type=1326 audit(162.084:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11903 comm="syz.7.1778" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f568778e929 code=0x0 [ 164.034519][ T29] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 164.194739][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 164.202087][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 164.207771][ T29] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 164.210296][ T29] usb 7-1: can't read configurations, error -71 [ 164.226758][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.289589][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1783'. [ 164.312541][ T5946] Bluetooth: hci0: command 0x0405 tx timeout [ 164.372024][ T836] libceph: connect (1)[c::]:6789 error -101 [ 164.374009][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 164.502876][ T40] audit: type=1400 audit(162.711:854): avc: denied { setattr } for pid=11932 comm="syz.5.1786" path="socket:[40327]" dev="sockfs" ino=40327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.635371][ T52] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 164.656138][ T836] libceph: connect (1)[c::]:6789 error -101 [ 164.659596][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 164.878347][T11951] netlink: 'syz.2.1789': attribute type 10 has an invalid length. [ 164.881530][T11951] team0: Device hsr_slave_0 failed to register rx_handler [ 165.144798][ T40] audit: type=1400 audit(163.319:855): avc: denied { write } for pid=11976 comm="syz.6.1798" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 165.154290][T11979] rtc_cmos 00:05: Alarms can be up to one day in the future [ 165.160285][ T40] audit: type=1400 audit(163.338:856): avc: denied { create } for pid=11978 comm="syz.7.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 165.202544][ T836] libceph: connect (1)[c::]:6789 error -101 [ 165.205305][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 165.256723][T11933] ceph: No mds server is up or the cluster is laggy [ 165.388547][T12000] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 165.391380][T12000] overlayfs: missing 'lowerdir' [ 165.797141][T12011] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 165.799660][T12011] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 165.943703][T12018] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1814'. [ 166.072285][ T40] audit: type=1400 audit(164.189:857): avc: denied { listen } for pid=12023 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.078973][ T40] audit: type=1400 audit(164.189:858): avc: denied { accept } for pid=12023 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.116928][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1817'. [ 166.139253][T12026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12026 comm=syz.5.1817 [ 166.546555][ T5303] Bluetooth: hci0: command 0x0405 tx timeout [ 166.927388][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1823'. [ 166.983668][T12049] Invalid source name [ 166.985110][T12049] UBIFS error (pid: 12049): cannot open "./file0", error -22 [ 167.037203][ T40] audit: type=1400 audit(165.087:859): avc: denied { shutdown } for pid=12054 comm="syz.2.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.037334][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.055319][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.059734][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.065857][T12063] unknown channel width for channel at 909000KHz? [ 167.068209][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.068607][T12064] unknown channel width for channel at 909000KHz? [ 167.076064][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.110232][T12069] program syz.2.1832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.191339][ T40] audit: type=1400 audit(165.236:860): avc: denied { associate } for pid=12083 comm="syz.2.1835" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 167.201112][T12057] chnl_net:caif_netlink_parms(): no params data found [ 167.321078][T12057] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.323437][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.325839][T12057] bridge_slave_0: entered allmulticast mode [ 167.328668][T12057] bridge_slave_0: entered promiscuous mode [ 167.340533][T12057] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.343133][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.345801][T12057] bridge_slave_1: entered allmulticast mode [ 167.349221][T12057] bridge_slave_1: entered promiscuous mode [ 167.367931][T12112] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.391546][T12057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.396214][T12057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.430657][T12057] team0: Port device team_slave_0 added [ 167.435487][T12057] team0: Port device team_slave_1 added [ 167.483534][T12112] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.490240][T12057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.492393][T12057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.501827][T12057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.506899][T12057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.509919][T12057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.517903][T12057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.525663][T12112] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.577009][T12057] hsr_slave_0: entered promiscuous mode [ 167.579337][T12057] hsr_slave_1: entered promiscuous mode [ 167.581555][T12057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.584511][T12057] Cannot create hsr debugfs directory [ 167.589685][T12112] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.684339][T12124] random: crng reseeded on system resumption [ 167.736169][T12112] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.739014][T12057] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.749509][T12112] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.752411][T12057] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.761883][T12112] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.764740][T12057] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.774087][T12112] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.777066][T12057] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.794296][T12057] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.796705][T12057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.799137][T12057] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.801679][T12057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.831574][T12057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.841004][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.845874][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.865551][T12057] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.873340][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.875607][ T9130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.880828][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.883198][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.004714][T12057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.136682][T12057] veth0_vlan: entered promiscuous mode [ 168.144315][T12057] veth1_vlan: entered promiscuous mode [ 168.158430][T12057] veth0_macvtap: entered promiscuous mode [ 168.166023][T12057] veth1_macvtap: entered promiscuous mode [ 168.177007][T12057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.184098][T12057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.188976][T12057] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.191724][T12057] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.194709][T12057] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.198088][T12057] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.232367][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.234884][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.255995][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.258870][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.315006][ T40] audit: type=1400 audit(166.284:861): avc: denied { mount } for pid=12143 comm="syz.5.1854" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.607406][T12175] QAT: Device 7 not found [ 168.609020][ T40] audit: type=1400 audit(166.555:862): avc: denied { read } for pid=12173 comm="syz.8.1860" name="/" dev="configfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.668957][T12181] __nla_validate_parse: 2 callbacks suppressed [ 168.668975][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1862'. [ 168.691083][T12181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12181 comm=syz.8.1862 [ 168.887978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 168.889311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 169.035100][T12207] kvm: kvm [12206]: vcpu1, guest rIP: 0x44e Unhandled WRMSR(0xc2) = 0x800 [ 169.046242][T12207] kvm: kvm [12206]: vcpu1, guest rIP: 0x44e Unhandled WRMSR(0x11e) = 0x800 [ 169.058470][T12207] kvm: kvm [12206]: vcpu1, guest rIP: 0x44e Unhandled WRMSR(0x186) = 0x800 [ 169.283335][ T5946] Bluetooth: hci0: command tx timeout [ 169.321407][T12230] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.331185][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 169.331195][ T40] audit: type=1804 audit(167.238:865): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1878" name="/newroot/166/file0" dev="tmpfs" ino=917 res=1 errno=0 [ 169.341946][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1877'. [ 169.344812][T12223] netlink: 'syz.5.1877': attribute type 2 has an invalid length. [ 169.347297][T12223] netlink: 'syz.5.1877': attribute type 1 has an invalid length. [ 169.350545][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1877'. [ 169.386619][ T40] audit: type=1400 audit(167.285:866): avc: denied { execute } for pid=12232 comm="syz.6.1879" path="/sys/power/resume" dev="sysfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 169.477930][ T40] audit: type=1400 audit(167.378:867): avc: denied { getopt } for pid=12232 comm="syz.6.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.610722][T12255] lo: entered promiscuous mode [ 169.612632][T12255] tunl0: entered promiscuous mode [ 169.618079][T12255] gre0: entered promiscuous mode [ 169.620391][T12255] gretap0: entered promiscuous mode [ 169.622420][T12255] erspan0: entered promiscuous mode [ 169.626767][T12255] ip_vti0: entered promiscuous mode [ 169.628727][T12255] ip6_vti0: entered promiscuous mode [ 169.630792][T12255] sit0: entered promiscuous mode [ 169.632742][T12255] ip6tnl0: entered promiscuous mode [ 169.634823][T12255] ip6gre0: entered promiscuous mode [ 169.637012][T12255] syz_tun: entered promiscuous mode [ 169.638947][T12255] ip6gretap0: entered promiscuous mode [ 169.640966][T12255] bridge0: entered promiscuous mode [ 169.642869][T12255] vcan0: entered promiscuous mode [ 169.644701][T12255] bond0: entered promiscuous mode [ 169.646293][T12255] bond_slave_0: entered promiscuous mode [ 169.648502][T12255] bond_slave_1: entered promiscuous mode [ 169.650818][T12255] team0: entered promiscuous mode [ 169.652432][T12255] team_slave_0: entered promiscuous mode [ 169.654321][T12255] team_slave_1: entered promiscuous mode [ 169.656188][T12255] geneve0: entered promiscuous mode [ 169.660810][T12255] nlmon0: entered promiscuous mode [ 169.663210][T12255] caif0: entered promiscuous mode [ 169.664853][T12255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.719040][ T40] audit: type=1400 audit(167.594:868): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.813822][ T40] audit: type=1400 audit(167.687:869): avc: denied { connect } for pid=12270 comm="syz.5.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.874409][ T40] audit: type=1400 audit(167.743:870): avc: denied { read } for pid=12276 comm="syz.6.1894" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.890423][ T40] audit: type=1400 audit(167.743:871): avc: denied { open } for pid=12276 comm="syz.6.1894" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.899048][ T40] audit: type=1400 audit(167.743:872): avc: denied { map } for pid=12276 comm="syz.6.1894" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.105626][T12289] netlink: 'syz.5.1896': attribute type 21 has an invalid length. [ 170.110102][T12289] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1896'. [ 170.123609][ T5946] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 170.308283][ T40] audit: type=1400 audit(168.145:873): avc: denied { rmdir } for pid=12298 comm="syz.6.1901" name="file2" dev="9p" ino=36701706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.404923][T12301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=12301 comm=syz.6.1902 [ 170.585168][T12307] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1905'. [ 171.115755][T12332] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1914'. [ 171.118896][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 171.496368][ T5946] Bluetooth: hci0: command tx timeout [ 171.696111][T12347] befs: (nullb0): No write support. Marking filesystem read-only [ 171.699052][T12347] befs: (nullb0): invalid magic header [ 172.638211][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1934'. [ 173.126085][T12423] netlink: 'syz.8.1950': attribute type 2 has an invalid length. [ 173.129051][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1950'. [ 173.170846][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1951'. [ 173.199711][T12432] bridge2: entered allmulticast mode [ 173.220503][T12438] netlink: 'syz.2.1956': attribute type 11 has an invalid length. [ 173.223232][T12439] netlink: 'syz.2.1956': attribute type 11 has an invalid length. [ 173.384982][T12458] overlayfs: failed to clone upperpath [ 173.390670][T12457] KVM: debugfs: duplicate directory 12457-4 [ 173.391232][T12458] overlayfs: failed to clone upperpath [ 173.730658][ T5946] Bluetooth: hci0: command tx timeout [ 173.807011][T12505] KVM: debugfs: duplicate directory 12505-4 [ 173.907275][ T40] audit: type=1400 audit(171.513:874): avc: denied { execstack } for pid=12512 comm="syz.8.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 173.947587][T12519] netlink: 'syz.2.1979': attribute type 39 has an invalid length. [ 174.010459][T12523] tipc: Started in network mode [ 174.012160][T12523] tipc: Node identity 4, cluster identity 4711 [ 174.014142][T12523] tipc: Node number set to 4 [ 174.020184][T12523] __nla_validate_parse: 6 callbacks suppressed [ 174.020194][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 174.082218][T12533] syzkaller0: entered allmulticast mode [ 174.094130][T12533] syzkaller0 (unregistering): left allmulticast mode [ 174.110151][T12530] netlink: 'syz.8.1983': attribute type 13 has an invalid length. [ 174.175368][T12530] macvtap0: entered promiscuous mode [ 174.177827][T12530] macvtap0: refused to change device tx_queue_len [ 174.588854][T12546] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1988'. [ 174.591741][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1988'. [ 175.889220][T12558] overlayfs: failed to resolve 'metacopy=on': -2 [ 175.954279][ T5946] Bluetooth: hci0: command tx timeout [ 176.285819][ T5946] Bluetooth: hci1: command 0x0419 tx timeout [ 176.287863][T12528] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 176.816040][T12562] 9p: Unknown Cache mode or invalid value fs¨—nùÑi¦ízNˆCϳémÊ [ 176.939788][T12564] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1995'. [ 176.971459][T12566] netlink: 'syz.5.1996': attribute type 1 has an invalid length. [ 176.995095][T12566] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.999312][T12566] bond6: (slave bond7): making interface the new active one [ 177.002857][T12566] bond6: (slave bond7): Enslaving as an active interface with an up link [ 177.041582][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1996'. [ 177.045552][T12566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.100891][T12574] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1998'. [ 177.254310][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'. [ 177.263123][T12528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.265238][T12528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.267128][T12528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.272155][T12528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.292649][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 177.292659][ T40] audit: type=1400 audit(174.684:878): avc: denied { accept } for pid=12586 comm="syz.5.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.319695][ T5946] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 177.360250][ T40] audit: type=1400 audit(174.740:879): avc: denied { setattr } for pid=12592 comm="syz.8.2006" name="NETLINK" dev="sockfs" ino=42924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.415365][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'. [ 177.419266][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'. [ 177.439811][T12605] QAT: Device 7 not found [ 177.462470][T12605] QAT: Device 7 not found [ 177.506912][T12620] devpts: Bad value for 'uid' [ 177.508832][T12620] devpts: Bad value for 'uid' [ 177.521427][T12626] program syz.8.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.534285][T12629] tmpfs: Bad value for 'mpol' [ 177.537403][T12629] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2017'. [ 177.549157][ T836] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 177.615364][T12648] binder: 12647:12648 ioctl c0306201 200000000140 returned -22 [ 177.617970][T12648] binder: 12647:12648 ioctl c02064b2 2000000000c0 returned -22 [ 177.926989][T12667] netlink: 'syz.2.2028': attribute type 12 has an invalid length. [ 177.931359][ T40] audit: type=1400 audit(175.273:880): avc: denied { ioctl } for pid=12666 comm="syz.2.2028" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 177.945127][T12667] dlm: no locking on control device [ 178.017647][ T61] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 178.211878][ T61] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.216123][ T61] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 178.219875][ T61] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 178.224786][ T61] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.230149][ T61] usb 13-1: config 0 descriptor?? [ 178.235170][ T61] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 178.237954][ T61] dvb-usb: bulk message failed: -22 (3/0) [ 178.244087][ T61] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 178.248128][ T61] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 178.251225][ T61] usb 13-1: media controller created [ 178.255078][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.261927][ T61] dvb-usb: bulk message failed: -22 (6/0) [ 178.264607][ T61] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 178.265140][T12680] netlink: 'syz.5.2033': attribute type 13 has an invalid length. [ 178.268934][ T61] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input25 [ 178.275773][ T61] dvb-usb: schedule remote query interval to 150 msecs. [ 178.277949][ T61] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 178.328130][ T5982] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 178.343577][T12684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 178.395066][T12692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=12692 comm=syz.5.2037 [ 178.441364][ T40] audit: type=1400 audit(175.750:881): avc: denied { ioctl } for pid=12694 comm="syz.6.2038" path="socket:[44169]" dev="sockfs" ino=44169 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.454337][ T61] usb 13-1: USB disconnect, device number 2 [ 178.476043][ T61] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 178.509925][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.515513][ T5982] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.518589][ T5982] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 178.522547][ T5982] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 178.525384][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.531730][ T5982] usb 7-1: config 0 descriptor?? [ 178.537861][ T5982] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 178.539610][ T40] audit: type=1400 audit(175.844:882): avc: denied { map } for pid=12696 comm="syz.5.2039" path="socket:[45257]" dev="sockfs" ino=45257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 178.539988][ T5982] dvb-usb: bulk message failed: -22 (3/0) [ 178.548457][ T40] audit: type=1400 audit(175.844:883): avc: denied { accept } for pid=12696 comm="syz.5.2039" path="socket:[45257]" dev="sockfs" ino=45257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 178.559741][ T5982] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 178.563030][ T5982] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 178.565177][ T5982] usb 7-1: media controller created [ 178.567476][ T5982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.574855][ T5982] dvb-usb: bulk message failed: -22 (6/0) [ 178.576620][ T5982] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 178.596808][ T5982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input26 [ 178.601650][ T5982] dvb-usb: schedule remote query interval to 150 msecs. [ 178.603850][ T5982] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 178.765969][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 178.767803][ T52] dvb-usb: error while querying for an remote control event. [ 178.830196][ T9] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 178.936890][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 178.938695][ T5982] dvb-usb: error while querying for an remote control event. [ 179.013375][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 179.016856][ T9] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 179.022534][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.028920][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.035236][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 179.040835][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.044049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.049480][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.053872][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.058470][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.164864][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 179.166690][ T5982] dvb-usb: error while querying for an remote control event. [ 179.299155][ T9] usb 11-1: usb_control_msg returned -32 [ 179.305077][ T9] usbtmc 11-1:16.0: can't read capabilities [ 179.315245][ T9] usb 11-1: USB disconnect, device number 21 [ 179.332646][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 179.334405][ T5982] dvb-usb: error while querying for an remote control event. [ 179.352587][T12735] netem: unknown loss type 13 [ 179.356955][T12735] netem: change failed [ 179.360567][T12734] netem: unknown loss type 13 [ 179.362087][T12734] netem: change failed [ 179.472639][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.503686][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 179.505575][ T5982] dvb-usb: error while querying for an remote control event. [ 179.551150][T12744] bio_check_eod: 2 callbacks suppressed [ 179.552440][T12744] syz.8.2053: attempt to access beyond end of device [ 179.552440][T12744] loop8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 179.565127][T12744] MINIX-fs: unable to read superblock [ 179.674561][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 179.676414][ T5982] dvb-usb: error while querying for an remote control event. [ 179.856530][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 179.858769][ T5982] dvb-usb: error while querying for an remote control event. [ 180.038040][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 180.039932][ T5982] dvb-usb: error while querying for an remote control event. [ 180.213119][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 180.215479][ T5982] dvb-usb: error while querying for an remote control event. [ 180.315997][ T9] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 180.380370][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 180.382244][ T5982] dvb-usb: error while querying for an remote control event. [ 180.488377][ T9] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.492763][ T9] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14895, setting to 1024 [ 180.497041][ T9] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 180.508388][ T9] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.514369][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.521092][T12764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.526098][ T9] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.552448][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 180.561292][ T5982] dvb-usb: error while querying for an remote control event. [ 180.565233][T12770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23056 sclass=netlink_route_socket pid=12770 comm=syz.8.2061 [ 180.733081][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 180.735456][ T5982] dvb-usb: error while querying for an remote control event. [ 180.742768][ T836] usb 11-1: USB disconnect, device number 22 [ 180.894507][ T40] audit: type=1400 audit(178.051:884): avc: denied { getopt } for pid=12773 comm="syz.5.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 180.896377][T12775] netlink: 'syz.5.2062': attribute type 4 has an invalid length. [ 180.915022][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 180.915340][T12774] netlink: 'syz.5.2062': attribute type 4 has an invalid length. [ 180.917064][ T5982] dvb-usb: error while querying for an remote control event. [ 180.933418][T12774] netlink: 'syz.5.2062': attribute type 4 has an invalid length. [ 181.086106][ T5982] dvb-usb: bulk message failed: -22 (1/0) [ 181.089019][ T5982] dvb-usb: error while querying for an remote control event. [ 181.105378][T12794] netlink: 'syz.8.2067': attribute type 1 has an invalid length. [ 181.116019][T12794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.118293][T12794] IPv6: NLM_F_CREATE should be set when creating new route [ 181.120575][T12794] IPv6: NLM_F_CREATE should be set when creating new route [ 181.145674][T12794] netlink: 'syz.8.2067': attribute type 1 has an invalid length. [ 181.149124][T12794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.230968][T12674] 9pnet_fd: p9_fd_create_tcp (12674): problem connecting socket to 127.0.0.1 [ 181.251778][ T9] usb 7-1: USB disconnect, device number 28 [ 181.297060][T12811] @: renamed from vlan0 (while UP) [ 181.298681][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 181.339748][T12818] __nla_validate_parse: 6 callbacks suppressed [ 181.339767][T12818] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2074'. [ 181.420853][T12824] FAULT_INJECTION: forcing a failure. [ 181.420853][T12824] name failslab, interval 1, probability 0, space 0, times 0 [ 181.426832][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.8.2078 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 181.426856][T12824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.426867][T12824] Call Trace: [ 181.426873][T12824] [ 181.426881][T12824] dump_stack_lvl+0x16c/0x1f0 [ 181.426929][T12824] should_fail_ex+0x512/0x640 [ 181.426956][T12824] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 181.426981][T12824] should_failslab+0xc2/0x120 [ 181.427006][T12824] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 181.427028][T12824] ? __alloc_skb+0x2b2/0x380 [ 181.427055][T12824] __alloc_skb+0x2b2/0x380 [ 181.427077][T12824] ? __pfx___alloc_skb+0x10/0x10 [ 181.427099][T12824] ? __lock_acquire+0xb8a/0x1c90 [ 181.427133][T12824] alloc_skb_with_frags+0xe0/0x860 [ 181.427160][T12824] ? find_held_lock+0x2b/0x80 [ 181.427187][T12824] sock_alloc_send_pskb+0x7fb/0x990 [ 181.427219][T12824] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 181.427244][T12824] ? __pfx__copy_from_iter+0x10/0x10 [ 181.427267][T12824] ? __lock_acquire+0xb8a/0x1c90 [ 181.427297][T12824] nfc_alloc_send_skb+0xa6/0x190 [ 181.427318][T12824] nfc_llcp_send_ui_frame+0x287/0x530 [ 181.427343][T12824] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 181.427361][T12824] ? llcp_sock_sendmsg+0x2e5/0x460 [ 181.427377][T12824] ? rcu_is_watching+0x12/0xc0 [ 181.427398][T12824] ? __local_bh_enable_ip+0xa4/0x120 [ 181.427421][T12824] llcp_sock_sendmsg+0x34b/0x460 [ 181.427437][T12824] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 181.427464][T12824] ____sys_sendmsg+0xa95/0xc70 [ 181.427484][T12824] ? copy_msghdr_from_user+0x10a/0x160 [ 181.427508][T12824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.427531][T12824] ? __pfx__kstrtoull+0x10/0x10 [ 181.427554][T12824] ___sys_sendmsg+0x134/0x1d0 [ 181.427580][T12824] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.427617][T12824] ? find_held_lock+0x2b/0x80 [ 181.427652][T12824] __sys_sendmmsg+0x200/0x420 [ 181.427721][T12824] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.427756][T12824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.427793][T12824] ? fput+0x70/0xf0 [ 181.427819][T12824] ? ksys_write+0x1ac/0x250 [ 181.427838][T12824] ? __pfx_ksys_write+0x10/0x10 [ 181.427861][T12824] __x64_sys_sendmmsg+0x9c/0x100 [ 181.427881][T12824] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.427903][T12824] do_syscall_64+0xcd/0x4c0 [ 181.427929][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.427945][T12824] RIP: 0033:0x7f67a978e929 [ 181.427959][T12824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.427975][T12824] RSP: 002b:00007f67aa5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.427992][T12824] RAX: ffffffffffffffda RBX: 00007f67a99b5fa0 RCX: 00007f67a978e929 [ 181.428004][T12824] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000005 [ 181.428014][T12824] RBP: 00007f67aa5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 181.428024][T12824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.428034][T12824] R13: 0000000000000000 R14: 00007f67a99b5fa0 R15: 00007ffdc821bc18 [ 181.428058][T12824] [ 181.528293][T12824] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 181.561522][T12831] fuse: Bad value for 'fd' [ 181.565058][ T40] audit: type=1326 audit(178.678:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.2.2080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fbd8e929 code=0x7ffc0000 [ 181.578324][ T40] audit: type=1326 audit(178.687:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.2.2080" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa7fbd8e929 code=0x7ffc0000 [ 181.590688][ T40] audit: type=1326 audit(178.687:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.2.2080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fbd8e929 code=0x7ffc0000 [ 181.680791][ T5303] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.692928][T12841] KVM: debugfs: duplicate directory 12841-4 [ 181.929379][T12850] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2087'. [ 181.965536][T12854] PKCS8: Unsupported PKCS#8 version [ 181.968447][T12854] fuse: Unknown parameter '' [ 182.005909][T12859] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 182.161686][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2101'. [ 182.188226][T12891] FAULT_INJECTION: forcing a failure. [ 182.188226][T12891] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.192300][T12891] CPU: 3 UID: 0 PID: 12891 Comm: syz.6.2103 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 182.192316][T12891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.192323][T12891] Call Trace: [ 182.192327][T12891] [ 182.192331][T12891] dump_stack_lvl+0x16c/0x1f0 [ 182.192351][T12891] should_fail_ex+0x512/0x640 [ 182.192368][T12891] _copy_from_user+0x2e/0xd0 [ 182.192384][T12891] copy_msghdr_from_user+0x98/0x160 [ 182.192402][T12891] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 182.192420][T12891] ? kfree+0x24f/0x4d0 [ 182.192431][T12891] ? __pfx__kstrtoull+0x10/0x10 [ 182.192445][T12891] ___sys_sendmsg+0xfe/0x1d0 [ 182.192462][T12891] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.192491][T12891] ? __pfx___might_resched+0x10/0x10 [ 182.192508][T12891] __sys_sendmmsg+0x200/0x420 [ 182.192525][T12891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.192545][T12891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.192569][T12891] ? fput+0x70/0xf0 [ 182.192585][T12891] ? ksys_write+0x1ac/0x250 [ 182.192598][T12891] ? __pfx_ksys_write+0x10/0x10 [ 182.192613][T12891] __x64_sys_sendmmsg+0x9c/0x100 [ 182.192629][T12891] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.192644][T12891] do_syscall_64+0xcd/0x4c0 [ 182.192662][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.192673][T12891] RIP: 0033:0x7f878178e929 [ 182.192682][T12891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.192692][T12891] RSP: 002b:00007f87825dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.192702][T12891] RAX: ffffffffffffffda RBX: 00007f87819b5fa0 RCX: 00007f878178e929 [ 182.192709][T12891] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000005 [ 182.192715][T12891] RBP: 00007f87825dc090 R08: 0000000000000000 R09: 0000000000000000 [ 182.192722][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.192728][T12891] R13: 0000000000000000 R14: 00007f87819b5fa0 R15: 00007ffdbc8c28c8 [ 182.192741][T12891] [ 182.335526][T12906] x_tables: duplicate underflow at hook 2 [ 182.494957][T12917] tmpfs: Bad value for 'huge' [ 182.557270][T12928] sctp: [Deprecated]: syz.5.2116 (pid 12928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.557270][T12928] Use struct sctp_sack_info instead [ 182.600416][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2117'. [ 182.863197][T12959] KVM: debugfs: duplicate directory 12959-4 [ 183.150906][T12971] netlink: 'syz.2.2129': attribute type 11 has an invalid length. [ 183.153655][T12971] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2129'. [ 183.160008][ T52] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 183.590033][T12986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59920 sclass=netlink_route_socket pid=12986 comm=syz.5.2133 [ 183.629231][T12988] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.2134'. [ 183.652039][T12990] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2135'. [ 183.706746][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'. [ 183.710406][T12995] netlink: 'syz.5.2137': attribute type 30 has an invalid length. [ 183.716698][T12995] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.719269][T12995] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.722593][T12995] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.725110][T12995] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.757898][T12997] tun0: tun_chr_ioctl cmd 1074025675 [ 183.759948][T12997] tun0: persist enabled [ 183.761767][T12997] tun0: tun_chr_ioctl cmd 1074025675 [ 183.763657][T12997] tun0: persist enabled [ 183.765250][T12997] tun0: tun_chr_ioctl cmd 1074025675 [ 183.766923][T12997] tun0: persist enabled [ 183.870219][T13013] fuse: Bad value for 'fd' [ 183.908038][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.927054][T13020] netlink: 'syz.6.2144': attribute type 21 has an invalid length. [ 184.001930][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 184.001947][ T40] audit: type=1400 audit(180.958:910): avc: denied { map } for pid=13016 comm="syz.8.2147" path="/53/file0/pids.current" dev="9p" ino=36701734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.006104][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2151'. [ 184.010665][T13017] netfs: Couldn't get user pages (rc=-14) [ 184.020499][T13030] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2151'. [ 184.078730][T13031] KVM: debugfs: duplicate directory 13031-4 [ 184.183778][T13047] omfs: Unknown parameter 'gr' [ 184.188687][ T40] audit: type=1400 audit(181.136:911): avc: denied { write } for pid=13046 comm="syz.8.2154" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.256410][T13054] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.462201][T13073] x_tables: duplicate underflow at hook 1 [ 184.556253][ T5954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.560819][ T5954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.563759][ T5954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.565066][T13079] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 184.575480][ T5954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.578162][ T5954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.713109][T13076] chnl_net:caif_netlink_parms(): no params data found [ 184.791250][T13076] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.793564][T13076] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.796364][T13076] bridge_slave_0: entered allmulticast mode [ 184.799057][T13076] bridge_slave_0: entered promiscuous mode [ 184.802311][T13076] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.804600][T13076] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.816861][T13076] bridge_slave_1: entered allmulticast mode [ 184.819492][T13076] bridge_slave_1: entered promiscuous mode [ 184.864342][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.869734][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.911865][T13076] team0: Port device team_slave_0 added [ 184.915460][T13076] team0: Port device team_slave_1 added [ 184.960978][T13076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.963875][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.974228][T13076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.979340][T13076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.981519][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.990308][T13076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.043703][T13076] hsr_slave_0: entered promiscuous mode [ 185.046942][T13076] hsr_slave_1: entered promiscuous mode [ 185.049393][T13076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.051806][T13076] Cannot create hsr debugfs directory [ 185.113522][T13111] Bluetooth: MGMT ver 1.23 [ 185.125001][T13113] sctp: [Deprecated]: syz.8.2179 (pid 13113) Use of int in max_burst socket option. [ 185.125001][T13113] Use struct sctp_assoc_value instead [ 185.132359][T13114] sctp: [Deprecated]: syz.8.2179 (pid 13114) Use of int in max_burst socket option. [ 185.132359][T13114] Use struct sctp_assoc_value instead [ 185.169768][T13117] program syz.6.2180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.190717][T13076] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.194148][T13076] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.201328][T13122] KVM: debugfs: duplicate directory 13122-4 [ 185.273005][T13076] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.276145][T13076] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.304776][ T40] audit: type=1400 audit(182.174:912): avc: denied { map } for pid=13128 comm="syz.8.2185" path="/dev/video1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 185.313614][ T40] audit: type=1400 audit(182.174:913): avc: denied { execute } for pid=13128 comm="syz.8.2185" path="/dev/video1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 185.409960][T13076] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.413970][T13076] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.436847][ T5946] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 185.436862][ T5303] Bluetooth: hci4: command 0xfc11 tx timeout [ 185.536448][T13076] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.539557][T13076] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.618560][ T836] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 185.634373][T13158] tipc: Started in network mode [ 185.636127][T13158] tipc: Node identity 4, cluster identity 4711 [ 185.638440][T13158] tipc: Node number set to 4 [ 185.696435][T13076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.702641][T13076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.709525][T13076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.715636][T13076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.762315][T13076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.791282][ T836] usb 11-1: Using ep0 maxpacket: 8 [ 185.795266][ T836] usb 11-1: config 0 has no interfaces? [ 185.802231][ T836] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 185.805158][T13076] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.806311][ T836] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.812645][ T836] usb 11-1: Product: syz [ 185.815760][ T836] usb 11-1: Manufacturer: syz [ 185.818968][ T836] usb 11-1: SerialNumber: syz [ 185.823637][ T836] usb 11-1: config 0 descriptor?? [ 185.824901][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.827986][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.834490][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.836800][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.932501][T13176] netlink: 'syz.8.2197': attribute type 29 has an invalid length. [ 185.938666][T13176] netlink: 'syz.8.2197': attribute type 29 has an invalid length. [ 185.970785][T13076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.051713][ T837] usb 11-1: USB disconnect, device number 23 [ 186.112477][T13076] veth0_vlan: entered promiscuous mode [ 186.117356][T13076] veth1_vlan: entered promiscuous mode [ 186.126993][ T40] audit: type=1326 audit(182.941:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13184 comm="syz.8.2199" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f67a978e929 code=0x7fc00000 [ 186.132526][T13076] veth0_macvtap: entered promiscuous mode [ 186.150315][T13076] veth1_macvtap: entered promiscuous mode [ 186.161960][T13076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.168848][T13076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.173596][T13076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.177504][T13076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.180213][T13076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.182898][T13076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.232383][ T9115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.234927][ T9115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.256395][ T9115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.259709][ T9115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.265488][T13199] 9pnet_fd: p9_fd_create_tcp (13199): problem connecting socket to 127.0.0.1 [ 186.407031][T13207] bridge_slave_0: left allmulticast mode [ 186.408894][T13207] bridge_slave_0: left promiscuous mode [ 186.410959][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.415531][T13207] bridge_slave_1: left allmulticast mode [ 186.417580][T13207] bridge_slave_1: left promiscuous mode [ 186.419450][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.434969][T13207] bond0: (slave bond_slave_0): Releasing backup interface [ 186.446078][T13207] bond0: (slave bond_slave_1): Releasing backup interface [ 186.474955][T13207] team0: Port device team_slave_0 removed [ 186.481694][T13207] team0: Port device team_slave_1 removed [ 186.484292][T13207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.487003][T13207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.491193][T13207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.493828][T13207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.517627][T13209] vlan0: entered promiscuous mode [ 186.523376][T13209] team0: Port device vlan0 added [ 186.576274][T13215] xt_hashlimit: size too large, truncated to 1048576 [ 186.714043][ T40] audit: type=1400 audit(183.493:915): avc: denied { view } for pid=13217 comm="syz.8.2206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.805756][ T5946] Bluetooth: hci5: command tx timeout [ 186.955049][ T836] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 187.118262][ T836] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.121020][ T836] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.124227][ T836] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.129137][ T836] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 187.133663][ T836] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 187.140366][ T836] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.144160][ T836] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.149196][ T836] usb 11-1: Product: syz [ 187.151119][ T836] usb 11-1: Manufacturer: syz [ 187.159414][ T836] cdc_wdm 11-1:1.0: skipping garbage [ 187.161158][ T836] cdc_wdm 11-1:1.0: skipping garbage [ 187.163971][ T836] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 187.165943][ T836] cdc_wdm 11-1:1.0: Unknown control protocol [ 187.253852][ T40] audit: type=1400 audit(183.998:916): avc: denied { bind } for pid=13238 comm="syz.5.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 187.283210][T13239] team0: Port device vlan0 removed [ 187.295997][T13237] kvm: pic: non byte write [ 187.310224][T13239] team0: Mode changed to "activebackup" [ 187.312556][T13240] team0: Unable to change to the same mode the team is in [ 187.374840][T13248] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 187.378329][T13248] qnx6: wrong signature (magic) in superblock #1. [ 187.380430][T13248] qnx6: unable to read the first superblock [ 187.428061][T13225] netlink: 'syz.6.2209': attribute type 1 has an invalid length. [ 187.458813][T13225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.477202][T13225] bond1: (slave geneve2): making interface the new active one [ 187.484887][T13225] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 187.498435][T13225] bond1: entered promiscuous mode [ 187.500992][T13225] geneve2: entered promiscuous mode [ 187.515268][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.518630][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.539801][ T6026] usb 11-1: USB disconnect, device number 24 [ 187.578061][T13266] __nla_validate_parse: 3 callbacks suppressed [ 187.578077][T13266] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2220'. [ 187.706722][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'. [ 187.721335][T13271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2222'. [ 187.724101][T13271] bridge_slave_1: entered allmulticast mode [ 187.755965][T13276] netlink: 'syz.5.2225': attribute type 62 has an invalid length. [ 188.120346][ T6026] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 188.281533][ T6026] usb 11-1: Using ep0 maxpacket: 32 [ 188.285120][ T6026] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.288175][T13308] netlink: 'syz.8.2235': attribute type 4 has an invalid length. [ 188.288671][ T6026] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.295370][ T6026] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 188.297234][T13308] netlink: 'syz.8.2235': attribute type 4 has an invalid length. [ 188.298971][ T6026] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.307710][ T6026] usb 11-1: config 0 descriptor?? [ 188.511099][T13315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13315 comm=syz.8.2238 [ 188.752699][ T6026] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 188.770311][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2239'. [ 188.774703][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2239'. [ 188.828142][T13324] loop2: detected capacity change from 0 to 7 [ 188.832624][ T9422] Dev loop2: unable to read RDB block 7 [ 188.834962][ T9422] loop2: unable to read partition table [ 188.836971][ T9422] loop2: partition table beyond EOD, truncated [ 188.840995][T13324] Dev loop2: unable to read RDB block 7 [ 188.842810][T13324] loop2: unable to read partition table [ 188.844628][T13324] loop2: partition table beyond EOD, truncated [ 188.846631][T13324] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.888175][T13326] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 188.891641][T13326] qnx6: wrong signature (magic) in superblock #1. [ 188.893657][T13326] qnx6: unable to read the first superblock [ 188.971196][T13338] use of bytesused == 0 is deprecated and will be removed in the future, [ 188.973805][T13338] use the actual size instead. [ 188.976235][T13338] random: crng reseeded on system resumption [ 189.030789][ T5946] Bluetooth: hci5: command tx timeout [ 189.882702][T13368] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 189.963005][T13375] could not allocate digest TFM handle crc32-generic [ 190.072807][T13398] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 190.075279][T13398] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2266'. [ 190.078857][T13400] fuse: Bad value for 'group_id' [ 190.080726][T13400] fuse: Bad value for 'group_id' [ 190.184370][ T6026] usb 11-1: reset high-speed USB device number 25 using dummy_hcd [ 190.258938][T13404] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 190.262187][T13404] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2269'. [ 190.422985][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 190.458748][T13412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.468324][T13412] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2272'. [ 190.601484][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'. [ 190.604329][T13418] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 190.662716][T13421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=13421 comm=syz.5.2276 [ 190.884902][T13440] netlink: 'syz.5.2283': attribute type 1 has an invalid length. [ 190.888368][T13440] netlink: 'syz.5.2283': attribute type 1 has an invalid length. [ 190.916023][T13445] xt_hashlimit: size too large, truncated to 1048576 [ 190.937807][ T40] audit: type=1400 audit(187.450:917): avc: denied { link } for pid=13446 comm="syz.8.2285" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=36701740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.044700][ T40] audit: type=1400 audit(187.544:918): avc: denied { connect } for pid=13452 comm="syz.8.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 191.160606][T13473] IPv4: Oversized IP packet from 127.202.26.0 [ 191.252644][ T5946] Bluetooth: hci5: command tx timeout [ 191.368040][T13495] nft_compat: unsupported protocol 0 [ 191.369816][T13497] overlayfs: failed to clone upperpath [ 191.380574][T13499] FAULT_INJECTION: forcing a failure. [ 191.380574][T13499] name failslab, interval 1, probability 0, space 0, times 0 [ 191.385620][T13499] CPU: 2 UID: 0 PID: 13499 Comm: syz.8.2302 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 191.385644][T13499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.385653][T13499] Call Trace: [ 191.385659][T13499] [ 191.385666][T13499] dump_stack_lvl+0x16c/0x1f0 [ 191.385693][T13499] should_fail_ex+0x512/0x640 [ 191.385713][T13499] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 191.385733][T13499] should_failslab+0xc2/0x120 [ 191.385758][T13499] __kmalloc_cache_noprof+0x6a/0x3e0 [ 191.385779][T13499] ? net_generic+0xf4/0x2a0 [ 191.385794][T13499] ? nf_tables_newtable+0xd67/0x1b40 [ 191.385818][T13499] nf_tables_newtable+0xd67/0x1b40 [ 191.385841][T13499] ? __pfx___nla_validate_parse+0x10/0x10 [ 191.385867][T13499] ? __pfx_nf_tables_newtable+0x10/0x10 [ 191.385892][T13499] ? __nla_parse+0x40/0x60 [ 191.385913][T13499] nfnetlink_rcv_batch+0x18ea/0x2330 [ 191.385951][T13499] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 191.385988][T13499] ? avc_has_perm_noaudit+0x149/0x3b0 [ 191.386030][T13499] ? __nla_parse+0x40/0x60 [ 191.386047][T13499] nfnetlink_rcv+0x3c1/0x430 [ 191.386071][T13499] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.386101][T13499] netlink_unicast+0x53d/0x7f0 [ 191.386127][T13499] ? __pfx_netlink_unicast+0x10/0x10 [ 191.386151][T13499] netlink_sendmsg+0x8d1/0xdd0 [ 191.386171][T13499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.386197][T13499] ____sys_sendmsg+0xa95/0xc70 [ 191.386219][T13499] ? copy_msghdr_from_user+0x10a/0x160 [ 191.386246][T13499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.386288][T13499] ___sys_sendmsg+0x134/0x1d0 [ 191.386313][T13499] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.386333][T13499] ? __lock_acquire+0x622/0x1c90 [ 191.386392][T13499] __sys_sendmsg+0x16d/0x220 [ 191.386415][T13499] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.386454][T13499] do_syscall_64+0xcd/0x4c0 [ 191.386479][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.386495][T13499] RIP: 0033:0x7f67a978e929 [ 191.386509][T13499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.386525][T13499] RSP: 002b:00007f67aa5d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.386545][T13499] RAX: ffffffffffffffda RBX: 00007f67a99b5fa0 RCX: 00007f67a978e929 [ 191.386555][T13499] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.386564][T13499] RBP: 00007f67aa5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 191.386573][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.386582][T13499] R13: 0000000000000000 R14: 00007f67a99b5fa0 R15: 00007ffdc821bc18 [ 191.386604][T13499] [ 191.606874][T13518] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3107940196 (3107940196 ns) > initial count (1010729660 ns). Using initial count to start timer. [ 191.639352][ T40] audit: type=1326 audit(188.105:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.5.2307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98bb8e929 code=0x7fc00000 [ 191.662654][ T9] usb 11-1: USB disconnect, device number 25 [ 191.679880][ T40] audit: type=1400 audit(188.133:920): avc: denied { listen } for pid=13526 comm="syz.8.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.694747][ T40] audit: type=1400 audit(188.133:921): avc: denied { accept } for pid=13526 comm="syz.8.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.803319][T13532] FAULT_INJECTION: forcing a failure. [ 191.803319][T13532] name failslab, interval 1, probability 0, space 0, times 0 [ 191.807320][T13532] CPU: 0 UID: 0 PID: 13532 Comm: syz.8.2312 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 191.807334][T13532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.807341][T13532] Call Trace: [ 191.807345][T13532] [ 191.807350][T13532] dump_stack_lvl+0x16c/0x1f0 [ 191.807383][T13532] should_fail_ex+0x512/0x640 [ 191.807402][T13532] ? __kmalloc_noprof+0xbf/0x510 [ 191.807417][T13532] ? nla_strdup+0xc6/0x150 [ 191.807431][T13532] should_failslab+0xc2/0x120 [ 191.807447][T13532] __kmalloc_noprof+0xd2/0x510 [ 191.807465][T13532] nla_strdup+0xc6/0x150 [ 191.807481][T13532] nf_tables_newtable+0xdeb/0x1b40 [ 191.807499][T13532] ? __pfx___nla_validate_parse+0x10/0x10 [ 191.807517][T13532] ? __pfx_nf_tables_newtable+0x10/0x10 [ 191.807535][T13532] ? __nla_parse+0x40/0x60 [ 191.807546][T13532] nfnetlink_rcv_batch+0x18ea/0x2330 [ 191.807568][T13532] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 191.807608][T13532] ? avc_has_perm_noaudit+0x149/0x3b0 [ 191.807636][T13532] ? __nla_parse+0x40/0x60 [ 191.807648][T13532] nfnetlink_rcv+0x3c1/0x430 [ 191.807661][T13532] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.807679][T13532] netlink_unicast+0x53d/0x7f0 [ 191.807692][T13532] ? __pfx_netlink_unicast+0x10/0x10 [ 191.807708][T13532] netlink_sendmsg+0x8d1/0xdd0 [ 191.807722][T13532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.807739][T13532] ____sys_sendmsg+0xa95/0xc70 [ 191.807752][T13532] ? copy_msghdr_from_user+0x10a/0x160 [ 191.807768][T13532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.807790][T13532] ___sys_sendmsg+0x134/0x1d0 [ 191.807807][T13532] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.807821][T13532] ? __lock_acquire+0x622/0x1c90 [ 191.807855][T13532] __sys_sendmsg+0x16d/0x220 [ 191.807872][T13532] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.807897][T13532] do_syscall_64+0xcd/0x4c0 [ 191.807915][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.807926][T13532] RIP: 0033:0x7f67a978e929 [ 191.807936][T13532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.807957][T13532] RSP: 002b:00007f67aa5d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.807969][T13532] RAX: ffffffffffffffda RBX: 00007f67a99b5fa0 RCX: 00007f67a978e929 [ 191.807976][T13532] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.807982][T13532] RBP: 00007f67aa5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 191.807989][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.807995][T13532] R13: 0000000000000000 R14: 00007f67a99b5fa0 R15: 00007ffdc821bc18 [ 191.808009][T13532] [ 191.889372][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.916407][T13530] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 191.920293][T13530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.921884][T13536] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 191.922539][T13530] IPv6: NLM_F_CREATE should be set when creating new route [ 191.922603][T13530] IPv6: NLM_F_CREATE should be set when creating new route [ 192.071180][ T40] audit: type=1400 audit(188.507:922): avc: denied { map } for pid=13546 comm="syz.2.2316" path="/dev/tty2" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 192.314166][T13561] binder: 13560:13561 ioctl 4004af61 200000000040 returned -22 [ 192.397562][ T40] audit: type=1326 audit(188.816:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.8.2323" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a978e929 code=0x0 [ 192.475045][ T40] audit: type=1326 audit(188.881:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.5.2307" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc98bb858e7 code=0x7fc00000 [ 192.483867][ T40] audit: type=1326 audit(188.881:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.5.2307" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc98bb2ab19 code=0x7fc00000 [ 192.492303][ T40] audit: type=1326 audit(188.881:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.5.2307" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc98bb2abdf code=0x7fc00000 [ 192.546685][ T6026] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 192.683242][T13583] 9pnet: Could not find request transport: vortio [ 192.687304][T13582] 9pnet: Could not find request transport: vortio [ 192.728036][ T6026] usb 7-1: Using ep0 maxpacket: 16 [ 192.735497][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.740169][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.744088][ T6026] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.749879][ T6026] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 192.759916][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.765465][ T6026] usb 7-1: config 0 descriptor?? [ 193.214364][ T6026] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 193.217539][ T6026] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 193.219908][ T6026] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 193.222169][ T6026] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 193.224414][ T6026] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 193.230321][ T6026] input: HID 0955:7214 Haptics as /devices/virtual/input/input28 [ 193.256484][ T6026] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 193.259781][ T6026] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 193.418647][T13613] syz_tun: entered allmulticast mode [ 193.426446][T13559] random: crng reseeded on system resumption [ 193.476329][ T5946] Bluetooth: hci5: command tx timeout [ 193.499185][ T6427] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 193.499326][ T1465] usb 7-1: USB disconnect, device number 29 [ 193.506915][ T6427] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 193.511200][ T6427] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 193.514485][ T6427] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 193.576729][T13613] syz_tun: left allmulticast mode [ 193.629994][T13630] netlink: 'syz.8.2345': attribute type 15 has an invalid length. [ 194.030854][T13647] __nla_validate_parse: 6 callbacks suppressed [ 194.030865][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2352'. [ 194.072838][T13649] --map-set only usable from mangle table [ 194.190085][T13665] FAULT_INJECTION: forcing a failure. [ 194.190085][T13665] name failslab, interval 1, probability 0, space 0, times 0 [ 194.195251][T13665] CPU: 1 UID: 0 PID: 13665 Comm: syz.2.2360 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 194.195267][T13665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.195273][T13665] Call Trace: [ 194.195277][T13665] [ 194.195281][T13665] dump_stack_lvl+0x16c/0x1f0 [ 194.195317][T13665] should_fail_ex+0x512/0x640 [ 194.195335][T13665] ? __kmalloc_noprof+0xbf/0x510 [ 194.195351][T13665] ? nla_strdup+0xc6/0x150 [ 194.195365][T13665] should_failslab+0xc2/0x120 [ 194.195386][T13665] __kmalloc_noprof+0xd2/0x510 [ 194.195403][T13665] ? trace_kmalloc+0x2b/0xd0 [ 194.195425][T13665] ? __kvmalloc_node_noprof+0x298/0x620 [ 194.195452][T13665] nla_strdup+0xc6/0x150 [ 194.195478][T13665] nf_tables_newset+0x2532/0x4310 [ 194.195513][T13665] ? __pfx_nf_tables_newset+0x10/0x10 [ 194.195542][T13665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.195558][T13665] ? __nla_validate_parse+0x600/0x2880 [ 194.195615][T13665] ? __nla_parse+0x40/0x60 [ 194.195627][T13665] nfnetlink_rcv_batch+0x18ea/0x2330 [ 194.195649][T13665] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 194.195673][T13665] ? avc_has_perm_noaudit+0x149/0x3b0 [ 194.195699][T13665] ? __nla_parse+0x40/0x60 [ 194.195710][T13665] nfnetlink_rcv+0x3c1/0x430 [ 194.195724][T13665] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.195738][T13665] ? is_vmalloc_addr+0x86/0xa0 [ 194.195754][T13665] netlink_unicast+0x53d/0x7f0 [ 194.195768][T13665] ? __pfx_netlink_unicast+0x10/0x10 [ 194.195783][T13665] netlink_sendmsg+0x8d1/0xdd0 [ 194.195797][T13665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.195814][T13665] ____sys_sendmsg+0xa95/0xc70 [ 194.195827][T13665] ? copy_msghdr_from_user+0x10a/0x160 [ 194.195843][T13665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.195861][T13665] ___sys_sendmsg+0x134/0x1d0 [ 194.195878][T13665] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.195892][T13665] ? __lock_acquire+0x622/0x1c90 [ 194.195927][T13665] __sys_sendmsg+0x16d/0x220 [ 194.195943][T13665] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.195969][T13665] do_syscall_64+0xcd/0x4c0 [ 194.195987][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.195998][T13665] RIP: 0033:0x7fa7fbd8e929 [ 194.196012][T13665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.196022][T13665] RSP: 002b:00007fa7fcb3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.196032][T13665] RAX: ffffffffffffffda RBX: 00007fa7fbfb5fa0 RCX: 00007fa7fbd8e929 [ 194.196039][T13665] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 194.196045][T13665] RBP: 00007fa7fcb3d090 R08: 0000000000000000 R09: 0000000000000000 [ 194.196051][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.196057][T13665] R13: 0000000000000000 R14: 00007fa7fbfb5fa0 R15: 00007fffd3c27808 [ 194.196071][T13665] [ 194.206750][T13669] netlink: 'syz.8.2362': attribute type 1 has an invalid length. [ 194.347800][T13686] netlink: 'syz.2.2367': attribute type 4 has an invalid length. [ 194.388327][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2366'. [ 194.392728][T13688] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2369'. [ 194.564008][T13697] FAULT_INJECTION: forcing a failure. [ 194.564008][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.571464][T13697] CPU: 1 UID: 0 PID: 13697 Comm: syz.6.2372 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 194.571482][T13697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.571490][T13697] Call Trace: [ 194.571494][T13697] [ 194.571499][T13697] dump_stack_lvl+0x16c/0x1f0 [ 194.571521][T13697] should_fail_ex+0x512/0x640 [ 194.571540][T13697] _copy_from_user+0x2e/0xd0 [ 194.571557][T13697] kstrtouint_from_user+0xd6/0x1d0 [ 194.571595][T13697] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 194.571608][T13697] ? __lock_acquire+0xb8a/0x1c90 [ 194.571633][T13697] proc_fail_nth_write+0x83/0x250 [ 194.571649][T13697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.571668][T13697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.571681][T13697] vfs_write+0x2a0/0x1150 [ 194.571698][T13697] ? __pfx___mutex_lock+0x10/0x10 [ 194.571716][T13697] ? __pfx_vfs_write+0x10/0x10 [ 194.571735][T13697] ? __fget_files+0x20e/0x3c0 [ 194.571755][T13697] ksys_write+0x12a/0x250 [ 194.571769][T13697] ? __pfx_ksys_write+0x10/0x10 [ 194.571796][T13697] do_syscall_64+0xcd/0x4c0 [ 194.571824][T13697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.571844][T13697] RIP: 0033:0x7f878178d3df [ 194.571859][T13697] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 194.571875][T13697] RSP: 002b:00007f87825dc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 194.571894][T13697] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f878178d3df [ 194.571905][T13697] RDX: 0000000000000001 RSI: 00007f87825dc0a0 RDI: 0000000000000004 [ 194.571914][T13697] RBP: 00007f87825dc090 R08: 0000000000000000 R09: 0000000000000000 [ 194.571920][T13697] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 194.571927][T13697] R13: 0000000000000000 R14: 00007f87819b5fa0 R15: 00007ffdbc8c28c8 [ 194.571943][T13697] [ 194.622547][T13693] xt_cluster: node mask cannot exceed total number of nodes [ 194.677344][T13708] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2376'. [ 194.683823][T13708] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2376'. [ 194.696691][ T5946] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 194.777972][T13721] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2380'. [ 194.928871][T13730] binder: Unknown parameter 'sta' [ 194.967077][T13734] Bluetooth: MGMT ver 1.23 [ 195.023747][T13741] netlink: 'syz.5.2386': attribute type 10 has an invalid length. [ 195.035373][T13741] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 195.136688][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2387'. [ 195.139828][T13744] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 195.142698][T13744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.197606][T13747] overlayfs: failed to clone upperpath [ 195.281583][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2389'. [ 195.281611][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2389'. [ 196.203301][T13817] netlink: 'syz.5.2409': attribute type 9 has an invalid length. [ 196.378412][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 196.390637][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053187800: rx timeout, send abort [ 196.396055][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053187800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.398335][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 196.398347][ T40] audit: type=1400 audit(192.557:934): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 196.401474][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053187000: rx timeout, send abort [ 196.403179][ T40] audit: type=1400 audit(192.557:935): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.411906][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053187000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.415145][ T40] audit: type=1400 audit(192.557:936): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.434746][ T40] audit: type=1400 audit(192.557:937): avc: denied { add_name } for pid=5335 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.441566][ T40] audit: type=1400 audit(192.557:938): avc: denied { create } for pid=5335 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.452195][ T40] audit: type=1400 audit(192.557:939): avc: denied { append open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.461798][ T40] audit: type=1400 audit(192.557:940): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.486453][ T40] audit: type=1400 audit(192.632:941): avc: denied { mount } for pid=13825 comm="syz.6.2412" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 196.510309][ T1465] IPVS: starting estimator thread 0... [ 196.608835][ T1465] Process accounting resumed [ 196.611729][ T40] audit: type=1400 audit(192.744:942): avc: denied { unmount } for pid=13838 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 196.630610][T13833] IPVS: using max 45 ests per chain, 108000 per kthread [ 196.727465][T13857] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 196.870905][ T40] audit: type=1400 audit(192.988:943): avc: denied { read } for pid=13879 comm="syz.6.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.913100][T13895] CIFS: Unable to determine destination address [ 196.916630][T13895] netlink: 'syz.8.2429': attribute type 15 has an invalid length. [ 197.071736][ T5982] IPVS: starting estimator thread 0... [ 197.098031][T13912] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 197.186092][T13919] IPVS: using max 45 ests per chain, 108000 per kthread [ 197.240350][ T52] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 197.306982][T13928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.312697][T13928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.319626][T13928] bond0 (unregistering): Released all slaves [ 197.402352][T13943] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.408975][T13943] netlink: 'syz.2.2447': attribute type 5 has an invalid length. [ 197.411463][ T52] usb 11-1: Using ep0 maxpacket: 8 [ 197.412716][ T52] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 197.415820][ T52] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.418885][ T52] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.421996][ T52] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 197.425362][T13942] ptrace attach of "/syz-executor exec"[13945] was attempted by "/syz-executor exec"[13942] [ 197.425465][ T52] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 197.430822][T13943] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 197.434215][ T52] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.439206][ T52] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.442041][ T52] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.495350][T13953] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.521662][T13956] netlink: 'syz.2.2452': attribute type 4 has an invalid length. [ 197.554000][T13962] Cannot find add_set index 0 as target [ 197.668791][ T52] usb 11-1: usb_control_msg returned -32 [ 197.670555][ T52] usbtmc 11-1:16.0: can't read capabilities [ 197.680556][ T52] usb 11-1: USB disconnect, device number 26 [ 197.727048][T13984] netlink: 'syz.2.2460': attribute type 10 has an invalid length. [ 197.733064][T13984] team0: left allmulticast mode [ 197.734648][T13984] team0: left promiscuous mode [ 197.736341][T13984] bridge0: port 1(team0) entered disabled state [ 197.740691][T13984] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.745023][T13984] bond0: (slave team0): Enslaving as an active interface with an up link [ 197.787366][T13990] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 197.791334][T13990] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 197.816652][ T1465] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 197.987602][ T1465] usb 13-1: Using ep0 maxpacket: 32 [ 197.990570][ T1465] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 197.994022][ T1465] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 197.997494][ T1465] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.011260][ T1465] usb 13-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 198.014771][ T1465] usb 13-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 198.018024][ T1465] usb 13-1: Product: syz [ 198.021312][ T1465] usb 13-1: Manufacturer: syz [ 198.023435][ T1465] usb 13-1: SerialNumber: syz [ 198.044322][ T1465] input: appletouch as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/input/input29 [ 198.244208][ T6427] usb 13-1: USB disconnect, device number 3 [ 198.250676][ T6427] appletouch 13-1:1.0: input: appletouch disconnected [ 198.284772][T14012] loop6: detected capacity change from 0 to 63 [ 198.289713][T14013] buffer_io_error: 23 callbacks suppressed [ 198.289727][T14013] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 198.290592][ T9422] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 198.291685][T14013] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 198.294654][ T9422] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 198.296896][T14013] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 198.300151][ T9422] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 198.301856][T14015] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 198.302211][T14013] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 198.317192][ T9422] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.320419][ T9422] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.323206][ T9422] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.441103][T14034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.609437][T14056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14056 comm=syz.6.2480 [ 198.625127][T14056] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.628127][T14056] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.631659][T14056] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.634876][T14056] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.638499][T14056] vxlan0: entered promiscuous mode [ 198.748505][T14070] xt_hashlimit: size too large, truncated to 1048576 [ 198.753028][T14070] warn_alloc: 1 callbacks suppressed [ 198.753037][T14070] syz.2.2490: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 198.761680][T14070] CPU: 1 UID: 0 PID: 14070 Comm: syz.2.2490 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 198.761696][T14070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.761703][T14070] Call Trace: [ 198.761707][T14070] [ 198.761712][T14070] dump_stack_lvl+0x16c/0x1f0 [ 198.761752][T14070] warn_alloc+0x248/0x3a0 [ 198.761767][T14070] ? __pfx_warn_alloc+0x10/0x10 [ 198.761787][T14070] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 198.761802][T14070] ? __vmalloc_node_noprof+0xad/0xf0 [ 198.761817][T14070] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 198.761833][T14070] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 198.761848][T14070] ? rcu_is_watching+0x12/0xc0 [ 198.761864][T14070] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.761876][T14070] ? __alloc_pages_noprof+0xb/0x1b0 [ 198.761890][T14070] ? ___kmalloc_large_node+0x84/0x1e0 [ 198.761904][T14070] __kvmalloc_node_noprof+0x30a/0x620 [ 198.761917][T14070] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 198.761931][T14070] ? net_generic+0xea/0x2a0 [ 198.761943][T14070] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 198.761960][T14070] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 198.761974][T14070] hashlimit_mt_check_common+0x8bb/0x1460 [ 198.761992][T14070] hashlimit_mt_check+0x71/0x90 [ 198.762005][T14070] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 198.762019][T14070] xt_check_match+0x283/0xa50 [ 198.762032][T14070] ? __schedule+0x1fe2/0x5de0 [ 198.762048][T14070] ? __pfx_xt_check_match+0x10/0x10 [ 198.762063][T14070] ? xt_find_target+0x1f2/0x290 [ 198.762077][T14070] ? xt_find_match+0x1f6/0x290 [ 198.762092][T14070] find_check_entry.constprop.0+0x34e/0xa20 [ 198.762111][T14070] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 198.762129][T14070] ? kasan_quarantine_put+0x10a/0x240 [ 198.762142][T14070] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.762159][T14070] ? kfree+0x2b4/0x4d0 [ 198.762170][T14070] ? translate_table+0xc0e/0x17b0 [ 198.762185][T14070] translate_table+0xd0b/0x17b0 [ 198.762204][T14070] ? __pfx_translate_table+0x10/0x10 [ 198.762217][T14070] ? xt_alloc_table_info+0x3e/0xa0 [ 198.762233][T14070] do_ip6t_set_ctl+0x570/0xb00 [ 198.762247][T14070] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 198.762263][T14070] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 198.762278][T14070] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.762302][T14070] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 198.762316][T14070] nf_setsockopt+0x8d/0xf0 [ 198.762329][T14070] ipv6_setsockopt+0x135/0x170 [ 198.762343][T14070] rawv6_setsockopt+0xc2/0x510 [ 198.762354][T14070] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 198.762366][T14070] ? selinux_socket_setsockopt+0x6a/0x80 [ 198.762382][T14070] ? sock_common_setsockopt+0x2e/0xf0 [ 198.762394][T14070] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 198.762405][T14070] do_sock_setsockopt+0x221/0x470 [ 198.762417][T14070] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 198.762436][T14070] __sys_setsockopt+0x1a0/0x230 [ 198.762453][T14070] __x64_sys_setsockopt+0xbd/0x160 [ 198.762468][T14070] ? do_syscall_64+0x91/0x4c0 [ 198.762484][T14070] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.762499][T14070] do_syscall_64+0xcd/0x4c0 [ 198.762516][T14070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.762527][T14070] RIP: 0033:0x7fa7fbd8e929 [ 198.762536][T14070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.762547][T14070] RSP: 002b:00007fa7fcb3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.762557][T14070] RAX: ffffffffffffffda RBX: 00007fa7fbfb5fa0 RCX: 00007fa7fbd8e929 [ 198.762564][T14070] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 198.762570][T14070] RBP: 00007fa7fbe10b39 R08: 0000000000000588 R09: 0000000000000000 [ 198.762576][T14070] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 198.762583][T14070] R13: 0000000000000000 R14: 00007fa7fbfb5fa0 R15: 00007fffd3c27808 [ 198.762596][T14070] [ 198.762601][T14070] Mem-Info: [ 198.820755][T14076] binder: 14075:14076 ioctl 4018620d 0 returned -22 [ 198.820856][T14070] active_anon:24918 inactive_anon:0 isolated_anon:0 [ 198.820856][T14070] active_file:4279 inactive_file:16210 isolated_file:0 [ 198.820856][T14070] unevictable:17137 dirty:292 writeback:0 [ 198.820856][T14070] slab_reclaimable:12941 slab_unreclaimable:88462 [ 198.820856][T14070] mapped:25588 shmem:12151 pagetables:1701 [ 198.820856][T14070] sec_pagetables:305 bounce:0 [ 198.820856][T14070] kernel_misc_reclaimable:0 [ 198.820856][T14070] free:425099 free_pcp:19852 free_cma:0 [ 198.902281][T14070] Node 0 active_anon:99672kB inactive_anon:0kB active_file:16960kB inactive_file:64692kB unevictable:65012kB isolated(anon):0kB isolated(file):0kB mapped:102212kB dirty:1020kB writeback:0kB shmem:45068kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:16880kB pagetables:6592kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 198.912462][T14070] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:148kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.922105][T14070] Node 0 DMA free:15176kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:0kB free_cma:0kB [ 198.931005][T14070] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 198.932816][T14070] Node 0 DMA32 free:83924kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99672kB inactive_anon:0kB active_file:16960kB inactive_file:64692kB unevictable:65012kB writepending:1020kB present:2080628kB managed:1264716kB mlocked:0kB bounce:0kB free_pcp:63832kB local_pcp:31020kB free_cma:0kB [ 198.942497][T14070] lowmem_reserve[]: 0 0 0 0 0 [ 198.944019][T14070] Node 1 Normal free:1601296kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:148kB unevictable:3536kB writepending:148kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:15368kB local_pcp:7216kB free_cma:0kB [ 198.953936][T14070] lowmem_reserve[]: 0 0 0 0 0 [ 198.955460][T14070] Node 0 DMA: 0*4kB 3*8kB (U) 3*16kB (UE) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 1*4096kB (U) = 15176kB [ 198.960312][T14070] Node 0 DMA32: 521*4kB (UME) 268*8kB (UME) 254*16kB (UME) 157*32kB (UME) 171*64kB (ME) 98*128kB (M) 68*256kB (UM) 32*512kB (UM) 5*1024kB (UM) 2*2048kB (U) 1*4096kB (M) = 83908kB [ 198.965811][T14070] Node 1 Normal: 24*4kB (UM) 96*8kB (UME) 95*16kB (UME) 244*32kB (UME) 131*64kB (UME) 59*128kB (UME) 29*256kB (UM) 20*512kB (UM) 13*1024kB (M) 14*2048kB (ME) 370*4096kB (UM) = 1601296kB [ 198.971442][T14070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.974359][T14070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 198.977224][T14070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.980129][T14070] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 198.983179][T14070] 48005 total pagecache pages [ 198.984646][T14070] 0 pages in swap cache [ 198.985956][T14070] Free swap = 124996kB [ 198.987213][T14070] Total swap = 124996kB [ 198.988479][T14070] 1048443 pages RAM [ 198.989678][T14070] 0 pages HighMem/MovableOnly [ 198.991136][T14070] 282937 pages reserved [ 198.992516][T14070] 0 pages cma reserved [ 199.558044][T14113] validate_nla: 1 callbacks suppressed [ 199.558055][T14113] netlink: 'syz.2.2503': attribute type 4 has an invalid length. [ 199.685202][T14124] __nla_validate_parse: 13 callbacks suppressed [ 199.685214][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2506'. [ 199.747282][T14131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.870593][T14147] tmpfs: Bad value for 'mpol' [ 199.920262][T14146] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 199.923423][T14146] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2513'. [ 200.354722][T14195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2525'. [ 200.522694][T14210] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 200.526747][T14208] cgroup: noprefix used incorrectly [ 200.656028][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2537'. [ 200.729045][T14231] block device autoloading is deprecated and will be removed. [ 200.731674][T14231] syz.2.2539: attempt to access beyond end of device [ 200.731674][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.737233][T14231] syz.2.2539: attempt to access beyond end of device [ 200.737233][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.741822][T14231] syz.2.2539: attempt to access beyond end of device [ 200.741822][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.746338][T14231] syz.2.2539: attempt to access beyond end of device [ 200.746338][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.750896][T14231] syz.2.2539: attempt to access beyond end of device [ 200.750896][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.753391][ C3] vcan0: j1939_tp_rxtimer: 0xffff888058a9c000: rx timeout, send abort [ 200.758779][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888058a9c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.759701][T14231] syz.2.2539: attempt to access beyond end of device [ 200.759701][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.763255][ C3] vcan0: j1939_tp_rxtimer: 0xffff88804e372800: rx timeout, send abort [ 200.770371][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e372800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.770435][T14231] syz.2.2539: attempt to access beyond end of device [ 200.770435][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.780876][T14231] syz.2.2539: attempt to access beyond end of device [ 200.780876][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.785451][T14231] syz.2.2539: attempt to access beyond end of device [ 200.785451][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.791548][T14231] syz.2.2539: attempt to access beyond end of device [ 200.791548][T14231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.892779][T14250] 9pnet_fd: p9_fd_create_unix (14250): problem connecting socket: éq‰Y’3aK: -91 [ 200.951177][T14258] CIFS mount error: No usable UNC path provided in device string! [ 200.951177][T14258] [ 200.954354][T14258] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.015047][T14261] CIFS mount error: No usable UNC path provided in device string! [ 201.015047][T14261] [ 201.019000][T14261] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.023021][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'. [ 201.054465][T14271] overlayfs: failed to resolve './bus': -2 [ 201.085980][T14274] netlink: 'syz.5.2553': attribute type 1 has an invalid length. [ 201.100623][T14274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.112204][T14274] bond2: (slave geneve2): making interface the new active one [ 201.115323][T14274] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 202.187831][ T5925] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 202.320512][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802812cc00: rx timeout, send abort [ 202.323792][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802812cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 202.342900][ T5303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.348992][ T5303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.354477][ T5303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.359793][T14302] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2562'. [ 202.360524][ T5303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.366073][ T5303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.461471][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 202.461482][ T40] audit: type=1400 audit(198.226:954): avc: denied { map } for pid=14305 comm="syz.5.2564" path="socket:[53486]" dev="sockfs" ino=53486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 202.473259][T14306] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 202.477938][T14306] bridge0: entered allmulticast mode [ 202.514211][T14299] chnl_net:caif_netlink_parms(): no params data found [ 202.541378][T14319] netlink: 'syz.5.2566': attribute type 2 has an invalid length. [ 202.597320][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.599672][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.599904][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2568'. [ 202.602193][T14299] bridge_slave_0: entered allmulticast mode [ 202.608771][T14299] bridge_slave_0: entered promiscuous mode [ 202.612067][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.614241][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.618501][T14299] bridge_slave_1: entered allmulticast mode [ 202.621297][T14299] bridge_slave_1: entered promiscuous mode [ 202.654596][T14331] netlink: 'syz.6.2569': attribute type 12 has an invalid length. [ 202.660120][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.665366][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.682993][T14333] netlink: 'syz.6.2570': attribute type 1 has an invalid length. [ 202.709438][T14299] team0: Port device team_slave_0 added [ 202.715340][T14299] team0: Port device team_slave_1 added [ 202.751319][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.752890][T14339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.753551][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.753586][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.753962][T14337] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2572'. [ 202.772872][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.775127][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.783994][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.830706][T14299] hsr_slave_0: entered promiscuous mode [ 202.833260][T14299] hsr_slave_1: entered promiscuous mode [ 202.835337][T14299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.838751][T14299] Cannot create hsr debugfs directory [ 202.858327][T14344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2574'. [ 202.945959][T14299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 203.031899][T14299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 203.101730][T14299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 203.224045][T14299] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 203.315144][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.317562][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.377694][T14299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.385661][T14299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.394120][T14299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.398645][T14299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.415289][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.417631][T14299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.420225][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.422554][T14299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.452890][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.457231][T14367] dns_resolver: Unsupported content type (234) [ 203.462514][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.466460][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.481074][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2581'. [ 203.484788][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.496994][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.499330][ T9144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.506555][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.509366][ T9144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.532292][T14299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.646588][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.674550][T14299] veth0_vlan: entered promiscuous mode [ 203.680290][T14299] veth1_vlan: entered promiscuous mode [ 203.701353][T14299] veth0_macvtap: entered promiscuous mode [ 203.707456][T14299] veth1_macvtap: entered promiscuous mode [ 203.716851][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.728119][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.732984][T14299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.735701][T14299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.738396][T14299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.743165][T14299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.756460][ T40] audit: type=1400 audit(199.433:955): avc: denied { setopt } for pid=14383 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 203.805264][ T9116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.808032][ T9116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.827056][ T9116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.830451][ T9116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.887787][T14383] delete_channel: no stack [ 203.952319][T14391] fuse: Bad value for 'fd' [ 204.000447][T14395] bond0: entered promiscuous mode [ 204.002840][T14395] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 204.009028][T14395] bond0: left promiscuous mode [ 204.010937][T14395] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 204.201916][T14403] overlayfs: missing 'workdir' [ 204.460892][T14428] overlay: ./file0 is not a directory [ 204.520149][T14424] gfs2: error -5 reading superblock [ 204.594691][ T5303] Bluetooth: hci1: command tx timeout [ 205.319115][T14449] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 205.319119][T14448] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 205.419267][T14454] netlink: 'syz.5.2610': attribute type 4 has an invalid length. [ 205.424503][T14456] netlink: 'syz.6.2611': attribute type 11 has an invalid length. [ 205.427264][T14456] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2611'. [ 205.432958][T14456] netlink: 'syz.6.2611': attribute type 10 has an invalid length. [ 205.441571][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2611'. [ 205.448283][T14455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.482456][T14460] program syz.6.2613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.486319][T14461] program syz.6.2613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.545872][ T6026] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 205.685253][ T6026] usb 7-1: device descriptor read/64, error -71 [ 205.731690][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2616'. [ 205.944456][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2619'. [ 205.952133][ T6026] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 206.091169][ T6026] usb 7-1: device descriptor read/64, error -71 [ 206.208892][ T6026] usb usb7-port1: attempt power cycle [ 206.280098][T14500] Cannot find del_set index 4 as target [ 206.298820][T14502] xt_hashlimit: size too large, truncated to 1048576 [ 206.385232][T14515] netlink: 'syz.5.2630': attribute type 11 has an invalid length. [ 206.387657][T14515] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2630'. [ 206.391124][T14515] netlink: 'syz.5.2630': attribute type 10 has an invalid length. [ 206.395287][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.443624][T14525] netlink: 'syz.6.2633': attribute type 21 has an invalid length. [ 206.593637][ T6026] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 206.615392][ T6026] usb 7-1: device descriptor read/8, error -71 [ 206.818235][ T5303] Bluetooth: hci1: command tx timeout [ 206.875206][ T6026] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 206.893515][ T6026] usb 7-1: device descriptor read/8, error -71 [ 207.011431][ T6026] usb usb7-port1: unable to enumerate USB device [ 207.336698][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2639'. [ 207.563049][T14555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=14555 comm=syz.5.2642 [ 207.666154][T14564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14564 comm=syz.6.2645 [ 207.671905][T14564] netlink: 'syz.6.2645': attribute type 1 has an invalid length. [ 207.696390][T14564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.768461][T14564] bond2: entered promiscuous mode [ 207.849590][T14569] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2646'. [ 208.039650][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2649'. [ 208.051768][T14576] bridge2: port 1(ip6gretap1) entered blocking state [ 208.053938][T14576] bridge2: port 1(ip6gretap1) entered disabled state [ 208.056084][T14576] ip6gretap1: entered allmulticast mode [ 208.058736][T14576] ip6gretap1: entered promiscuous mode [ 208.078070][T14576] veth5: entered promiscuous mode [ 208.082294][T14576] bridge2: port 2(veth5) entered blocking state [ 208.084837][T14576] bridge2: port 2(veth5) entered disabled state [ 208.087351][T14576] veth5: entered allmulticast mode [ 208.542809][ T40] audit: type=1400 audit(203.913:956): avc: denied { setattr } for pid=14601 comm="syz.2.2657" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 208.557248][T14599] loop6: detected capacity change from 0 to 524287999 [ 208.574120][T14599] loop2: detected capacity change from 0 to 7 [ 208.578489][T14599] Dev loop2: unable to read RDB block 7 [ 208.580462][T14599] loop2: AHDI p1 p2 p3 [ 208.582111][T14599] loop2: partition table partially beyond EOD, truncated [ 208.584620][T14599] loop2: p1 start 1601398130 is beyond EOD, truncated [ 208.586769][T14599] loop2: p2 start 1702059890 is beyond EOD, truncated [ 208.667918][ T5303] Bluetooth: hci0: ACL packet for unknown connection handle 173 [ 208.676736][T14622] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 208.692484][ T40] audit: type=1400 audit(204.053:957): avc: denied { setattr } for pid=14612 comm="syz.6.2659" name="file0" dev="9p" ino=36701739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.702351][T14624] autofs: Unknown parameter '0x0000000000000006' [ 208.707714][ T40] audit: type=1400 audit(204.063:958): avc: denied { mounton } for pid=14612 comm="syz.6.2659" path="/320/file0/file0" dev="9p" ino=36701739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.737868][T14629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5904 sclass=netlink_route_socket pid=14629 comm=syz.2.2663 [ 208.759792][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 208.885880][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2670'. [ 209.043462][ T5303] Bluetooth: hci1: command tx timeout [ 209.089848][T14669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25893 sclass=netlink_route_socket pid=14669 comm=syz.5.2675 [ 209.242702][ T40] audit: type=1326 audit(204.568:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.254818][ T40] audit: type=1326 audit(204.568:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.268477][ T40] audit: type=1326 audit(204.568:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.275600][ T40] audit: type=1326 audit(204.568:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.282698][ T40] audit: type=1326 audit(204.568:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.293155][ T40] audit: type=1326 audit(204.568:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.296005][T14690] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 209.302025][ T40] audit: type=1326 audit(204.568:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.2680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8e18e929 code=0x50000 [ 209.387465][T14701] ================================================================== [ 209.390642][T14701] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 209.393532][T14701] Read of size 1 at addr ffff88802c560360 by task syz.5.2684/14701 [ 209.398562][T14701] [ 209.399525][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.5.2684 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 209.399540][T14701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.399548][T14701] Call Trace: [ 209.399552][T14701] [ 209.399557][T14701] dump_stack_lvl+0x116/0x1f0 [ 209.399577][T14701] print_report+0xcd/0x680 [ 209.399592][T14701] ? __virt_addr_valid+0x81/0x610 [ 209.399605][T14701] ? __phys_addr+0xe8/0x180 [ 209.399617][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.399630][T14701] kasan_report+0xe0/0x110 [ 209.399645][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.399659][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.399672][T14701] __kasan_check_byte+0x36/0x50 [ 209.399687][T14701] lock_acquire+0xfc/0x350 [ 209.399708][T14701] ? __pfx___mutex_lock+0x10/0x10 [ 209.399725][T14701] _raw_spin_lock+0x2e/0x40 [ 209.399738][T14701] ? __futex_pivot_hash+0x1dd/0x540 [ 209.399752][T14701] __futex_pivot_hash+0x1dd/0x540 [ 209.399768][T14701] futex_hash_allocate+0xad1/0xf00 [ 209.399782][T14701] ? __pfx_futex_hash_allocate+0x10/0x10 [ 209.399797][T14701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.399810][T14701] ? cap_task_prctl+0x2af/0xa80 [ 209.399830][T14701] ? static_key_count+0x5a/0x70 [ 209.399842][T14701] futex_hash_prctl+0x1f4/0x650 [ 209.399857][T14701] __do_sys_prctl+0x171f/0x24c0 [ 209.399869][T14701] ? __pfx___do_sys_prctl+0x10/0x10 [ 209.399882][T14701] do_syscall_64+0xcd/0x4c0 [ 209.399898][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.399910][T14701] RIP: 0033:0x7fc98bb8e929 [ 209.399918][T14701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.399929][T14701] RSP: 002b:00007fc98c974038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 209.399940][T14701] RAX: ffffffffffffffda RBX: 00007fc98bdb6080 RCX: 00007fc98bb8e929 [ 209.399949][T14701] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 209.399955][T14701] RBP: 00007fc98bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.399961][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.399968][T14701] R13: 0000000000000001 R14: 00007fc98bdb6080 R15: 00007ffd1fcdea58 [ 209.399978][T14701] [ 209.399981][T14701] [ 209.484945][T14701] Allocated by task 14700: [ 209.486705][T14701] kasan_save_stack+0x33/0x60 [ 209.488359][T14701] kasan_save_track+0x14/0x30 [ 209.490328][T14701] __kasan_kmalloc+0xaa/0xb0 [ 209.492276][T14701] __kvmalloc_node_noprof+0x27b/0x620 [ 209.494471][T14701] futex_hash_allocate+0x49d/0xf00 [ 209.496183][T14701] futex_hash_prctl+0x1f4/0x650 [ 209.497799][T14701] __do_sys_prctl+0x171f/0x24c0 [ 209.499322][T14701] do_syscall_64+0xcd/0x4c0 [ 209.500802][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.502609][T14701] [ 209.503397][T14701] The buggy address belongs to the object at ffff88802c560300 [ 209.503397][T14701] which belongs to the cache kmalloc-cg-64 of size 64 [ 209.508102][T14701] The buggy address is located 32 bytes to the right of [ 209.508102][T14701] allocated 64-byte region [ffff88802c560300, ffff88802c560340) [ 209.513850][T14701] [ 209.514883][T14701] The buggy address belongs to the physical page: [ 209.517497][T14701] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c560500 pfn:0x2c560 [ 209.521323][T14701] memcg:ffff888059a87a01 [ 209.522913][T14701] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 209.525864][T14701] page_type: f5(slab) [ 209.527112][T14701] raw: 00fff00000000000 ffff88801b849a40 0000000000000000 dead000000000001 [ 209.530204][T14701] raw: ffff88802c560500 0000000080200019 00000000f5000000 ffff888059a87a01 [ 209.533581][T14701] page dumped because: kasan: bad access detected [ 209.536223][T14701] page_owner tracks the page as allocated [ 209.538626][T14701] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 10172, tgid 10171 (syz.5.1167), ts 133505409019, free_ts 133393373886 [ 209.547022][T14701] post_alloc_hook+0x1c0/0x230 [ 209.549064][T14701] get_page_from_freelist+0x1321/0x3890 [ 209.551309][T14701] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 209.553626][T14701] new_slab+0x94/0x330 [ 209.555105][T14701] ___slab_alloc+0xd9c/0x1940 [ 209.556637][T14701] __slab_alloc.constprop.0+0x56/0xb0 [ 209.558338][T14701] __kmalloc_node_noprof+0x2ed/0x500 [ 209.560315][T14701] __alloc+0x13c/0x190 [ 209.561887][T14701] alloc_bulk+0x413/0xc80 [ 209.563466][T14701] bpf_mem_alloc_init+0x84b/0xd40 [ 209.565223][T14701] trie_alloc+0x29a/0x320 [ 209.566640][T14701] map_create+0x592/0x1db0 [ 209.568338][T14701] __sys_bpf+0x47cc/0x4d80 [ 209.569762][T14701] __x64_sys_bpf+0x78/0xc0 [ 209.571151][T14701] do_syscall_64+0xcd/0x4c0 [ 209.572624][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.574794][T14701] page last free pid 33 tgid 33 stack trace: [ 209.577139][T14701] __free_frozen_pages+0x7fe/0x1180 [ 209.579305][T14701] tlb_remove_table_rcu+0x116/0x1a0 [ 209.581527][T14701] rcu_core+0x799/0x14e0 [ 209.583302][T14701] handle_softirqs+0x216/0x8e0 [ 209.585334][T14701] run_ksoftirqd+0x3a/0x60 [ 209.587189][T14701] smpboot_thread_fn+0x3f4/0xae0 [ 209.589287][T14701] kthread+0x3c2/0x780 [ 209.591004][T14701] ret_from_fork+0x5d4/0x6f0 [ 209.592706][T14701] ret_from_fork_asm+0x1a/0x30 [ 209.594264][T14701] [ 209.595126][T14701] Memory state around the buggy address: [ 209.596989][T14701] ffff88802c560200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 209.599555][T14701] ffff88802c560280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 209.602142][T14701] >ffff88802c560300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 209.604795][T14701] ^ [ 209.607609][T14701] ffff88802c560380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 209.610896][T14701] ffff88802c560400: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 209.614130][T14701] ================================================================== [ 209.617855][T14701] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.620779][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.5.2684 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 209.625573][T14701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.629405][T14701] Call Trace: [ 209.630492][T14701] [ 209.631560][T14701] dump_stack_lvl+0x3d/0x1f0 [ 209.633229][T14701] panic+0x71c/0x800 [ 209.634754][T14701] ? __pfx_panic+0x10/0x10 [ 209.636458][T14701] ? irqentry_exit+0x3b/0x90 [ 209.638325][T14701] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.640388][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.642136][T14701] ? check_panic_on_warn+0x1f/0xb0 [ 209.644277][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.646322][T14701] check_panic_on_warn+0xab/0xb0 [ 209.648458][T14701] end_report+0x107/0x170 [ 209.650315][T14701] kasan_report+0xee/0x110 [ 209.652145][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.653645][T14701] ? _raw_spin_lock+0x2e/0x40 [ 209.655156][T14701] __kasan_check_byte+0x36/0x50 [ 209.656723][T14701] lock_acquire+0xfc/0x350 [ 209.658135][T14701] ? __pfx___mutex_lock+0x10/0x10 [ 209.659734][T14701] _raw_spin_lock+0x2e/0x40 [ 209.661175][T14701] ? __futex_pivot_hash+0x1dd/0x540 [ 209.662767][T14701] __futex_pivot_hash+0x1dd/0x540 [ 209.664363][T14701] futex_hash_allocate+0xad1/0xf00 [ 209.665963][T14701] ? __pfx_futex_hash_allocate+0x10/0x10 [ 209.667593][T14701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.669358][T14701] ? cap_task_prctl+0x2af/0xa80 [ 209.670899][T14701] ? static_key_count+0x5a/0x70 [ 209.672423][T14701] futex_hash_prctl+0x1f4/0x650 [ 209.674033][T14701] __do_sys_prctl+0x171f/0x24c0 [ 209.675566][T14701] ? __pfx___do_sys_prctl+0x10/0x10 [ 209.677211][T14701] do_syscall_64+0xcd/0x4c0 [ 209.678658][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.680547][T14701] RIP: 0033:0x7fc98bb8e929 [ 209.681955][T14701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.688039][T14701] RSP: 002b:00007fc98c974038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 209.690648][T14701] RAX: ffffffffffffffda RBX: 00007fc98bdb6080 RCX: 00007fc98bb8e929 [ 209.693149][T14701] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 209.695636][T14701] RBP: 00007fc98bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.698094][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.700595][T14701] R13: 0000000000000001 R14: 00007fc98bdb6080 R15: 00007ffd1fcdea58 [ 209.703099][T14701] [ 209.704658][T14701] Kernel Offset: disabled [ 209.706024][T14701] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:33:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc90003a876a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc98c9746c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc98c973f98 CR3=000000004ba98000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbc8c29f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8781811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8781811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8781811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8781811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8781811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8781811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000000000000004 RCX=ffffffff8233e4c5 RDX=ffff88802d592440 RSI=ffffffff8233e52f RDI=0000000000000007 RBP=0000000000000004 RSP=ffffc90003b97ce0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000004 R11=0000000000000000 R12=1ffff92000772faf R13=0000000000000000 R14=ffff8880349c0e00 R15=00007ffe3e765bcc RIP=ffffffff81bc1c07 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c901500 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555593d29808 CR3=00000000346a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000004a DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c92c360 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c92bd38 000055555c92b1b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c923114 000055555c922d10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 019c100006014c96 0fffffffffffff04 021000019c100006 014c96000200071e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800288003028004 49ba080001000006 08060601108c0002 0007028210000280 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a803000490002898 0300048800289003 02b8c6048400288c 0314040028880300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c030008002a9403 0004002a90030480 08002a8803000800 28b8030204900028 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060a016cee000200 070002002ab40300 08002aac0301a808 002aa4030008002a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010480040880c2d5 d808000100000808 060601288600317a 797301ffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff508048003 0004000408000004 01c7100008084ab8 007475706e69752f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f01ffffff ffffffffffe70800 0302b81000288004 1208000288080001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000008060a016c ee00020007000200 2ab4030008002aac 0301a808002aa403 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000178de7e RBX=0000000000000000 RCX=00007f1b8e18e929 RDX=0000000000000064 RSI=0000000000000000 RDI=0000000000000000 RBP=00007ffc4a4949ac RSP=00007ffc4a494950 R8 =000000134a494a3f R9 =00000000000927c0 R10=0000000000000001 R11=0000000000000246 R12=0000000000000013 R13=00000000000927c0 R14=0000000000031ee5 R15=00007ffc4a494a00 RIP=00007f1b8e04ea5b RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555599b6500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc98c994f98 CR3=000000004ba08000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0064656e72757465 725f657269757163 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000c80080010 8016001400000002 0015000600000000 0500000000000002 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8eeed100 00007f1b8e384440 00007f1b8e380004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b8e384498 00007f1b8e384490 00007f1b8e384488 00007f1b8e384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73cec0 RCX=ffffffff81b01743 RDX=ffff88801deb4880 RSI=ffffffff81b0171d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9eee R12=1ffff9200002af80 R13=0000000000000001 R14=0000000000000001 R15=ffffed100d4e79d9 RIP=ffffffff81b0171f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055660d861da8 CR3=000000003a1e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000003fff Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000006 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000bb4ffffffff ffffffff00060014 fa02a22b4ae73e8e 00000000000080fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000bd000000bd0 ffffffffffffffff 000600141f403784 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 703db53e00000000 000080fe00010014 00000006fd80400a 8237963668520892 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000bb400000bb4 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014fa02a22b 4ae73e8e00000000 000080fe00010014 00000005fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203120383120640a 640061640a645f61 615f642020672067 6420612034200020 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000