last executing test programs: 15m29.490383437s ago: executing program 32 (id=1368): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) listen(r4, 0x80000001) syz_genetlink_get_family_id$tipc(0x0, r4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 12m26.799856613s ago: executing program 4 (id=2478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xa}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x0, 0x200100) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(0x0, 0x0, &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) symlink(&(0x7f00000049c0)='.\x00', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 12m24.694811961s ago: executing program 4 (id=2482): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0xa200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x2000, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {0x0, 0x6fffffff}, {}, {0x0, 0xfffffffe}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x300, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12m10.598421914s ago: executing program 33 (id=2481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x28180, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x40000) openat$hpet(0xffffff9c, &(0x7f0000000200), 0x16d2967af867ee16, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) syz_emit_ethernet(0xf8, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800491f00ea006700000421907864010102ac1414bb890fea096e0bb4086af3367b6e3a5b441c760364010100000000000000000000000007640101000000555f940401008913f9e0000001e0000001ac1414307f00000194040000940400008913e900000000ac1e0101ac1414aae000000144240b6040000003000000000000000300000004000100010000800100000f8000000008890fe35b03d60293a0735528880efe4e224e230411907812d16e7200f67820d599656f866942048338c39f1e5e3205141f6f2774bd03ff9e2aebb78298c7316ba66e667bb2645737987123b59923e157b32b81d35190978ca0a9c3f0a3609aae4018da42cf9adffe095161ffd3c51fdf1258e5788087f5383ffd453eadc2ec6034ad450b8ab8fbcf6671df0e21092761dacf35c596d6e63ebb612349b1abf87fa6f094a509635eb2b19e408610ed5434f33826129d587740dea6ead77f73071b7d99de4f186ba09599d07203782a4961a0148345f04f8494fba6968b0b14c31cc40357302e1b911fa81547e7bfa0"], 0x0) getrlimit(0x6, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000010000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) 12m9.610432077s ago: executing program 34 (id=2482): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0xa200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x2000, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {0x0, 0x6fffffff}, {}, {0x0, 0xfffffffe}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x300, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m41.57389112s ago: executing program 6 (id=4172): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 7m41.515209149s ago: executing program 6 (id=4173): syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x9, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0xd, 0x0, [{0x0, 0x2}, {0x5, 0x5, "4eb8a6"}]}]}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000580)=0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m41.087139452s ago: executing program 6 (id=4176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write(r4, &(0x7f00000004c0)="2cd889f0253e14f3d5acff", 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) r6 = socket$inet(0x2, 0x40000000003, 0x800000800000001) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 7m41.039965137s ago: executing program 6 (id=4179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 7m41.037233699s ago: executing program 6 (id=4180): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', 0x0}) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f000000ba00)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 7m40.768793812s ago: executing program 6 (id=4182): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 7m40.728542084s ago: executing program 35 (id=4182): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 7m37.806764661s ago: executing program 3 (id=4211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000001032fffe800000000000000000"], 0x0) 7m37.726853428s ago: executing program 3 (id=4213): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000340), 0xffffffff, 0x2) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 7m36.826027932s ago: executing program 3 (id=4226): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d8000000190081054e81f782db4cb904022008e7ffffff00000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c03600461c1d67f6d94007134cf6efb868001a017a290457f0189b316277ce00000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca00008026f6e6ddba61f5fad95667e006c95565dc00bfeb789d00000000000000d5fae1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed00"/216, 0xd8}], 0x1}, 0x20000094) 7m36.824514519s ago: executing program 3 (id=4229): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 7m36.67718743s ago: executing program 3 (id=4230): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 7m36.406067015s ago: executing program 3 (id=4231): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56449, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) 7m36.398403177s ago: executing program 36 (id=4231): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56449, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) 1m57.73830201s ago: executing program 8 (id=7127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r4, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = fsopen(&(0x7f00000001c0)='xfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) fchown(r6, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1m56.678689295s ago: executing program 8 (id=7131): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0xfffffffffffffd8b) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0x3, @sliced={0xf, [0x6, 0x4, 0x26f, 0xa44, 0xab6, 0xfff, 0x7, 0x5, 0xd44, 0x0, 0x6, 0x5, 0xb, 0x3, 0x101, 0x0, 0x1, 0x57, 0x7, 0xfff6, 0x6, 0x2, 0x0, 0x200, 0x8, 0x1, 0x400, 0x40f, 0x1000, 0x1f9, 0xff04, 0x101, 0x3f3, 0x2, 0xfff, 0x3, 0x9, 0x6, 0x6, 0x2, 0xc, 0xc, 0x0, 0x363c, 0x9, 0x7, 0x2, 0x9], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x240243, 0x1a0) ftruncate(r2, 0x8800000) unshare(0x64000600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r2, 0x0, 0x578410eb) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) r7 = fsopen(&(0x7f00000000c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='io\xe3harset', &(0x7f0000000180)='iocharset', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) 1m53.843998087s ago: executing program 8 (id=7140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r0, 0xc0045878) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r4, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x8, 0xfffffffff30bda46, 0x0, 0xfffc, 0x6, 0x5d3186cd, 0x0, 0x0, 0x10, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r5}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 1m53.678747571s ago: executing program 8 (id=7143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x3f, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x4000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2814002, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x9d) write$P9_RREADLINK(r7, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000000000000080000000000000000"], 0x0, 0x1a}, 0x28) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) 1m52.822292708s ago: executing program 8 (id=7146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r4, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fsopen(&(0x7f00000001c0)='xfs\x00', 0x0) fchdir(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1m52.34577145s ago: executing program 8 (id=7148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 2) 1m52.336490014s ago: executing program 37 (id=7148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 2) 1m51.869614319s ago: executing program 7 (id=7152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r4, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = fsopen(&(0x7f00000001c0)='xfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) fchown(r7, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1m50.950192217s ago: executing program 7 (id=7156): mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cb}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m50.073963298s ago: executing program 7 (id=7160): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) pselect6(0x40, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x300, 0x0, 0x9}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1m49.211968206s ago: executing program 7 (id=7165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x3f, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x4000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2814002, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x9d) write$P9_RREADLINK(r7, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000000000000080000000000000000"], 0x0, 0x1a}, 0x28) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) 1m48.374160713s ago: executing program 7 (id=7172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$getenv(0x4201, r0, 0x9, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg$inet(r4, &(0x7f0000001540), 0x800000000000214, 0x20000001) recvmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/173, 0xad}], 0x2}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/4096, 0x1000}, 0x5}], 0x2, 0x40000000, &(0x7f0000000f80)={0x77359400}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000000)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) io_setup(0x20, &(0x7f0000001140)=0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000c40)='\r', 0x1}]) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r10, @ANYRES32=r8, @ANYBLOB="00daea00"/20, @ANYRES32=0x0, @ANYRES8=r8, @ANYBLOB="0000000000cabb58c2dd1a01de93000001000000000000e90e0000000000", @ANYRESDEC=r0, @ANYRES8=r2, @ANYRES32=r9], 0x48) 1m47.972846651s ago: executing program 7 (id=7175): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='fib6_table_lookup\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 1m47.845290991s ago: executing program 38 (id=7175): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='fib6_table_lookup\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 1m32.395858966s ago: executing program 0 (id=7287): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x45833af92e4b38ff, 0x0) (fail_nth: 2) 1m32.311720982s ago: executing program 0 (id=7288): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ddffff94"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1m30.973510341s ago: executing program 0 (id=7295): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x10}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x1000101) 1m30.925681394s ago: executing program 0 (id=7296): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 1m30.874266672s ago: executing program 0 (id=7297): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380600000314230c2abd7000ffdbdf250900020073797a310000000008004100727865001400330073797a5f74756e0000000000000000004d"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x102a000, 0x1000, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) 1m30.64559098s ago: executing program 0 (id=7299): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000000)={0xc}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003740)={0x2020}, 0x2020) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x1ec8, &(0x7f0000001480)={0x0, 0xb0d7, 0x2, 0x1, 0x337}, &(0x7f0000000500), &(0x7f0000ff4000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) rmdir(0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000015c0)=ANY=[], 0x38) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000001500)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x1, 0x20001, 0x8, 0x101, 0x3, 0x7, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xe084, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x4000036]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x200000001, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 1m30.623006425s ago: executing program 39 (id=7299): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000000)={0xc}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003740)={0x2020}, 0x2020) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x1ec8, &(0x7f0000001480)={0x0, 0xb0d7, 0x2, 0x1, 0x337}, &(0x7f0000000500), &(0x7f0000ff4000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) rmdir(0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000015c0)=ANY=[], 0x38) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000001500)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x1, 0x20001, 0x8, 0x101, 0x3, 0x7, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xe084, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x4000036]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x200000001, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 8.851111659s ago: executing program 2 (id=7916): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0800000008003950328209cd9ad7"], 0x15) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffff7fffffffb, 0x9, 0x6, 0x7, 0xbe}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) execveat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000003c0)='/dev/video#\x00', &(0x7f0000000440)='9P2000.u', &(0x7f0000000480)='/dev/audio\x00', &(0x7f00000004c0)='--\x00']}, &(0x7f0000000780)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/audio\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='#! ', &(0x7f0000000640)='@)\xee\x00', &(0x7f0000000680)='\xb8-\x00', &(0x7f00000006c0)='/dev/i2c-#\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='^)\x00']}, 0x400) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) r8 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x3, r8, 0x1, &(0x7f0000000000)) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffa, 0x40) ioctl$I2C_RETRIES(r9, 0x701, 0xffffffff80000001) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 8.824135205s ago: executing program 2 (id=7919): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xb0) 8.761661736s ago: executing program 2 (id=7921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x18, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, 0x0, 0x0, 0x0) 7.865912238s ago: executing program 2 (id=7929): syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r0, 0x5420, &(0x7f0000001d40)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.775223788s ago: executing program 2 (id=7932): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001840)="b564", 0x2}], 0x1}, 0x0) (fail_nth: 2) 7.437284876s ago: executing program 2 (id=7939): sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xfc, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xf}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfffffffd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xfc, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xf}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfffffffd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0xa, 0x1) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) io_submit(0x0, 0x0, &(0x7f00000001c0)) (async) io_submit(0x0, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 7.394686186s ago: executing program 40 (id=7939): sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xfc, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xf}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfffffffd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xfc, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xf}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfffffffd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0xa, 0x1) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) io_submit(0x0, 0x0, &(0x7f00000001c0)) (async) io_submit(0x0, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 4.057765833s ago: executing program 9 (id=7973): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x1b, 0x40, '\x00', 0x8915a99aa815eb8b, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$key(0xf, 0x3, 0x2) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000002440)=""/178, 0xb2, 0x0, 0x2, 0x2}}, 0x2c) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat\x00') 3.329983955s ago: executing program 4 (id=7940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r4, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3.057766818s ago: executing program 5 (id=7979): epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) syz_clone(0x80901200, &(0x7f0000000440)="5a4ce9e5cfa397b9bec21c3071f7b421d36462d556435ad375017260c4766800eafab6356fd3adf87ec8d0a3c4030e9189c5f1ab2da484f8fb3b0bac21677b11a8230c2cd9568be39a3dcd39aae06b3341023cc55948679b60ac9a11646eb73fe168faa4a3c324a30780db603a87af67d8ec032742531c4125981ddf0962c27e7ec3d0e4606739b6f855085ccb18fddd31cee2b24daf34630302375cf21b3ad89568715fcda668faf6e984439101ab920e43b0b4c53a0066fbc8d87f71967bf4a16897f2129fa1228384ad75f0c2461e2d0310", 0xd3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)="204d1a6133337ce0153bea77d94f28a76c31cb5cdba5ffacdc9c991a0145d6f61b9a8dc5eaab1eaa81ef2ad8") write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b07, &(0x7f00000003c0)={0x0, 0x7c62, 0x800, 0x2, 0x2d1, 0x0, r0}, &(0x7f00000001c0)=0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.4538231s ago: executing program 9 (id=7980): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x104, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="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", 0x0, 0x10, 0x16, 0x1, 0x0}) 2.430163857s ago: executing program 4 (id=7981): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x5, "3ab0460a63"}, &(0x7f0000000040)=0xd) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) (rerun: 32) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) write(r4, &(0x7f0000000300)="1c0000005e001f3814584707f9f4ffffff000000010000001ff80000", 0x1c) 2.404620791s ago: executing program 9 (id=7983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0xa, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x2, 0x2b}}, &(0x7f0000000200)={0x2e, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4804) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 2.365391527s ago: executing program 9 (id=7984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x100, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.284745081s ago: executing program 4 (id=7985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 2) 2.252302555s ago: executing program 1 (id=7986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.247921526s ago: executing program 5 (id=7987): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0xb0) 2.245948235s ago: executing program 5 (id=7988): mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cb}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.20013339s ago: executing program 9 (id=7989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xffffffffffffff74}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'veth0_to_batadv\x00', {0x2000001}, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r6, 0x1) splice(r6, 0x0, r5, 0x0, 0x2, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) 1.867436106s ago: executing program 4 (id=7990): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40088c0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001a00)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/23, 0xffffffffffffffb9}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f00000007c0)=""/109, 0x67}], 0x3, &(0x7f0000000540)=""/65, 0x41}, 0x7fffffff}, {{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x8}, 0x6}, {{&(0x7f0000000b80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000d40)=""/205, 0xcd}, {&(0x7f0000000e40)=""/173, 0xad}, {&(0x7f0000000f00)=""/6, 0x6}, {&(0x7f0000000fc0)=""/137, 0x89}, {&(0x7f0000001100)=""/78, 0x4e}, {&(0x7f0000001180)=""/179, 0xb3}], 0x8, &(0x7f0000001240)=""/111, 0x6f}}, {{&(0x7f00000012c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/178, 0xb2}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000001400)=""/116, 0x74}, {&(0x7f0000001480)}], 0x4, &(0x7f0000001500)=""/52, 0x34}, 0x4}], 0x5, 0x100, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xd) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000018c0)) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0xb430, @mcast2, 0x1}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYBLOB="cf0300000000000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.86043498s ago: executing program 5 (id=7991): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x8, 0xffffffff, 0xc0001c8}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0xf4, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1.355394287s ago: executing program 1 (id=7992): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x104, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="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", 0x0, 0x10, 0x16, 0x1, 0x0}) 1.304137532s ago: executing program 1 (id=7993): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000000)={0xc}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x80001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003740)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x1ec8, &(0x7f0000001480)={0x0, 0xb0d7, 0x2, 0x1, 0x337}, &(0x7f0000000500), &(0x7f0000ff4000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) rmdir(0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000015c0)=ANY=[], 0x38) timer_gettime(r2, &(0x7f0000000340)) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000001500)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x1, 0x20001, 0x8, 0x101, 0x3, 0x7, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xe084, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x4000036]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x200000001, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 1.300886857s ago: executing program 1 (id=7994): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x18, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) 837.390578ms ago: executing program 5 (id=7995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x23011, r1, 0x6a855000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3aa}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xe}}}}], 0x20}}], 0x2, 0x1000) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 822.018547ms ago: executing program 9 (id=7996): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x7f) munlockall() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x200040) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8}) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x180, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x164, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000040)={0x1d, r9}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) 443.73287ms ago: executing program 1 (id=7997): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="65786563203a007e142d901405008f51686a1b04e58da1c2aa2dc7674423031ceeaadd809e2faea17a2cde2d8f4b4e86679be4feae2f90d85e4f868184ab71eb8b3b46e9eec8d1b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa2838864c0e5cf4614347d02b9b1857f8ce6278c893827656ade3b2b0a31d415f951ac77cf53ed800c6b74eddb"], 0xb0) 391.047189ms ago: executing program 1 (id=7998): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 0s ago: executing program 5 (id=7999): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) dup(0xffffffffffffffff) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x11, 0x800000003, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r5, 0x3516, 0x701f, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.680569][ T817] [ 1221.740606][ T5988] Bluetooth: hci3: command 0x0c1a tx timeout [ 1222.506326][ T836] program syz.5.7689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.674511][ T861] FAULT_INJECTION: forcing a failure. [ 1222.674511][ T861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1222.679972][ T861] CPU: 0 UID: 0 PID: 861 Comm: syz.1.7696 Not tainted syzkaller #0 PREEMPT(full) [ 1222.679996][ T861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1222.680007][ T861] Call Trace: [ 1222.680013][ T861] [ 1222.680019][ T861] dump_stack_lvl+0x16c/0x1f0 [ 1222.680046][ T861] should_fail_ex+0x512/0x640 [ 1222.680072][ T861] should_fail_alloc_page+0xe7/0x130 [ 1222.680096][ T861] prepare_alloc_pages+0x3c2/0x610 [ 1222.680121][ T861] ? sk_skb_reason_drop+0x136/0x1a0 [ 1222.680143][ T861] ? sctp_make_reassembled_event+0x848/0xb60 [ 1222.680172][ T861] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1222.680193][ T861] ? sctp_sendmsg_to_asoc+0x182b/0x1bf0 [ 1222.680214][ T861] ? inet_sendmsg+0x11c/0x140 [ 1222.680236][ T861] ? __sys_sendto+0x43c/0x520 [ 1222.680254][ T861] ? __ia32_sys_sendto+0xdd/0x1b0 [ 1222.680274][ T861] ? __do_fast_syscall_32+0x7c/0x3a0 [ 1222.680296][ T861] ? do_fast_syscall_32+0x32/0x80 [ 1222.680318][ T861] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1222.680344][ T861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1222.680385][ T861] ? ip6_dst_check+0x343/0x950 [ 1222.680401][ T861] ? rcu_is_watching+0x12/0xc0 [ 1222.680419][ T861] ? lock_release+0x201/0x2f0 [ 1222.680443][ T861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1222.680470][ T861] ? policy_nodemask+0xea/0x4e0 [ 1222.680492][ T861] alloc_pages_mpol+0x1fb/0x550 [ 1222.680515][ T861] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1222.680538][ T861] ? rcu_is_watching+0x12/0xc0 [ 1222.680557][ T861] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1222.680583][ T861] vma_alloc_folio_noprof+0xed/0x1e0 [ 1222.680608][ T861] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1222.680632][ T861] ? rcu_read_unlock+0x2d/0xb0 [ 1222.680651][ T861] ? lock_release+0x201/0x2f0 [ 1222.680675][ T861] do_wp_page+0x1136/0x4f00 [ 1222.680701][ T861] ? lock_acquire+0x2cd/0x350 [ 1222.680722][ T861] ? __pfx_do_wp_page+0x10/0x10 [ 1222.680747][ T861] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1222.680769][ T861] ? ___pte_offset_map+0x2ad/0x4f0 [ 1222.680789][ T861] __handle_mm_fault+0x1b2d/0x2a50 [ 1222.680805][ T861] ? mt_find+0x3ef/0xa30 [ 1222.680825][ T861] ? __pfx___handle_mm_fault+0x10/0x10 [ 1222.680841][ T861] ? __pfx_mt_find+0x10/0x10 [ 1222.680862][ T861] ? __update_page_owner_handle+0x395/0x550 [ 1222.680881][ T861] ? rcu_is_watching+0x12/0xc0 [ 1222.680901][ T861] ? find_vma+0xbf/0x140 [ 1222.680919][ T861] ? __pfx_find_vma+0x10/0x10 [ 1222.680938][ T861] handle_mm_fault+0x589/0xd10 [ 1222.680953][ T861] ? __bpf_trace_exceptions+0x1/0x40 [ 1222.680978][ T861] do_user_addr_fault+0x7a6/0x1370 [ 1222.681004][ T861] ? rcu_is_watching+0x12/0xc0 [ 1222.681022][ T861] exc_page_fault+0x5c/0xb0 [ 1222.681040][ T861] asm_exc_page_fault+0x26/0x30 [ 1222.681054][ T861] RIP: 0010:_copy_to_iter+0x37e/0x16f0 [ 1222.681069][ T861] Code: fc 4d 85 f6 0f 85 52 ff ff ff e8 0d e2 db fc 4c 8b 74 24 18 89 de 4c 89 f7 e8 7e 47 41 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 1222.681083][ T861] RSP: 0018:ffffc900035f7838 EFLAGS: 00050246 [ 1222.681097][ T861] RAX: 0000000000000001 RBX: 000000000000fef4 RCX: 000000000000f3f4 [ 1222.681108][ T861] RDX: ffffed100c97dffe RSI: ffff888064be0bf8 RDI: 0000000080001000 [ 1222.681119][ T861] RBP: 0000000080000500 R08: 0000000000000000 R09: ffffed100c97dffd [ 1222.681130][ T861] R10: ffff888064beffeb R11: 0000000000000000 R12: ffffc900035f7c40 [ 1222.681141][ T861] R13: 00000000800103f4 R14: ffff888064be00f8 R15: 00007ffffffff000 [ 1222.681158][ T861] ? _copy_to_iter+0x372/0x16f0 [ 1222.681172][ T861] ? unwind_next_frame+0x3f4/0x20a0 [ 1222.681188][ T861] ? __pfx__copy_to_iter+0x10/0x10 [ 1222.681203][ T861] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1222.681222][ T861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1222.681250][ T861] simple_copy_to_iter+0x46/0x90 [ 1222.681268][ T861] __skb_datagram_iter+0x129/0x900 [ 1222.681285][ T861] ? __pfx_sctp_skb_recv_datagram+0x10/0x10 [ 1222.681308][ T861] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1222.681324][ T861] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1222.681346][ T861] ? __pfx___might_resched+0x10/0x10 [ 1222.681364][ T861] skb_copy_datagram_iter+0x40/0x50 [ 1222.681379][ T861] sctp_recvmsg+0x258/0xe30 [ 1222.681400][ T861] ? __pfx_sctp_recvmsg+0x10/0x10 [ 1222.681421][ T861] ? lock_release+0x201/0x2f0 [ 1222.681441][ T861] ? __pfx_sctp_recvmsg+0x10/0x10 [ 1222.681461][ T861] inet_recvmsg+0x46f/0x6a0 [ 1222.681476][ T861] ? __pfx_inet_recvmsg+0x10/0x10 [ 1222.681491][ T861] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1222.681510][ T861] sock_recvmsg+0x1b2/0x250 [ 1222.681533][ T861] sock_read_iter+0x2b9/0x3b0 [ 1222.681557][ T861] ? __pfx_sock_read_iter+0x10/0x10 [ 1222.681578][ T861] ? lock_release+0x201/0x2f0 [ 1222.681601][ T861] ? bpf_lsm_file_permission+0x9/0x10 [ 1222.681623][ T861] ? security_file_permission+0x71/0x210 [ 1222.681644][ T861] ? rw_verify_area+0xcf/0x6c0 [ 1222.681662][ T861] vfs_read+0xa95/0xcf0 [ 1222.681682][ T861] ? __pfx_vfs_read+0x10/0x10 [ 1222.681702][ T861] ? lock_release+0x201/0x2f0 [ 1222.681729][ T861] ksys_read+0x1f8/0x250 [ 1222.681748][ T861] ? __pfx_ksys_read+0x10/0x10 [ 1222.681767][ T861] ? rcu_is_watching+0x12/0xc0 [ 1222.681786][ T861] __do_fast_syscall_32+0x7c/0x3a0 [ 1222.681807][ T861] do_fast_syscall_32+0x32/0x80 [ 1222.681828][ T861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1222.681846][ T861] RIP: 0023:0xf7fb5579 [ 1222.681858][ T861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1222.681873][ T861] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1222.681887][ T861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 1222.681898][ T861] RDX: 000000000001feb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1222.681908][ T861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1222.681918][ T861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1222.681928][ T861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1222.681942][ T861] [ 1223.655421][ T874] batadv_slave_1: entered promiscuous mode [ 1223.658045][ T874] batadv_slave_1: left promiscuous mode [ 1223.795965][ T892] FAULT_INJECTION: forcing a failure. [ 1223.795965][ T892] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.800027][ T892] CPU: 0 UID: 0 PID: 892 Comm: syz.1.7708 Not tainted syzkaller #0 PREEMPT(full) [ 1223.800043][ T892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1223.800049][ T892] Call Trace: [ 1223.800053][ T892] [ 1223.800057][ T892] dump_stack_lvl+0x16c/0x1f0 [ 1223.800075][ T892] should_fail_ex+0x512/0x640 [ 1223.800092][ T892] should_failslab+0xc2/0x120 [ 1223.800107][ T892] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1223.800118][ T892] ? do_raw_write_lock+0x11c/0x3a0 [ 1223.800135][ T892] ? j1939_ecu_create_locked+0xc1/0x3a0 [ 1223.800147][ T892] j1939_ecu_create_locked+0xc1/0x3a0 [ 1223.800159][ T892] j1939_local_ecu_get+0x1a7/0x1f0 [ 1223.800171][ T892] j1939_sk_bind+0x8e2/0xdf0 [ 1223.800184][ T892] __sys_bind+0x1a4/0x260 [ 1223.800196][ T892] ? __pfx___sys_bind+0x10/0x10 [ 1223.800206][ T892] ? __fget_files+0x20e/0x3c0 [ 1223.800219][ T892] ? __pfx_ksys_write+0x10/0x10 [ 1223.800233][ T892] __ia32_sys_bind+0x71/0xb0 [ 1223.800243][ T892] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1223.800257][ T892] __do_fast_syscall_32+0x7c/0x3a0 [ 1223.800272][ T892] do_fast_syscall_32+0x32/0x80 [ 1223.800285][ T892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1223.800299][ T892] RIP: 0023:0xf7fb5579 [ 1223.800307][ T892] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1223.800321][ T892] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 1223.800333][ T892] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1223.800339][ T892] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 1223.800345][ T892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1223.800351][ T892] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1223.800357][ T892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1223.800366][ T892] [ 1223.872567][ T897] FAULT_INJECTION: forcing a failure. [ 1223.872567][ T897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.877103][ T897] CPU: 2 UID: 0 PID: 897 Comm: syz.1.7709 Not tainted syzkaller #0 PREEMPT(full) [ 1223.877119][ T897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1223.877126][ T897] Call Trace: [ 1223.877129][ T897] [ 1223.877133][ T897] dump_stack_lvl+0x16c/0x1f0 [ 1223.877151][ T897] should_fail_ex+0x512/0x640 [ 1223.877167][ T897] _copy_to_user+0x32/0xd0 [ 1223.877177][ T897] simple_read_from_buffer+0xcb/0x170 [ 1223.877189][ T897] proc_fail_nth_read+0x197/0x240 [ 1223.877200][ T897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1223.877210][ T897] ? security_file_permission+0x71/0x210 [ 1223.877226][ T897] ? rw_verify_area+0xcf/0x6c0 [ 1223.877236][ T897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1223.877247][ T897] vfs_read+0x1e4/0xcf0 [ 1223.877259][ T897] ? __pfx_vfs_read+0x10/0x10 [ 1223.877270][ T897] ? rcu_is_watching+0x12/0xc0 [ 1223.877287][ T897] ? __fget_files+0x20e/0x3c0 [ 1223.877301][ T897] ksys_read+0x12a/0x250 [ 1223.877312][ T897] ? __pfx_ksys_read+0x10/0x10 [ 1223.877324][ T897] ? rcu_is_watching+0x12/0xc0 [ 1223.877335][ T897] __do_fast_syscall_32+0x7c/0x3a0 [ 1223.877349][ T897] do_fast_syscall_32+0x32/0x80 [ 1223.877363][ T897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1223.877376][ T897] RIP: 0023:0xf7fb5579 [ 1223.877384][ T897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1223.877395][ T897] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1223.877405][ T897] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54d6620 [ 1223.877411][ T897] RDX: 000000000000000f RSI: 00000000f7444ff4 RDI: 0000000000000000 [ 1223.877418][ T897] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1223.877423][ T897] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1223.877429][ T897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1223.877439][ T897] [ 1224.167603][T30286] IPVS: starting estimator thread 0... [ 1224.169842][ T907] FAULT_INJECTION: forcing a failure. [ 1224.169842][ T907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.173838][ T907] CPU: 3 UID: 0 PID: 907 Comm: syz.9.7712 Not tainted syzkaller #0 PREEMPT(full) [ 1224.173853][ T907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1224.173871][ T907] Call Trace: [ 1224.173876][ T907] [ 1224.173880][ T907] dump_stack_lvl+0x16c/0x1f0 [ 1224.173902][ T907] should_fail_ex+0x512/0x640 [ 1224.173918][ T907] _copy_to_user+0x32/0xd0 [ 1224.173928][ T907] simple_read_from_buffer+0xcb/0x170 [ 1224.173940][ T907] proc_fail_nth_read+0x197/0x240 [ 1224.173955][ T907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.173966][ T907] ? security_file_permission+0x71/0x210 [ 1224.173981][ T907] ? rw_verify_area+0xcf/0x6c0 [ 1224.173991][ T907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1224.174004][ T907] vfs_read+0x1e4/0xcf0 [ 1224.174017][ T907] ? __pfx_vfs_read+0x10/0x10 [ 1224.174028][ T907] ? rcu_is_watching+0x12/0xc0 [ 1224.174040][ T907] ? __fget_files+0x20e/0x3c0 [ 1224.174053][ T907] ksys_read+0x12a/0x250 [ 1224.174065][ T907] ? __pfx_ksys_read+0x10/0x10 [ 1224.174076][ T907] ? rcu_is_watching+0x12/0xc0 [ 1224.174087][ T907] __do_fast_syscall_32+0x7c/0x3a0 [ 1224.174102][ T907] do_fast_syscall_32+0x32/0x80 [ 1224.174115][ T907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.174129][ T907] RIP: 0023:0xf7f77579 [ 1224.174137][ T907] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1224.174147][ T907] RSP: 002b:00000000f5496590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1224.174158][ T907] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5496620 [ 1224.174164][ T907] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 1224.174171][ T907] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1224.174176][ T907] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1224.174182][ T907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.174191][ T907] [ 1224.293335][ T909] IPVS: using max 54 ests per chain, 129600 per kthread [ 1224.522445][T24691] IPVS: stop unused estimator thread 0... [ 1224.660715][ T922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7716'. [ 1224.666348][ T922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7716'. [ 1224.963251][ T924] gre0: MTU too low for tipc bearer [ 1224.965062][ T924] tipc: Enabling of bearer rejected, failed to enable media [ 1225.074003][ T926] FAULT_INJECTION: forcing a failure. [ 1225.074003][ T926] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.078186][ T926] CPU: 2 UID: 0 PID: 926 Comm: syz.5.7718 Not tainted syzkaller #0 PREEMPT(full) [ 1225.078207][ T926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1225.078218][ T926] Call Trace: [ 1225.078225][ T926] [ 1225.078231][ T926] dump_stack_lvl+0x16c/0x1f0 [ 1225.078255][ T926] should_fail_ex+0x512/0x640 [ 1225.078278][ T926] should_failslab+0xc2/0x120 [ 1225.078299][ T926] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1225.078319][ T926] ? __alloc_skb+0x2b2/0x380 [ 1225.078339][ T926] __alloc_skb+0x2b2/0x380 [ 1225.078357][ T926] ? __pfx___alloc_skb+0x10/0x10 [ 1225.078376][ T926] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1225.078399][ T926] netlink_alloc_large_skb+0x69/0x130 [ 1225.078421][ T926] netlink_sendmsg+0x6a1/0xdd0 [ 1225.078443][ T926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.078469][ T926] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1225.078487][ T926] ____sys_sendmsg+0xa95/0xc70 [ 1225.078512][ T926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.078535][ T926] ? get_compat_msghdr+0x11a/0x170 [ 1225.078556][ T926] ? kstrtouint_from_user+0x13c/0x1d0 [ 1225.078576][ T926] ___sys_sendmsg+0x134/0x1d0 [ 1225.078595][ T926] ? get_pid_task+0xfc/0x250 [ 1225.078618][ T926] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.078641][ T926] ? rcu_is_watching+0x12/0xc0 [ 1225.078657][ T926] __sys_sendmsg+0x16d/0x220 [ 1225.078670][ T926] ? __pfx___sys_sendmsg+0x10/0x10 [ 1225.078685][ T926] ? rcu_is_watching+0x12/0xc0 [ 1225.078696][ T926] __do_fast_syscall_32+0x7c/0x3a0 [ 1225.078711][ T926] do_fast_syscall_32+0x32/0x80 [ 1225.078724][ T926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1225.078737][ T926] RIP: 0023:0xf7ff8579 [ 1225.078745][ T926] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1225.078756][ T926] RSP: 002b:00000000f551655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1225.078767][ T926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1225.078774][ T926] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1225.078780][ T926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1225.078786][ T926] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1225.078792][ T926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1225.078801][ T926] [ 1225.337568][ T941] FAULT_INJECTION: forcing a failure. [ 1225.337568][ T941] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.341871][ T941] CPU: 3 UID: 0 PID: 941 Comm: syz.9.7721 Not tainted syzkaller #0 PREEMPT(full) [ 1225.341887][ T941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1225.341893][ T941] Call Trace: [ 1225.341897][ T941] [ 1225.341901][ T941] dump_stack_lvl+0x16c/0x1f0 [ 1225.341917][ T941] should_fail_ex+0x512/0x640 [ 1225.341934][ T941] ? tomoyo_encode2+0x100/0x3e0 [ 1225.341949][ T941] should_failslab+0xc2/0x120 [ 1225.341962][ T941] __kmalloc_noprof+0xd2/0x510 [ 1225.341976][ T941] tomoyo_encode2+0x100/0x3e0 [ 1225.341990][ T941] tomoyo_encode+0x29/0x50 [ 1225.342004][ T941] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1225.342019][ T941] ? tomoyo_profile+0x47/0x60 [ 1225.342032][ T941] tomoyo_path_number_perm+0x245/0x580 [ 1225.342044][ T941] ? tomoyo_path_number_perm+0x237/0x580 [ 1225.342057][ T941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1225.342072][ T941] ? preempt_count_add+0x76/0x150 [ 1225.342090][ T941] ? rcu_is_watching+0x12/0xc0 [ 1225.342101][ T941] ? __fget_files+0x204/0x3c0 [ 1225.342112][ T941] ? hook_file_ioctl_common+0x145/0x410 [ 1225.342126][ T941] ? lock_release+0x201/0x2f0 [ 1225.342140][ T941] ? __fget_files+0x20e/0x3c0 [ 1225.342151][ T941] security_file_ioctl_compat+0x9b/0x240 [ 1225.342165][ T941] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1225.342183][ T941] __do_fast_syscall_32+0x7c/0x3a0 [ 1225.342197][ T941] do_fast_syscall_32+0x32/0x80 [ 1225.342211][ T941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1225.342243][ T941] RIP: 0023:0xf7f77579 [ 1225.342256][ T941] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1225.342266][ T941] RSP: 002b:00000000f547555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1225.342277][ T941] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000400448c8 [ 1225.342284][ T941] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1225.342290][ T941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1225.342296][ T941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1225.342303][ T941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1225.342312][ T941] [ 1225.342356][ T941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1225.443205][ T40] kauditd_printk_skb: 874 callbacks suppressed [ 1225.443217][ T40] audit: type=1326 audit(1755651773.511:46224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.452189][ T40] audit: type=1326 audit(1755651773.511:46225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.459470][ T40] audit: type=1326 audit(1755651773.511:46226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.467851][ T40] audit: type=1326 audit(1755651773.511:46227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.482009][ T40] audit: type=1326 audit(1755651773.511:46228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.490293][ T40] audit: type=1326 audit(1755651773.511:46229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.497267][ T40] audit: type=1326 audit(1755651773.511:46230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.520400][ T40] audit: type=1326 audit(1755651773.511:46231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.529131][ T40] audit: type=1326 audit(1755651773.511:46232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1225.537887][ T40] audit: type=1326 audit(1755651773.511:46233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=952 comm="syz.5.7724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1226.208949][ T976] FAULT_INJECTION: forcing a failure. [ 1226.208949][ T976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.214773][ T976] CPU: 3 UID: 0 PID: 976 Comm: syz.2.7730 Not tainted syzkaller #0 PREEMPT(full) [ 1226.214798][ T976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1226.214810][ T976] Call Trace: [ 1226.214816][ T976] [ 1226.214823][ T976] dump_stack_lvl+0x16c/0x1f0 [ 1226.214849][ T976] should_fail_ex+0x512/0x640 [ 1226.214876][ T976] _copy_from_user+0x2e/0xd0 [ 1226.214903][ T976] move_addr_to_kernel+0x65/0x170 [ 1226.214922][ T976] __get_compat_msghdr+0x3f1/0x4d0 [ 1226.214943][ T976] get_compat_msghdr+0xd2/0x170 [ 1226.214962][ T976] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1226.214983][ T976] ? kstrtouint_from_user+0x13c/0x1d0 [ 1226.215029][ T976] ___sys_sendmsg+0x1ae/0x1d0 [ 1226.215051][ T976] ? get_pid_task+0xfc/0x250 [ 1226.215075][ T976] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.215101][ T976] ? rcu_is_watching+0x12/0xc0 [ 1226.215127][ T976] __sys_sendmsg+0x16d/0x220 [ 1226.215148][ T976] ? __pfx___sys_sendmsg+0x10/0x10 [ 1226.215175][ T976] ? rcu_is_watching+0x12/0xc0 [ 1226.215193][ T976] __do_fast_syscall_32+0x7c/0x3a0 [ 1226.215217][ T976] do_fast_syscall_32+0x32/0x80 [ 1226.215240][ T976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.215261][ T976] RIP: 0023:0xf70de579 [ 1226.215289][ T976] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1226.215306][ T976] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1226.215324][ T976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1226.215335][ T976] RDX: 00000000000040c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.215345][ T976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.215355][ T976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1226.215365][ T976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.215381][ T976] [ 1226.294184][ T982] FAULT_INJECTION: forcing a failure. [ 1226.294184][ T982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.298200][ T982] CPU: 2 UID: 0 PID: 982 Comm: syz.5.7731 Not tainted syzkaller #0 PREEMPT(full) [ 1226.298216][ T982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1226.298222][ T982] Call Trace: [ 1226.298230][ T982] [ 1226.298235][ T982] dump_stack_lvl+0x16c/0x1f0 [ 1226.298253][ T982] should_fail_ex+0x512/0x640 [ 1226.298269][ T982] _copy_to_user+0x32/0xd0 [ 1226.298280][ T982] simple_read_from_buffer+0xcb/0x170 [ 1226.298291][ T982] proc_fail_nth_read+0x197/0x240 [ 1226.298302][ T982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.298313][ T982] ? security_file_permission+0x71/0x210 [ 1226.298328][ T982] ? rw_verify_area+0xcf/0x6c0 [ 1226.298338][ T982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.298349][ T982] vfs_read+0x1e4/0xcf0 [ 1226.298361][ T982] ? __pfx_vfs_read+0x10/0x10 [ 1226.298372][ T982] ? rcu_is_watching+0x12/0xc0 [ 1226.298385][ T982] ? __fget_files+0x20e/0x3c0 [ 1226.298398][ T982] ksys_read+0x12a/0x250 [ 1226.298409][ T982] ? __pfx_ksys_read+0x10/0x10 [ 1226.298420][ T982] ? rcu_is_watching+0x12/0xc0 [ 1226.298431][ T982] __do_fast_syscall_32+0x7c/0x3a0 [ 1226.298446][ T982] do_fast_syscall_32+0x32/0x80 [ 1226.298459][ T982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.298473][ T982] RIP: 0023:0xf7ff8579 [ 1226.298481][ T982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1226.298491][ T982] RSP: 002b:00000000f5516590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1226.298501][ T982] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5516620 [ 1226.298508][ T982] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 1226.298514][ T982] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1226.298520][ T982] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1226.298526][ T982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.298535][ T982] [ 1226.483646][ T1003] dummy0: entered promiscuous mode [ 1226.485852][ T1003] dummy0: entered allmulticast mode [ 1227.089664][ T1016] tipc: Started in network mode [ 1227.091597][ T1016] tipc: Node identity , cluster identity 4711 [ 1227.094097][ T1016] tipc: Failed to obtain node identity [ 1227.096351][ T1016] tipc: Enabling of bearer rejected, failed to enable media [ 1227.235790][ T1020] netlink: zone id is out of range [ 1227.244421][ T1020] netlink: zone id is out of range [ 1227.247026][ T1020] netlink: zone id is out of range [ 1227.252754][ T1020] netlink: zone id is out of range [ 1227.254600][ T1020] netlink: zone id is out of range [ 1227.256968][ T1020] netlink: zone id is out of range [ 1227.259124][ T1020] netlink: zone id is out of range [ 1227.260801][ T1020] netlink: zone id is out of range [ 1227.262404][ T1020] netlink: zone id is out of range [ 1227.264046][ T1020] netlink: zone id is out of range [ 1227.500418][ T1036] FAULT_INJECTION: forcing a failure. [ 1227.500418][ T1036] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.504617][ T1036] CPU: 3 UID: 0 PID: 1036 Comm: syz.2.7748 Not tainted syzkaller #0 PREEMPT(full) [ 1227.504633][ T1036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1227.504640][ T1036] Call Trace: [ 1227.504644][ T1036] [ 1227.504648][ T1036] dump_stack_lvl+0x16c/0x1f0 [ 1227.504665][ T1036] should_fail_ex+0x512/0x640 [ 1227.504681][ T1036] should_failslab+0xc2/0x120 [ 1227.504696][ T1036] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1227.504709][ T1036] ? __alloc_skb+0x2b2/0x380 [ 1227.504723][ T1036] __alloc_skb+0x2b2/0x380 [ 1227.504735][ T1036] ? __pfx___alloc_skb+0x10/0x10 [ 1227.504747][ T1036] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1227.504763][ T1036] netlink_alloc_large_skb+0x69/0x130 [ 1227.504778][ T1036] netlink_sendmsg+0x6a1/0xdd0 [ 1227.504792][ T1036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.504806][ T1036] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1227.504819][ T1036] ____sys_sendmsg+0xa95/0xc70 [ 1227.504835][ T1036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.504851][ T1036] ? get_compat_msghdr+0x11a/0x170 [ 1227.504866][ T1036] ? kstrtouint_from_user+0x13c/0x1d0 [ 1227.504880][ T1036] ___sys_sendmsg+0x134/0x1d0 [ 1227.504892][ T1036] ? get_pid_task+0xfc/0x250 [ 1227.504907][ T1036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.504922][ T1036] ? rcu_is_watching+0x12/0xc0 [ 1227.504938][ T1036] __sys_sendmsg+0x16d/0x220 [ 1227.504950][ T1036] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.504966][ T1036] ? rcu_is_watching+0x12/0xc0 [ 1227.504977][ T1036] __do_fast_syscall_32+0x7c/0x3a0 [ 1227.504991][ T1036] do_fast_syscall_32+0x32/0x80 [ 1227.505016][ T1036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.505032][ T1036] RIP: 0023:0xf70de579 [ 1227.505041][ T1036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1227.505052][ T1036] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1227.505062][ T1036] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c40 [ 1227.505069][ T1036] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1227.505075][ T1036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1227.505081][ T1036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1227.505087][ T1036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.505096][ T1036] [ 1227.614028][ T1041] netlink: 'syz.2.7749': attribute type 10 has an invalid length. [ 1227.617979][ T1041] bridge0: port 3(team0) entered disabled state [ 1227.620241][ T1041] team0: left allmulticast mode [ 1227.622189][ T1041] team_slave_0: left allmulticast mode [ 1227.624564][ T1041] team_slave_1: left allmulticast mode [ 1227.626857][ T1041] team0: left promiscuous mode [ 1227.629803][ T1041] team_slave_0: left promiscuous mode [ 1227.632109][ T1041] team_slave_1: left promiscuous mode [ 1227.633412][ T1044] tmpfs: Bad value for 'mpol' [ 1227.634652][ T1041] bridge0: port 3(team0) entered disabled state [ 1227.645831][ T1041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.653873][ T1041] bond0: (slave team0): Enslaving as an active interface with an up link [ 1227.663444][ T1041] vlan2: entered promiscuous mode [ 1227.665276][ T1041] team0: entered promiscuous mode [ 1227.666976][ T1041] team_slave_0: entered promiscuous mode [ 1227.669124][ T1041] team_slave_1: entered promiscuous mode [ 1227.671161][ T1041] vlan2: entered allmulticast mode [ 1227.672893][ T1041] team0: entered allmulticast mode [ 1227.674639][ T1041] team_slave_0: entered allmulticast mode [ 1227.676592][ T1041] team_slave_1: entered allmulticast mode [ 1227.679672][ T1041] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1227.734802][ T1052] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7754'. [ 1227.737653][ T1052] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1227.740285][ T1052] 0ªX¹¦D: entered allmulticast mode [ 1227.742121][ T1052] veth0_macvtap: entered allmulticast mode [ 1227.772621][ T1052] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.7754' sets config #0 [ 1227.776468][ T1052] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.7754' sets config #1 [ 1228.161277][ T1069] 9pnet: Could not find request transport: virtbyoÇ‚U"J¹¦«Ñõio [ 1228.358782][ T1080] binder: 1079:1080 ioctl c018620c 80000000 returned -1 [ 1228.515336][ T1083] FAULT_INJECTION: forcing a failure. [ 1228.515336][ T1083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.520767][ T1083] CPU: 0 UID: 0 PID: 1083 Comm: syz.5.7763 Not tainted syzkaller #0 PREEMPT(full) [ 1228.520783][ T1083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1228.520790][ T1083] Call Trace: [ 1228.520795][ T1083] [ 1228.520799][ T1083] dump_stack_lvl+0x16c/0x1f0 [ 1228.520816][ T1083] should_fail_ex+0x512/0x640 [ 1228.520832][ T1083] _copy_from_iter+0x29f/0x16f0 [ 1228.520849][ T1083] ? __pfx__copy_from_iter+0x10/0x10 [ 1228.520865][ T1083] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1228.520879][ T1083] ? rcu_is_watching+0x12/0xc0 [ 1228.520890][ T1083] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1228.520907][ T1083] copy_page_from_iter+0xde/0x180 [ 1228.520924][ T1083] tun_build_skb.constprop.0+0x2e8/0x1500 [ 1228.520939][ T1083] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1228.520949][ T1083] ? unwind_get_return_address+0x59/0xa0 [ 1228.520962][ T1083] ? rcu_is_watching+0x12/0xc0 [ 1228.520975][ T1083] ? rcu_is_watching+0x12/0xc0 [ 1228.520986][ T1083] tun_get_user+0x14ae/0x3ce0 [ 1228.520998][ T1083] ? __pfx_tun_get_user+0x10/0x10 [ 1228.521008][ T1083] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1228.521025][ T1083] ? tun_get+0x191/0x370 [ 1228.521040][ T1083] ? rcu_is_watching+0x12/0xc0 [ 1228.521050][ T1083] ? lock_release+0x201/0x2f0 [ 1228.521065][ T1083] tun_chr_write_iter+0xdc/0x210 [ 1228.521076][ T1083] vfs_write+0x7d0/0x11d0 [ 1228.521088][ T1083] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1228.521099][ T1083] ? __pfx_vfs_write+0x10/0x10 [ 1228.521110][ T1083] ? lock_release+0x201/0x2f0 [ 1228.521126][ T1083] ksys_write+0x12a/0x250 [ 1228.521137][ T1083] ? __pfx_ksys_write+0x10/0x10 [ 1228.521149][ T1083] ? rcu_is_watching+0x12/0xc0 [ 1228.521160][ T1083] __do_fast_syscall_32+0x7c/0x3a0 [ 1228.521174][ T1083] do_fast_syscall_32+0x32/0x80 [ 1228.521188][ T1083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1228.521201][ T1083] RIP: 0023:0xf7ff8579 [ 1228.521209][ T1083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1228.521226][ T1083] RSP: 002b:00000000f5516520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1228.521237][ T1083] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 1228.521243][ T1083] RDX: 000000000000004a RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 1228.521250][ T1083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.521256][ T1083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1228.521262][ T1083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.521271][ T1083] [ 1228.618258][ T1093] FAULT_INJECTION: forcing a failure. [ 1228.618258][ T1093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.622349][ T1093] CPU: 2 UID: 0 PID: 1093 Comm: syz.1.7765 Not tainted syzkaller #0 PREEMPT(full) [ 1228.622366][ T1093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1228.622373][ T1093] Call Trace: [ 1228.622377][ T1093] [ 1228.622382][ T1093] dump_stack_lvl+0x16c/0x1f0 [ 1228.622398][ T1093] should_fail_ex+0x512/0x640 [ 1228.622415][ T1093] _copy_from_user+0x2e/0xd0 [ 1228.622431][ T1093] move_addr_to_kernel+0x65/0x170 [ 1228.622442][ T1093] __get_compat_msghdr+0x3f1/0x4d0 [ 1228.622455][ T1093] get_compat_msghdr+0xd2/0x170 [ 1228.622467][ T1093] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1228.622480][ T1093] ? __pfx__kstrtoull+0x10/0x10 [ 1228.622492][ T1093] ? rcu_is_watching+0x12/0xc0 [ 1228.622504][ T1093] ___sys_sendmsg+0x1ae/0x1d0 [ 1228.622518][ T1093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.622531][ T1093] ? __pfx_kstrtouint+0x10/0x10 [ 1228.622545][ T1093] ? rcu_is_watching+0x12/0xc0 [ 1228.622559][ T1093] __sys_sendmmsg+0x2f9/0x420 [ 1228.622573][ T1093] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1228.622585][ T1093] ? lock_release+0x201/0x2f0 [ 1228.622601][ T1093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1228.622617][ T1093] ? fput+0x9b/0xd0 [ 1228.622631][ T1093] ? ksys_write+0x1ac/0x250 [ 1228.622643][ T1093] ? __pfx_ksys_write+0x10/0x10 [ 1228.622655][ T1093] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1228.622668][ T1093] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1228.622682][ T1093] __do_fast_syscall_32+0x7c/0x3a0 [ 1228.622697][ T1093] do_fast_syscall_32+0x32/0x80 [ 1228.622710][ T1093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1228.622723][ T1093] RIP: 0023:0xf7fb5579 [ 1228.622731][ T1093] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1228.622741][ T1093] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1228.622752][ T1093] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000cc0 [ 1228.622759][ T1093] RDX: 0000000000000002 RSI: 0000000000048094 RDI: 0000000000000000 [ 1228.622765][ T1093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.622771][ T1093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1228.622777][ T1093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.622786][ T1093] [ 1228.787123][ T1107] FAULT_INJECTION: forcing a failure. [ 1228.787123][ T1107] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.791194][ T1107] CPU: 3 UID: 0 PID: 1107 Comm: syz.1.7769 Not tainted syzkaller #0 PREEMPT(full) [ 1228.791209][ T1107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1228.791216][ T1107] Call Trace: [ 1228.791220][ T1107] [ 1228.791225][ T1107] dump_stack_lvl+0x16c/0x1f0 [ 1228.791242][ T1107] should_fail_ex+0x512/0x640 [ 1228.791258][ T1107] should_failslab+0xc2/0x120 [ 1228.791272][ T1107] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1228.791285][ T1107] ? __alloc_skb+0x2b2/0x380 [ 1228.791299][ T1107] __alloc_skb+0x2b2/0x380 [ 1228.791310][ T1107] ? __pfx___alloc_skb+0x10/0x10 [ 1228.791322][ T1107] ? __pfx___might_resched+0x10/0x10 [ 1228.791334][ T1107] ? arch_stack_walk+0xa6/0x100 [ 1228.791346][ T1107] netlink_alloc_large_skb+0x69/0x130 [ 1228.791360][ T1107] netlink_sendmsg+0x6a1/0xdd0 [ 1228.791375][ T1107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.791389][ T1107] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1228.791401][ T1107] ____sys_sendmsg+0xa95/0xc70 [ 1228.791417][ T1107] ? btrfs_check_meta_write_pointer+0x244/0xcc0 [ 1228.791432][ T1107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.791447][ T1107] ? get_compat_msghdr+0x11a/0x170 [ 1228.791461][ T1107] ? kstrtouint_from_user+0x13c/0x1d0 [ 1228.791474][ T1107] ___sys_sendmsg+0x134/0x1d0 [ 1228.791487][ T1107] ? get_pid_task+0xfc/0x250 [ 1228.791501][ T1107] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.791516][ T1107] ? rcu_is_watching+0x12/0xc0 [ 1228.791531][ T1107] __sys_sendmsg+0x16d/0x220 [ 1228.791544][ T1107] ? __pfx___sys_sendmsg+0x10/0x10 [ 1228.791559][ T1107] ? rcu_is_watching+0x12/0xc0 [ 1228.791570][ T1107] __do_fast_syscall_32+0x7c/0x3a0 [ 1228.791585][ T1107] do_fast_syscall_32+0x32/0x80 [ 1228.791598][ T1107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1228.791612][ T1107] RIP: 0023:0xf7fb5579 [ 1228.791620][ T1107] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1228.791631][ T1107] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1228.791642][ T1107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1228.791648][ T1107] RDX: 0000000004044014 RSI: 0000000000000000 RDI: 0000000000000000 [ 1228.791654][ T1107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.791660][ T1107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1228.791666][ T1107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.791675][ T1107] [ 1228.903166][ T1117] tmpfs: Unknown parameter 'hash' [ 1228.920876][ T1121] FAULT_INJECTION: forcing a failure. [ 1228.920876][ T1121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.926317][ T1121] CPU: 3 UID: 0 PID: 1121 Comm: syz.1.7773 Not tainted syzkaller #0 PREEMPT(full) [ 1228.926332][ T1121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1228.926339][ T1121] Call Trace: [ 1228.926343][ T1121] [ 1228.926346][ T1121] dump_stack_lvl+0x16c/0x1f0 [ 1228.926363][ T1121] should_fail_ex+0x512/0x640 [ 1228.926379][ T1121] _copy_to_user+0x32/0xd0 [ 1228.926389][ T1121] sctp_getsockopt+0x668/0x69b0 [ 1228.926405][ T1121] ? kstrtouint+0xdd/0x130 [ 1228.926417][ T1121] ? __pfx_kstrtouint+0x10/0x10 [ 1228.926429][ T1121] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1228.926445][ T1121] ? kstrtouint_from_user+0x13c/0x1d0 [ 1228.926459][ T1121] ? __pfx___might_resched+0x10/0x10 [ 1228.926469][ T1121] ? rcu_is_watching+0x12/0xc0 [ 1228.926482][ T1121] ? lock_release+0x201/0x2f0 [ 1228.926497][ T1121] ? proc_fail_nth_write+0x9f/0x220 [ 1228.926509][ T1121] ? __pfx_aa_sk_perm+0x10/0x10 [ 1228.926522][ T1121] ? ksys_write+0x12a/0x250 [ 1228.926534][ T1121] ? rcu_is_watching+0x12/0xc0 [ 1228.926544][ T1121] ? lock_release+0x201/0x2f0 [ 1228.926558][ T1121] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1228.926569][ T1121] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1228.926585][ T1121] do_sock_getsockopt+0x34a/0x440 [ 1228.926601][ T1121] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1228.926616][ T1121] ? lock_release+0x201/0x2f0 [ 1228.926632][ T1121] __sys_getsockopt+0x123/0x1b0 [ 1228.926646][ T1121] __ia32_sys_getsockopt+0xbc/0x160 [ 1228.926659][ T1121] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1228.926673][ T1121] __do_fast_syscall_32+0x7c/0x3a0 [ 1228.926688][ T1121] do_fast_syscall_32+0x32/0x80 [ 1228.926701][ T1121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1228.926714][ T1121] RIP: 0023:0xf7fb5579 [ 1228.926723][ T1121] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1228.926734][ T1121] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 1228.926744][ T1121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1228.926751][ T1121] RDX: 0000000000000073 RSI: 0000000080000100 RDI: 0000000080000240 [ 1228.926757][ T1121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.926763][ T1121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1228.926769][ T1121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.926778][ T1121] [ 1229.097847][ T1132] syz.2.7774 (1132): drop_caches: 2 [ 1229.105925][ T1132] syz.2.7774 (1132): drop_caches: 2 [ 1229.133806][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1229.135854][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1229.196436][ T1145] FAULT_INJECTION: forcing a failure. [ 1229.196436][ T1145] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.200750][ T1145] CPU: 3 UID: 0 PID: 1145 Comm: syz.1.7777 Not tainted syzkaller #0 PREEMPT(full) [ 1229.200766][ T1145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1229.200784][ T1145] Call Trace: [ 1229.200788][ T1145] [ 1229.200792][ T1145] dump_stack_lvl+0x16c/0x1f0 [ 1229.200809][ T1145] should_fail_ex+0x512/0x640 [ 1229.200825][ T1145] ? alloc_pipe_info+0x1ec/0x590 [ 1229.200838][ T1145] should_failslab+0xc2/0x120 [ 1229.200852][ T1145] __kmalloc_noprof+0xd2/0x510 [ 1229.200864][ T1145] ? kasan_save_track+0x14/0x30 [ 1229.200877][ T1145] alloc_pipe_info+0x1ec/0x590 [ 1229.200890][ T1145] splice_direct_to_actor+0x77d/0xa30 [ 1229.200903][ T1145] ? kstrtouint_from_user+0x13c/0x1d0 [ 1229.200915][ T1145] ? __pfx_direct_splice_actor+0x10/0x10 [ 1229.200926][ T1145] ? __pfx_aa_file_perm+0x10/0x10 [ 1229.200942][ T1145] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1229.200953][ T1145] ? lock_release+0x201/0x2f0 [ 1229.200968][ T1145] do_splice_direct+0x174/0x240 [ 1229.200978][ T1145] ? __pfx_do_splice_direct+0x10/0x10 [ 1229.200989][ T1145] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1229.200999][ T1145] ? bpf_lsm_file_permission+0x9/0x10 [ 1229.201014][ T1145] ? security_file_permission+0x71/0x210 [ 1229.201029][ T1145] ? rw_verify_area+0xcf/0x6c0 [ 1229.201039][ T1145] do_sendfile+0xb06/0xe50 [ 1229.201051][ T1145] ? __pfx_do_sendfile+0x10/0x10 [ 1229.201061][ T1145] ? __might_fault+0xe3/0x190 [ 1229.201073][ T1145] ? rcu_is_watching+0x12/0xc0 [ 1229.201083][ T1145] ? __might_fault+0xe3/0x190 [ 1229.201096][ T1145] __ia32_compat_sys_sendfile+0x162/0x220 [ 1229.201122][ T1145] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1229.201138][ T1145] ? rcu_is_watching+0x12/0xc0 [ 1229.201148][ T1145] __do_fast_syscall_32+0x7c/0x3a0 [ 1229.201163][ T1145] do_fast_syscall_32+0x32/0x80 [ 1229.201176][ T1145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1229.201189][ T1145] RIP: 0023:0xf7fb5579 [ 1229.201198][ T1145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1229.201209][ T1145] RSP: 002b:00000000f549455c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1229.201219][ T1145] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000007 [ 1229.201228][ T1145] RDX: 0000000080002080 RSI: 000000000000021c RDI: 0000000000000000 [ 1229.201234][ T1145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1229.201239][ T1145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1229.201245][ T1145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1229.201255][ T1145] [ 1229.917303][ T1155] syz.2.7780 (1155): drop_caches: 2 [ 1229.919554][ T1155] syz.2.7780 (1155): drop_caches: 2 [ 1229.933807][ T1159] tmpfs: Unknown parameter 'hash' [ 1230.210852][ T40] kauditd_printk_skb: 942 callbacks suppressed [ 1230.210864][ T40] audit: type=1326 audit(1755651778.519:47176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.219484][ T40] audit: type=1326 audit(1755651778.519:47177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff85a7 code=0x7ffc0000 [ 1230.226105][ T40] audit: type=1326 audit(1755651778.519:47178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.232605][ T40] audit: type=1326 audit(1755651778.529:47179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.239017][ T40] audit: type=1326 audit(1755651778.529:47180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff85a7 code=0x7ffc0000 [ 1230.245468][ T40] audit: type=1326 audit(1755651778.529:47181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.252017][ T40] audit: type=1326 audit(1755651778.540:47182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.261038][ T40] audit: type=1326 audit(1755651778.540:47183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff85a7 code=0x7ffc0000 [ 1230.267609][ T40] audit: type=1326 audit(1755651778.540:47184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.274269][ T40] audit: type=1326 audit(1755651778.550:47185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.7779" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1230.646409][T23202] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1230.799198][T23202] usb 10-1: Using ep0 maxpacket: 16 [ 1230.801029][T15436] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1230.804844][T23202] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.808501][T23202] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.810587][T23202] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1230.813428][T23202] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.817028][T23202] usb 10-1: config 0 descriptor?? [ 1230.951131][T15436] usb 7-1: Using ep0 maxpacket: 16 [ 1230.954179][T15436] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.957409][T15436] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1230.959620][T15436] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1230.962733][T15436] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.966286][T15436] usb 7-1: config 0 descriptor?? [ 1230.992119][ T1186] tmpfs: Unknown parameter 'hash' [ 1231.020620][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.023515][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.079324][T23202] usbhid 10-1:0.0: can't add hid device: -71 [ 1231.081368][T23202] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1231.085076][T23202] usb 10-1: USB disconnect, device number 39 [ 1231.172379][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.175464][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.230453][T15436] usbhid 7-1:0.0: can't add hid device: -71 [ 1231.232460][T15436] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1231.235708][T15436] usb 7-1: USB disconnect, device number 74 [ 1231.740897][ T1197] vlan1: entered promiscuous mode [ 1231.742870][ T1197] vlan1: entered allmulticast mode [ 1231.744782][ T1197] veth0_vlan: entered allmulticast mode [ 1232.221911][ T1214] FAULT_INJECTION: forcing a failure. [ 1232.221911][ T1214] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.226066][ T1214] CPU: 3 UID: 0 PID: 1214 Comm: syz.2.7799 Not tainted syzkaller #0 PREEMPT(full) [ 1232.226082][ T1214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1232.226089][ T1214] Call Trace: [ 1232.226093][ T1214] [ 1232.226098][ T1214] dump_stack_lvl+0x16c/0x1f0 [ 1232.226115][ T1214] should_fail_ex+0x512/0x640 [ 1232.226131][ T1214] ? tomoyo_encode2+0x100/0x3e0 [ 1232.226145][ T1214] should_failslab+0xc2/0x120 [ 1232.226159][ T1214] __kmalloc_noprof+0xd2/0x510 [ 1232.226173][ T1214] tomoyo_encode2+0x100/0x3e0 [ 1232.226188][ T1214] tomoyo_encode+0x29/0x50 [ 1232.226201][ T1214] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1232.226217][ T1214] ? tomoyo_profile+0x47/0x60 [ 1232.226226][ T1214] tomoyo_path_number_perm+0x245/0x580 [ 1232.226242][ T1214] ? tomoyo_path_number_perm+0x237/0x580 [ 1232.226255][ T1214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1232.226270][ T1214] ? preempt_count_add+0x76/0x150 [ 1232.226287][ T1214] ? rcu_is_watching+0x12/0xc0 [ 1232.226300][ T1214] ? __fget_files+0x204/0x3c0 [ 1232.226311][ T1214] ? hook_file_ioctl_common+0x145/0x410 [ 1232.226325][ T1214] ? lock_release+0x201/0x2f0 [ 1232.226338][ T1214] ? __fget_files+0x20e/0x3c0 [ 1232.226350][ T1214] security_file_ioctl_compat+0x9b/0x240 [ 1232.226364][ T1214] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1232.226381][ T1214] __do_fast_syscall_32+0x7c/0x3a0 [ 1232.226395][ T1214] do_fast_syscall_32+0x32/0x80 [ 1232.226409][ T1214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1232.226422][ T1214] RIP: 0023:0xf70de579 [ 1232.226431][ T1214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1232.226442][ T1214] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1232.226452][ T1214] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008953 [ 1232.226459][ T1214] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.226465][ T1214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.226471][ T1214] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1232.226477][ T1214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1232.226487][ T1214] [ 1232.226497][ T1214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1232.647045][T23202] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1232.715911][ T1227] netlink: 'syz.2.7804': attribute type 6 has an invalid length. [ 1232.799529][T23202] usb 10-1: Using ep0 maxpacket: 32 [ 1232.803615][T23202] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1232.806156][T23202] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1232.809892][T23202] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1232.813266][T23202] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1232.817230][T23202] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1232.821818][T23202] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1232.824668][T23202] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1232.827242][T23202] usb 10-1: Product: syz [ 1232.828622][T23202] usb 10-1: Manufacturer: syz [ 1232.830497][T23202] usb 10-1: SerialNumber: syz [ 1232.832580][T23202] usb 10-1: config 0 descriptor?? [ 1232.837151][T23202] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1232.840449][T23202] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1233.720817][T31275] usb 10-1: USB disconnect, device number 40 [ 1233.903200][T31275] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1234.681687][ T1259] netlink: 'syz.5.7814': attribute type 10 has an invalid length. [ 1234.691018][ T1259] bridge0: port 1(team0) entered disabled state [ 1234.693099][ T1259] team0: left allmulticast mode [ 1234.694680][ T1259] team0: left promiscuous mode [ 1234.696721][ T1259] bridge0: port 1(team0) entered disabled state [ 1234.700456][ T1259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.727204][ T1259] vlan2: entered promiscuous mode [ 1234.728782][ T1259] team0: entered promiscuous mode [ 1234.730543][ T1259] vlan2: entered allmulticast mode [ 1234.732411][ T1259] team0: entered allmulticast mode [ 1234.763350][ T1259] bond0: (slave vlan2): Opening slave failed [ 1234.810846][ T1268] netlink: 'syz.2.7815': attribute type 6 has an invalid length. [ 1234.997596][ T40] kauditd_printk_skb: 1108 callbacks suppressed [ 1234.997646][ T40] audit: type=1326 audit(1755651783.537:48294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.016279][ T40] audit: type=1326 audit(1755651783.537:48295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.023179][ T40] audit: type=1326 audit(1755651783.558:48296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.035448][ T40] audit: type=1326 audit(1755651783.558:48297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.042158][ T40] audit: type=1326 audit(1755651783.558:48298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.049126][ T40] audit: type=1326 audit(1755651783.579:48299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.058483][ T40] audit: type=1326 audit(1755651783.579:48300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.067586][ T40] audit: type=1326 audit(1755651783.579:48301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.112286][ T40] audit: type=1326 audit(1755651783.579:48302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.123400][ T40] audit: type=1326 audit(1755651783.579:48303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.5.7817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1235.955999][T14090] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1236.256989][T14090] usb 7-1: Using ep0 maxpacket: 32 [ 1236.260694][T14090] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1236.264023][T14090] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1236.268767][T14090] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1236.272463][T14090] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1236.276531][T14090] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1236.280897][T14090] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1236.284532][T14090] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1236.288658][T14090] usb 7-1: Product: syz [ 1236.290527][T14090] usb 7-1: Manufacturer: syz [ 1236.292478][T14090] usb 7-1: SerialNumber: syz [ 1236.295899][T14090] usb 7-1: config 0 descriptor?? [ 1236.299648][T14090] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1236.303358][T14090] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1236.780213][ T1314] netlink: 'syz.9.7828': attribute type 6 has an invalid length. [ 1236.842771][T15437] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1237.075182][T31273] usb 7-1: USB disconnect, device number 75 [ 1237.082103][T31273] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1237.436915][ T1318] netlink: 'syz.9.7830': attribute type 10 has an invalid length. [ 1237.576261][ T1331] netlink: 'syz.1.7841': attribute type 10 has an invalid length. [ 1237.582986][ T1331] bridge0: port 3(team0) entered disabled state [ 1237.585357][ T1331] team0: left allmulticast mode [ 1237.586898][ T1331] team_slave_0: left allmulticast mode [ 1237.588640][ T1331] team_slave_1: left allmulticast mode [ 1237.590339][ T1331] team0: left promiscuous mode [ 1237.592461][ T1331] team_slave_0: left promiscuous mode [ 1237.594468][ T1331] team_slave_1: left promiscuous mode [ 1237.596504][ T1331] bridge0: port 3(team0) entered disabled state [ 1237.599863][ T1332] netlink: 'syz.5.7838': attribute type 6 has an invalid length. [ 1237.604530][ T1331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.607272][ T1331] bond0: (slave team0): Enslaving as an active interface with an up link [ 1238.594916][ T1345] netlink: 'syz.1.7843': attribute type 6 has an invalid length. [ 1239.338125][ T1357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7835'. [ 1239.366924][ T1357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7835'. [ 1239.522607][ T1366] FAULT_INJECTION: forcing a failure. [ 1239.522607][ T1366] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.527496][ T1366] CPU: 2 UID: 0 PID: 1366 Comm: syz.1.7844 Not tainted syzkaller #0 PREEMPT(full) [ 1239.527513][ T1366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1239.527521][ T1366] Call Trace: [ 1239.527525][ T1366] [ 1239.527530][ T1366] dump_stack_lvl+0x16c/0x1f0 [ 1239.527548][ T1366] should_fail_ex+0x512/0x640 [ 1239.527565][ T1366] should_failslab+0xc2/0x120 [ 1239.527579][ T1366] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1239.527593][ T1366] ? __alloc_skb+0x2b2/0x380 [ 1239.527608][ T1366] __alloc_skb+0x2b2/0x380 [ 1239.527620][ T1366] ? __pfx___alloc_skb+0x10/0x10 [ 1239.527633][ T1366] ? __pfx___might_resched+0x10/0x10 [ 1239.527645][ T1366] ? arch_stack_walk+0xa6/0x100 [ 1239.527658][ T1366] netlink_alloc_large_skb+0x69/0x130 [ 1239.527674][ T1366] netlink_sendmsg+0x6a1/0xdd0 [ 1239.527689][ T1366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.527704][ T1366] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1239.527717][ T1366] ____sys_sendmsg+0xa95/0xc70 [ 1239.527734][ T1366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.527751][ T1366] ? get_compat_msghdr+0x11a/0x170 [ 1239.527766][ T1366] ? kstrtouint_from_user+0x13c/0x1d0 [ 1239.527780][ T1366] ___sys_sendmsg+0x134/0x1d0 [ 1239.527793][ T1366] ? get_pid_task+0xfc/0x250 [ 1239.527808][ T1366] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.527824][ T1366] ? rcu_is_watching+0x12/0xc0 [ 1239.527840][ T1366] __sys_sendmsg+0x16d/0x220 [ 1239.527854][ T1366] ? __pfx___sys_sendmsg+0x10/0x10 [ 1239.527870][ T1366] ? rcu_is_watching+0x12/0xc0 [ 1239.527882][ T1366] __do_fast_syscall_32+0x7c/0x3a0 [ 1239.527897][ T1366] do_fast_syscall_32+0x32/0x80 [ 1239.527911][ T1366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.527926][ T1366] RIP: 0023:0xf7fb5579 [ 1239.527935][ T1366] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1239.527946][ T1366] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1239.527957][ T1366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000600 [ 1239.527964][ T1366] RDX: 0000000024004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.527971][ T1366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.527977][ T1366] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1239.527983][ T1366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.527992][ T1366] [ 1239.619623][ T1368] FAULT_INJECTION: forcing a failure. [ 1239.619623][ T1368] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.623706][ T1368] CPU: 3 UID: 0 PID: 1368 Comm: syz.1.7845 Not tainted syzkaller #0 PREEMPT(full) [ 1239.623730][ T1368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1239.623740][ T1368] Call Trace: [ 1239.623747][ T1368] [ 1239.623754][ T1368] dump_stack_lvl+0x16c/0x1f0 [ 1239.623778][ T1368] should_fail_ex+0x512/0x640 [ 1239.623804][ T1368] should_failslab+0xc2/0x120 [ 1239.623826][ T1368] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1239.623847][ T1368] ? __alloc_skb+0x2b2/0x380 [ 1239.623869][ T1368] __alloc_skb+0x2b2/0x380 [ 1239.623888][ T1368] ? __pfx___alloc_skb+0x10/0x10 [ 1239.623908][ T1368] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1239.623930][ T1368] netlink_alloc_large_skb+0x69/0x130 [ 1239.623965][ T1368] netlink_sendmsg+0x6a1/0xdd0 [ 1239.623986][ T1368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.624004][ T1368] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1239.624017][ T1368] ____sys_sendmsg+0xa95/0xc70 [ 1239.624033][ T1368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.624048][ T1368] ? get_compat_msghdr+0x11a/0x170 [ 1239.624062][ T1368] ? kstrtouint_from_user+0x13c/0x1d0 [ 1239.624076][ T1368] ___sys_sendmsg+0x134/0x1d0 [ 1239.624089][ T1368] ? get_pid_task+0xfc/0x250 [ 1239.624104][ T1368] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.624119][ T1368] ? rcu_is_watching+0x12/0xc0 [ 1239.624152][ T1368] __sys_sendmsg+0x16d/0x220 [ 1239.624165][ T1368] ? __pfx___sys_sendmsg+0x10/0x10 [ 1239.624180][ T1368] ? rcu_is_watching+0x12/0xc0 [ 1239.624191][ T1368] __do_fast_syscall_32+0x7c/0x3a0 [ 1239.624206][ T1368] do_fast_syscall_32+0x32/0x80 [ 1239.624219][ T1368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.624233][ T1368] RIP: 0023:0xf7fb5579 [ 1239.624242][ T1368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1239.624252][ T1368] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1239.624263][ T1368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1239.624270][ T1368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.624276][ T1368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.624282][ T1368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1239.624288][ T1368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.624297][ T1368] [ 1239.762425][ T40] kauditd_printk_skb: 514 callbacks suppressed [ 1239.762436][ T40] audit: type=1326 audit(1755651788.544:48818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.771901][ T40] audit: type=1326 audit(1755651788.544:48819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.778505][ T40] audit: type=1326 audit(1755651788.555:48820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.785531][ T40] audit: type=1326 audit(1755651788.555:48821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.792166][ T40] audit: type=1326 audit(1755651788.555:48822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.798966][ T40] audit: type=1326 audit(1755651788.555:48823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.805625][ T40] audit: type=1326 audit(1755651788.555:48824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.812454][ T40] audit: type=1326 audit(1755651788.555:48825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.818865][ T40] audit: type=1326 audit(1755651788.555:48826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1239.825898][ T40] audit: type=1326 audit(1755651788.555:48827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.7846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1240.054596][ T1384] netlink: 'syz.5.7848': attribute type 6 has an invalid length. [ 1240.333294][ T1397] FAULT_INJECTION: forcing a failure. [ 1240.333294][ T1397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.339059][ T1397] CPU: 0 UID: 0 PID: 1397 Comm: syz.9.7856 Not tainted syzkaller #0 PREEMPT(full) [ 1240.339077][ T1397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1240.339083][ T1397] Call Trace: [ 1240.339087][ T1397] [ 1240.339091][ T1397] dump_stack_lvl+0x16c/0x1f0 [ 1240.339108][ T1397] should_fail_ex+0x512/0x640 [ 1240.339124][ T1397] _copy_from_iter+0x29f/0x16f0 [ 1240.339143][ T1397] ? __pfx__copy_from_iter+0x10/0x10 [ 1240.339159][ T1397] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1240.339173][ T1397] ? rcu_is_watching+0x12/0xc0 [ 1240.339184][ T1397] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1240.339201][ T1397] copy_page_from_iter+0xde/0x180 [ 1240.339217][ T1397] tun_build_skb.constprop.0+0x2e8/0x1500 [ 1240.339231][ T1397] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1240.339241][ T1397] ? unwind_get_return_address+0x59/0xa0 [ 1240.339254][ T1397] ? rcu_is_watching+0x12/0xc0 [ 1240.339267][ T1397] ? rcu_is_watching+0x12/0xc0 [ 1240.339278][ T1397] tun_get_user+0x14ae/0x3ce0 [ 1240.339290][ T1397] ? __pfx_tun_get_user+0x10/0x10 [ 1240.339300][ T1397] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1240.339322][ T1397] ? tun_get+0x191/0x370 [ 1240.339337][ T1397] ? rcu_is_watching+0x12/0xc0 [ 1240.339347][ T1397] ? lock_release+0x201/0x2f0 [ 1240.339362][ T1397] tun_chr_write_iter+0xdc/0x210 [ 1240.339372][ T1397] vfs_write+0x7d0/0x11d0 [ 1240.339385][ T1397] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1240.339396][ T1397] ? __pfx_vfs_write+0x10/0x10 [ 1240.339408][ T1397] ? lock_release+0x201/0x2f0 [ 1240.339423][ T1397] ksys_write+0x12a/0x250 [ 1240.339435][ T1397] ? __pfx_ksys_write+0x10/0x10 [ 1240.339447][ T1397] ? rcu_is_watching+0x12/0xc0 [ 1240.339457][ T1397] __do_fast_syscall_32+0x7c/0x3a0 [ 1240.339472][ T1397] do_fast_syscall_32+0x32/0x80 [ 1240.339486][ T1397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.339499][ T1397] RIP: 0023:0xf7f77579 [ 1240.339507][ T1397] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1240.339518][ T1397] RSP: 002b:00000000f5496520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1240.339528][ T1397] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800001c0 [ 1240.339535][ T1397] RDX: 0000000000000036 RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 1240.339541][ T1397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.339547][ T1397] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1240.339553][ T1397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.339562][ T1397] [ 1240.663756][ T1417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7863'. [ 1240.674273][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.677723][ T1417] batadv_slave_0: entered promiscuous mode [ 1240.775998][ T1424] FAULT_INJECTION: forcing a failure. [ 1240.775998][ T1424] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.780760][ T1424] CPU: 0 UID: 0 PID: 1424 Comm: syz.5.7866 Not tainted syzkaller #0 PREEMPT(full) [ 1240.780777][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1240.780784][ T1424] Call Trace: [ 1240.780788][ T1424] [ 1240.780792][ T1424] dump_stack_lvl+0x16c/0x1f0 [ 1240.780809][ T1424] should_fail_ex+0x512/0x640 [ 1240.780825][ T1424] should_failslab+0xc2/0x120 [ 1240.780839][ T1424] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1240.780853][ T1424] ? __alloc_skb+0x2b2/0x380 [ 1240.780867][ T1424] __alloc_skb+0x2b2/0x380 [ 1240.780878][ T1424] ? __pfx___alloc_skb+0x10/0x10 [ 1240.780891][ T1424] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1240.780907][ T1424] netlink_alloc_large_skb+0x69/0x130 [ 1240.780921][ T1424] netlink_sendmsg+0x6a1/0xdd0 [ 1240.780936][ T1424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.780950][ T1424] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1240.780963][ T1424] ____sys_sendmsg+0xa95/0xc70 [ 1240.780980][ T1424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1240.780995][ T1424] ? get_compat_msghdr+0x11a/0x170 [ 1240.781009][ T1424] ? kstrtouint_from_user+0x13c/0x1d0 [ 1240.781023][ T1424] ___sys_sendmsg+0x134/0x1d0 [ 1240.781035][ T1424] ? get_pid_task+0xfc/0x250 [ 1240.781063][ T1424] ? __pfx____sys_sendmsg+0x10/0x10 [ 1240.781079][ T1424] ? rcu_is_watching+0x12/0xc0 [ 1240.781095][ T1424] __sys_sendmsg+0x16d/0x220 [ 1240.781108][ T1424] ? __pfx___sys_sendmsg+0x10/0x10 [ 1240.781123][ T1424] ? rcu_is_watching+0x12/0xc0 [ 1240.781134][ T1424] __do_fast_syscall_32+0x7c/0x3a0 [ 1240.781153][ T1424] do_fast_syscall_32+0x32/0x80 [ 1240.781178][ T1424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.781192][ T1424] RIP: 0023:0xf7ff8579 [ 1240.781201][ T1424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1240.781211][ T1424] RSP: 002b:00000000f551655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1240.781222][ T1424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1240.781228][ T1424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.781234][ T1424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.781240][ T1424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1240.781246][ T1424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.781256][ T1424] [ 1240.922320][ T1447] FAULT_INJECTION: forcing a failure. [ 1240.922320][ T1447] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.927504][ T1447] CPU: 0 UID: 0 PID: 1447 Comm: syz.2.7872 Not tainted syzkaller #0 PREEMPT(full) [ 1240.927521][ T1447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1240.927528][ T1447] Call Trace: [ 1240.927532][ T1447] [ 1240.927536][ T1447] dump_stack_lvl+0x16c/0x1f0 [ 1240.927553][ T1447] should_fail_ex+0x512/0x640 [ 1240.927568][ T1447] should_failslab+0xc2/0x120 [ 1240.927582][ T1447] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1240.927595][ T1447] ? __alloc_skb+0x2b2/0x380 [ 1240.927609][ T1447] __alloc_skb+0x2b2/0x380 [ 1240.927621][ T1447] ? __pfx___alloc_skb+0x10/0x10 [ 1240.927633][ T1447] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1240.927649][ T1447] netlink_alloc_large_skb+0x69/0x130 [ 1240.927663][ T1447] netlink_sendmsg+0x6a1/0xdd0 [ 1240.927677][ T1447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.927691][ T1447] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1240.927704][ T1447] ____sys_sendmsg+0xa95/0xc70 [ 1240.927721][ T1447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1240.927736][ T1447] ? get_compat_msghdr+0x11a/0x170 [ 1240.927750][ T1447] ? kstrtouint_from_user+0x13c/0x1d0 [ 1240.927764][ T1447] ___sys_sendmsg+0x134/0x1d0 [ 1240.927776][ T1447] ? get_pid_task+0xfc/0x250 [ 1240.927791][ T1447] ? __pfx____sys_sendmsg+0x10/0x10 [ 1240.927806][ T1447] ? rcu_is_watching+0x12/0xc0 [ 1240.927821][ T1447] __sys_sendmsg+0x16d/0x220 [ 1240.927834][ T1447] ? __pfx___sys_sendmsg+0x10/0x10 [ 1240.927850][ T1447] ? rcu_is_watching+0x12/0xc0 [ 1240.927861][ T1447] __do_fast_syscall_32+0x7c/0x3a0 [ 1240.927876][ T1447] do_fast_syscall_32+0x32/0x80 [ 1240.927889][ T1447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.927903][ T1447] RIP: 0023:0xf70de579 [ 1240.927911][ T1447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1240.927922][ T1447] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1240.927932][ T1447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1240.927939][ T1447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.927945][ T1447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.927951][ T1447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1240.927957][ T1447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.927966][ T1447] [ 1241.119343][ T1456] netlink: 'syz.2.7875': attribute type 6 has an invalid length. [ 1241.711750][ T1482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1242.174194][ T1501] FAULT_INJECTION: forcing a failure. [ 1242.174194][ T1501] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.178108][ T1501] CPU: 3 UID: 0 PID: 1501 Comm: syz.1.7891 Not tainted syzkaller #0 PREEMPT(full) [ 1242.178123][ T1501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1242.178130][ T1501] Call Trace: [ 1242.178134][ T1501] [ 1242.178139][ T1501] dump_stack_lvl+0x16c/0x1f0 [ 1242.178155][ T1501] should_fail_ex+0x512/0x640 [ 1242.178171][ T1501] should_failslab+0xc2/0x120 [ 1242.178185][ T1501] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1242.178198][ T1501] ? __alloc_skb+0x2b2/0x380 [ 1242.178212][ T1501] __alloc_skb+0x2b2/0x380 [ 1242.178223][ T1501] ? __pfx___alloc_skb+0x10/0x10 [ 1242.178236][ T1501] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1242.178251][ T1501] netlink_alloc_large_skb+0x69/0x130 [ 1242.178266][ T1501] netlink_sendmsg+0x6a1/0xdd0 [ 1242.178280][ T1501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.178294][ T1501] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1242.178306][ T1501] ____sys_sendmsg+0xa95/0xc70 [ 1242.178323][ T1501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.178338][ T1501] ? get_compat_msghdr+0x11a/0x170 [ 1242.178352][ T1501] ? kstrtouint_from_user+0x13c/0x1d0 [ 1242.178366][ T1501] ___sys_sendmsg+0x134/0x1d0 [ 1242.178378][ T1501] ? get_pid_task+0xfc/0x250 [ 1242.178397][ T1501] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.178413][ T1501] ? rcu_is_watching+0x12/0xc0 [ 1242.178428][ T1501] __sys_sendmsg+0x16d/0x220 [ 1242.178442][ T1501] ? __pfx___sys_sendmsg+0x10/0x10 [ 1242.178457][ T1501] ? rcu_is_watching+0x12/0xc0 [ 1242.178468][ T1501] __do_fast_syscall_32+0x7c/0x3a0 [ 1242.178482][ T1501] do_fast_syscall_32+0x32/0x80 [ 1242.178496][ T1501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1242.178510][ T1501] RIP: 0023:0xf7fb5579 [ 1242.178518][ T1501] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1242.178529][ T1501] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1242.178540][ T1501] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000080 [ 1242.178546][ T1501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.178552][ T1501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.178558][ T1501] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1242.178564][ T1501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.178574][ T1501] [ 1243.074841][ T1514] netlink: 'syz.2.7895': attribute type 6 has an invalid length. [ 1243.188196][ T1520] FAULT_INJECTION: forcing a failure. [ 1243.188196][ T1520] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.192536][ T1520] CPU: 1 UID: 0 PID: 1520 Comm: syz.9.7898 Not tainted syzkaller #0 PREEMPT(full) [ 1243.192552][ T1520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1243.192559][ T1520] Call Trace: [ 1243.192563][ T1520] [ 1243.192567][ T1520] dump_stack_lvl+0x16c/0x1f0 [ 1243.192584][ T1520] should_fail_ex+0x512/0x640 [ 1243.192599][ T1520] should_failslab+0xc2/0x120 [ 1243.192613][ T1520] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1243.192626][ T1520] ? tomoyo_audit_inet_log+0x285/0x3a0 [ 1243.192641][ T1520] ? dst_alloc+0x99/0x1a0 [ 1243.192653][ T1520] dst_alloc+0x99/0x1a0 [ 1243.192665][ T1520] rt_dst_alloc+0x35/0x3a0 [ 1243.192679][ T1520] ip_route_output_key_hash_rcu+0x880/0x28c0 [ 1243.192692][ T1520] ip_route_output_key_hash+0x137/0x2e0 [ 1243.192703][ T1520] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1243.192716][ T1520] ? __pfx___might_resched+0x10/0x10 [ 1243.192728][ T1520] ip_route_output_flow+0x27/0x150 [ 1243.192739][ T1520] __ip4_datagram_connect+0x8bf/0x14c0 [ 1243.192758][ T1520] udp_connect+0x2e/0x70 [ 1243.192771][ T1520] inet_dgram_connect+0x143/0x200 [ 1243.192787][ T1520] ? __pfx_inet_dgram_connect+0x10/0x10 [ 1243.192802][ T1520] __sys_connect_file+0x13e/0x1a0 [ 1243.192814][ T1520] __sys_connect+0x13b/0x160 [ 1243.192824][ T1520] ? __pfx___sys_connect+0x10/0x10 [ 1243.192837][ T1520] ? __pfx_ksys_write+0x10/0x10 [ 1243.192852][ T1520] __ia32_sys_connect+0x71/0xb0 [ 1243.192862][ T1520] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1243.192877][ T1520] __do_fast_syscall_32+0x7c/0x3a0 [ 1243.192892][ T1520] do_fast_syscall_32+0x32/0x80 [ 1243.192906][ T1520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.192919][ T1520] RIP: 0023:0xf7f77579 [ 1243.192927][ T1520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1243.192937][ T1520] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1243.192948][ T1520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1243.192954][ T1520] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.192961][ T1520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.192967][ T1520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1243.192973][ T1520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.192982][ T1520] [ 1243.278547][ T5988] Bluetooth: hci3: command 0x0c1a tx timeout [ 1243.943039][ T1547] FAULT_INJECTION: forcing a failure. [ 1243.943039][ T1547] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.947083][ T1547] CPU: 0 UID: 0 PID: 1547 Comm: syz.2.7907 Not tainted syzkaller #0 PREEMPT(full) [ 1243.947099][ T1547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1243.947106][ T1547] Call Trace: [ 1243.947110][ T1547] [ 1243.947115][ T1547] dump_stack_lvl+0x16c/0x1f0 [ 1243.947133][ T1547] should_fail_ex+0x512/0x640 [ 1243.947150][ T1547] ? tomoyo_encode2+0x100/0x3e0 [ 1243.947164][ T1547] should_failslab+0xc2/0x120 [ 1243.947179][ T1547] __kmalloc_noprof+0xd2/0x510 [ 1243.947192][ T1547] tomoyo_encode2+0x100/0x3e0 [ 1243.947207][ T1547] tomoyo_encode+0x29/0x50 [ 1243.947220][ T1547] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1243.947236][ T1547] ? tomoyo_profile+0x47/0x60 [ 1243.947245][ T1547] tomoyo_path_number_perm+0x245/0x580 [ 1243.947257][ T1547] ? tomoyo_path_number_perm+0x237/0x580 [ 1243.947270][ T1547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1243.947285][ T1547] ? preempt_count_add+0x76/0x150 [ 1243.947303][ T1547] ? rcu_is_watching+0x12/0xc0 [ 1243.947314][ T1547] ? __fget_files+0x204/0x3c0 [ 1243.947325][ T1547] ? hook_file_ioctl_common+0x145/0x410 [ 1243.947339][ T1547] ? lock_release+0x201/0x2f0 [ 1243.947352][ T1547] ? __fget_files+0x20e/0x3c0 [ 1243.947364][ T1547] security_file_ioctl_compat+0x9b/0x240 [ 1243.947384][ T1547] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1243.947402][ T1547] __do_fast_syscall_32+0x7c/0x3a0 [ 1243.947416][ T1547] do_fast_syscall_32+0x32/0x80 [ 1243.947430][ T1547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.947443][ T1547] RIP: 0023:0xf70de579 [ 1243.947452][ T1547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1243.947462][ T1547] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1243.947472][ T1547] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008b14 [ 1243.947479][ T1547] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.947485][ T1547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.947491][ T1547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1243.947497][ T1547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.947506][ T1547] [ 1243.947515][ T1547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1244.454875][ T1566] netlink: 'syz.9.7913': attribute type 6 has an invalid length. [ 1244.539512][ T40] kauditd_printk_skb: 251 callbacks suppressed [ 1244.539530][ T40] audit: type=1326 audit(1755651793.562:49079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.548805][ T40] audit: type=1326 audit(1755651793.562:49080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb55a7 code=0x7ffc0000 [ 1244.555798][ T40] audit: type=1326 audit(1755651793.562:49081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.563066][ T40] audit: type=1326 audit(1755651793.573:49082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.569788][ T40] audit: type=1326 audit(1755651793.573:49083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb55a7 code=0x7ffc0000 [ 1244.577255][ T40] audit: type=1326 audit(1755651793.573:49084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.585395][ T40] audit: type=1326 audit(1755651793.583:49085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.595061][ T40] audit: type=1326 audit(1755651793.583:49086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb55a7 code=0x7ffc0000 [ 1244.603377][ T40] audit: type=1326 audit(1755651793.583:49087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.611402][ T40] audit: type=1326 audit(1755651793.594:49088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1559 comm="syz.1.7912" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 1244.915207][ T1572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7914'. [ 1244.918773][ T1572] FAULT_INJECTION: forcing a failure. [ 1244.918773][ T1572] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.922727][ T1572] CPU: 2 UID: 0 PID: 1572 Comm: syz.2.7914 Not tainted syzkaller #0 PREEMPT(full) [ 1244.922744][ T1572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1244.922751][ T1572] Call Trace: [ 1244.922756][ T1572] [ 1244.922761][ T1572] dump_stack_lvl+0x16c/0x1f0 [ 1244.922778][ T1572] should_fail_ex+0x512/0x640 [ 1244.922794][ T1572] should_failslab+0xc2/0x120 [ 1244.922809][ T1572] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1244.922822][ T1572] ? __alloc_skb+0x2b2/0x380 [ 1244.922854][ T1572] __alloc_skb+0x2b2/0x380 [ 1244.922878][ T1572] ? __pfx___alloc_skb+0x10/0x10 [ 1244.922891][ T1572] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1244.922907][ T1572] netlink_alloc_large_skb+0x69/0x130 [ 1244.922922][ T1572] netlink_sendmsg+0x6a1/0xdd0 [ 1244.922937][ T1572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.922951][ T1572] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1244.922964][ T1572] ____sys_sendmsg+0xa95/0xc70 [ 1244.922993][ T1572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.923008][ T1572] ? get_compat_msghdr+0x11a/0x170 [ 1244.923023][ T1572] ? kstrtouint_from_user+0x13c/0x1d0 [ 1244.923037][ T1572] ___sys_sendmsg+0x134/0x1d0 [ 1244.923049][ T1572] ? get_pid_task+0xfc/0x250 [ 1244.923064][ T1572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.923080][ T1572] ? rcu_is_watching+0x12/0xc0 [ 1244.923096][ T1572] __sys_sendmsg+0x16d/0x220 [ 1244.923109][ T1572] ? __pfx___sys_sendmsg+0x10/0x10 [ 1244.923128][ T1572] ? rcu_is_watching+0x12/0xc0 [ 1244.923140][ T1572] __do_fast_syscall_32+0x7c/0x3a0 [ 1244.923154][ T1572] do_fast_syscall_32+0x32/0x80 [ 1244.923167][ T1572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.923181][ T1572] RIP: 0023:0xf70de579 [ 1244.923189][ T1572] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1244.923200][ T1572] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1244.923211][ T1572] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 1244.923217][ T1572] RDX: 0000000000042000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1244.923224][ T1572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1244.923230][ T1572] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1244.923236][ T1572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1244.923245][ T1572] [ 1245.022330][ T1574] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1245.025747][ T1574] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1245.030396][ T1574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7915'. [ 1245.061226][ T1579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7917'. [ 1245.110797][ T1591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7922'. [ 1245.145515][ T1592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1245.161917][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7922'. [ 1245.901434][ T1613] netlink: 'syz.5.7927': attribute type 6 has an invalid length. [ 1246.108183][ T1618] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 1246.243353][ T1634] netlink: 'syz.9.7936': attribute type 6 has an invalid length. [ 1246.409244][T11110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.463279][T11110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.528680][T11110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.578651][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1246.581211][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1246.584048][ T5988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1246.587552][ T5988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1246.589997][ T5988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1246.606027][T11110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.652775][ T1644] chnl_net:caif_netlink_parms(): no params data found [ 1246.695479][T11110] bridge_slave_1: left allmulticast mode [ 1246.697608][T11110] bridge_slave_1: left promiscuous mode [ 1246.699555][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.703243][T11110] bridge_slave_0: left allmulticast mode [ 1246.705171][T11110] bridge_slave_0: left promiscuous mode [ 1246.707048][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.900329][T11110] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 1246.903865][T11110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.908691][T11110] bond0 (unregistering): (slave team0): Releasing backup interface [ 1246.914910][T11110] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 1246.918900][T11110] bond0 (unregistering): Released all slaves [ 1246.925452][T11110] bond1 (unregistering): Released all slaves [ 1246.957396][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.960408][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.963186][ T1644] bridge_slave_0: entered allmulticast mode [ 1246.966835][ T1644] bridge_slave_0: entered promiscuous mode [ 1246.970174][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.972760][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.976858][ T1644] bridge_slave_1: entered allmulticast mode [ 1246.980661][ T1644] bridge_slave_1: entered promiscuous mode [ 1247.000700][ T1644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.004902][ T1644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.028467][ T1644] team0: Port device team_slave_0 added [ 1247.031755][ T1644] team0: Port device team_slave_1 added [ 1247.049593][ T1644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.053700][ T1644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.063282][ T1644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.069808][ T1644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.072121][ T1644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.081560][ T1644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.107415][ T1644] hsr_slave_0: entered promiscuous mode [ 1247.109546][ T1644] hsr_slave_1: entered promiscuous mode [ 1247.111637][ T1644] debugfs: 'hsr0' already exists in 'hsr' [ 1247.113420][ T1644] Cannot create hsr debugfs directory [ 1247.140838][ T1668] netlink: 'syz.9.7945': attribute type 6 has an invalid length. [ 1247.265661][ T1666] FAULT_INJECTION: forcing a failure. [ 1247.265661][ T1666] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.269894][ T1666] CPU: 1 UID: 0 PID: 1666 Comm: syz.5.7944 Not tainted syzkaller #0 PREEMPT(full) [ 1247.269915][ T1666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1247.269922][ T1666] Call Trace: [ 1247.269927][ T1666] [ 1247.269932][ T1666] dump_stack_lvl+0x16c/0x1f0 [ 1247.269956][ T1666] should_fail_ex+0x512/0x640 [ 1247.269972][ T1666] should_failslab+0xc2/0x120 [ 1247.269988][ T1666] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1247.270006][ T1666] ? ceph_create_client+0x68/0x370 [ 1247.270025][ T1666] ceph_create_client+0x68/0x370 [ 1247.270041][ T1666] ceph_get_tree+0x1ac/0x1ec0 [ 1247.270055][ T1666] ? security_capable+0x7e/0x260 [ 1247.270067][ T1666] vfs_get_tree+0x8b/0x340 [ 1247.270077][ T1666] vfs_cmd_create+0xd7/0x2a0 [ 1247.270092][ T1666] __do_sys_fsconfig+0x7b8/0xbe0 [ 1247.270107][ T1666] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1247.270123][ T1666] ? rcu_is_watching+0x12/0xc0 [ 1247.270136][ T1666] __do_fast_syscall_32+0x7c/0x3a0 [ 1247.270151][ T1666] do_fast_syscall_32+0x32/0x80 [ 1247.270165][ T1666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1247.270180][ T1666] RIP: 0023:0xf7ff8579 [ 1247.270189][ T1666] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1247.270201][ T1666] RSP: 002b:00000000f54f555c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 1247.270212][ T1666] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 1247.270219][ T1666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1247.270226][ T1666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1247.270232][ T1666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1247.270240][ T1666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1247.270252][ T1666] [ 1247.342906][T11110] hsr_slave_0: left promiscuous mode [ 1247.344900][T11110] hsr_slave_1: left promiscuous mode [ 1247.346640][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.348735][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.351698][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1247.354247][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.359132][T11110] veth1_macvtap: left promiscuous mode [ 1247.361118][T11110] veth0_macvtap: left allmulticast mode [ 1247.362892][T11110] veth0_macvtap: left promiscuous mode [ 1247.364858][T11110] veth1_vlan: left promiscuous mode [ 1247.366768][T11110] veth0_vlan: left promiscuous mode [ 1247.379506][ T1679] FAULT_INJECTION: forcing a failure. [ 1247.379506][ T1679] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.384275][ T1679] CPU: 3 UID: 0 PID: 1679 Comm: syz.1.7947 Not tainted syzkaller #0 PREEMPT(full) [ 1247.384291][ T1679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1247.384298][ T1679] Call Trace: [ 1247.384302][ T1679] [ 1247.384306][ T1679] dump_stack_lvl+0x16c/0x1f0 [ 1247.384322][ T1679] should_fail_ex+0x512/0x640 [ 1247.384338][ T1679] should_failslab+0xc2/0x120 [ 1247.384352][ T1679] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1247.384366][ T1679] ? __alloc_skb+0x2b2/0x380 [ 1247.384380][ T1679] __alloc_skb+0x2b2/0x380 [ 1247.384391][ T1679] ? __pfx___alloc_skb+0x10/0x10 [ 1247.384404][ T1679] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1247.384419][ T1679] netlink_alloc_large_skb+0x69/0x130 [ 1247.384433][ T1679] netlink_sendmsg+0x6a1/0xdd0 [ 1247.384448][ T1679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.384462][ T1679] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1247.384475][ T1679] ____sys_sendmsg+0xa95/0xc70 [ 1247.384491][ T1679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.384507][ T1679] ? get_compat_msghdr+0x11a/0x170 [ 1247.384521][ T1679] ? kstrtouint_from_user+0x13c/0x1d0 [ 1247.384535][ T1679] ___sys_sendmsg+0x134/0x1d0 [ 1247.384547][ T1679] ? get_pid_task+0xfc/0x250 [ 1247.384562][ T1679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.384577][ T1679] ? rcu_is_watching+0x12/0xc0 [ 1247.384592][ T1679] __sys_sendmsg+0x16d/0x220 [ 1247.384605][ T1679] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.384621][ T1679] ? rcu_is_watching+0x12/0xc0 [ 1247.384631][ T1679] __do_fast_syscall_32+0x7c/0x3a0 [ 1247.384646][ T1679] do_fast_syscall_32+0x32/0x80 [ 1247.384659][ T1679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1247.384673][ T1679] RIP: 0023:0xf7fb5579 [ 1247.384681][ T1679] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1247.384692][ T1679] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1247.384704][ T1679] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1247.384714][ T1679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1247.384722][ T1679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1247.384730][ T1679] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1247.384739][ T1679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1247.384753][ T1679] [ 1247.522697][T11110] team_slave_1 (unregistering): left promiscuous mode [ 1247.525289][T11110] team_slave_1 (unregistering): left allmulticast mode [ 1247.529415][T11110] team0 (unregistering): Port device team_slave_1 removed [ 1247.536107][T11110] team_slave_0 (unregistering): left promiscuous mode [ 1247.538356][T11110] team_slave_0 (unregistering): left allmulticast mode [ 1247.541448][T11110] team0 (unregistering): Port device team_slave_0 removed [ 1247.599679][T19873] infiniband syz1: ib_query_port failed (-19) [ 1247.680485][ T1688] trusted_key: encrypted_key: insufficient parameters specified [ 1247.986141][ T1710] block nbd5: shutting down sockets [ 1248.390971][ T1740] tipc: Started in network mode [ 1248.393013][ T1740] tipc: Node identity 72cd72191a95, cluster identity 4711 [ 1248.395593][ T1740] tipc: Enabled bearer , priority 0 [ 1248.398169][ T1740] syzkaller0: entered promiscuous mode [ 1248.399986][ T1740] syzkaller0: entered allmulticast mode [ 1248.404049][ T1740] FAULT_INJECTION: forcing a failure. [ 1248.404049][ T1740] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.408297][ T1740] CPU: 0 UID: 0 PID: 1740 Comm: syz.1.7958 Not tainted syzkaller #0 PREEMPT(full) [ 1248.408315][ T1740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1248.408322][ T1740] Call Trace: [ 1248.408328][ T1740] [ 1248.408333][ T1740] dump_stack_lvl+0x16c/0x1f0 [ 1248.408351][ T1740] should_fail_ex+0x512/0x640 [ 1248.408369][ T1740] ? tomoyo_encode2+0x100/0x3e0 [ 1248.408385][ T1740] should_failslab+0xc2/0x120 [ 1248.408401][ T1740] __kmalloc_noprof+0xd2/0x510 [ 1248.408416][ T1740] tomoyo_encode2+0x100/0x3e0 [ 1248.408432][ T1740] tomoyo_encode+0x29/0x50 [ 1248.408447][ T1740] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1248.408464][ T1740] ? tomoyo_profile+0x47/0x60 [ 1248.408475][ T1740] tomoyo_path_number_perm+0x245/0x580 [ 1248.408488][ T1740] ? tomoyo_path_number_perm+0x237/0x580 [ 1248.408502][ T1740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1248.408518][ T1740] ? preempt_count_add+0x76/0x150 [ 1248.408539][ T1740] ? rcu_is_watching+0x12/0xc0 [ 1248.408551][ T1740] ? __fget_files+0x204/0x3c0 [ 1248.408564][ T1740] ? hook_file_ioctl_common+0x145/0x410 [ 1248.408579][ T1740] ? lock_release+0x201/0x2f0 [ 1248.408594][ T1740] ? __fget_files+0x20e/0x3c0 [ 1248.408607][ T1740] security_file_ioctl_compat+0x9b/0x240 [ 1248.408622][ T1740] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1248.408641][ T1740] __do_fast_syscall_32+0x7c/0x3a0 [ 1248.408657][ T1740] do_fast_syscall_32+0x32/0x80 [ 1248.408672][ T1740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.408687][ T1740] RIP: 0023:0xf7fb5579 [ 1248.408697][ T1740] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1248.408709][ T1740] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1248.408722][ T1740] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 1248.408729][ T1740] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1248.408736][ T1740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1248.408743][ T1740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1248.408749][ T1740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.408760][ T1740] [ 1248.408773][ T1740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1248.481956][ T1740] tipc: Resetting bearer [ 1248.485176][ T1739] tipc: Resetting bearer [ 1248.488566][ T1739] tipc: Disabling bearer [ 1248.564064][T15437] Bluetooth: hci2: command tx timeout [ 1248.598198][ T1744] FAULT_INJECTION: forcing a failure. [ 1248.598198][ T1744] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.602628][ T1744] CPU: 3 UID: 0 PID: 1744 Comm: syz.1.7960 Not tainted syzkaller #0 PREEMPT(full) [ 1248.602645][ T1744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1248.602652][ T1744] Call Trace: [ 1248.602656][ T1744] [ 1248.602660][ T1744] dump_stack_lvl+0x16c/0x1f0 [ 1248.602678][ T1744] should_fail_ex+0x512/0x640 [ 1248.602694][ T1744] should_failslab+0xc2/0x120 [ 1248.602709][ T1744] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1248.602722][ T1744] ? __alloc_skb+0x2b2/0x380 [ 1248.602737][ T1744] __alloc_skb+0x2b2/0x380 [ 1248.602748][ T1744] ? __pfx___alloc_skb+0x10/0x10 [ 1248.602760][ T1744] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1248.602776][ T1744] netlink_alloc_large_skb+0x69/0x130 [ 1248.602790][ T1744] netlink_sendmsg+0x6a1/0xdd0 [ 1248.602828][ T1744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1248.602845][ T1744] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1248.602858][ T1744] ____sys_sendmsg+0xa95/0xc70 [ 1248.602873][ T1744] ? __tree_mod_log_search+0x24/0x2e0 [ 1248.602885][ T1744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1248.602901][ T1744] ? get_compat_msghdr+0x11a/0x170 [ 1248.602914][ T1744] ? kstrtouint_from_user+0x13c/0x1d0 [ 1248.602928][ T1744] ___sys_sendmsg+0x134/0x1d0 [ 1248.602940][ T1744] ? get_pid_task+0xfc/0x250 [ 1248.602955][ T1744] ? __pfx____sys_sendmsg+0x10/0x10 [ 1248.602975][ T1744] ? rcu_is_watching+0x12/0xc0 [ 1248.602998][ T1744] __sys_sendmsg+0x16d/0x220 [ 1248.603019][ T1744] ? __pfx___sys_sendmsg+0x10/0x10 [ 1248.603043][ T1744] ? rcu_is_watching+0x12/0xc0 [ 1248.603061][ T1744] __do_fast_syscall_32+0x7c/0x3a0 [ 1248.603084][ T1744] do_fast_syscall_32+0x32/0x80 [ 1248.603105][ T1744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.603121][ T1744] RIP: 0023:0xf7fb5579 [ 1248.603129][ T1744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1248.603139][ T1744] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1248.603150][ T1744] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 1248.603157][ T1744] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1248.603163][ T1744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1248.603169][ T1744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1248.603175][ T1744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.603184][ T1744] [ 1248.714533][ T1748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1248.715514][ T1750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1248.720214][ T1750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1248.901640][ T1758] syzkaller0: entered promiscuous mode [ 1248.903388][ T1758] syzkaller0: entered allmulticast mode [ 1249.470542][ T1761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7966'. [ 1249.475837][ T1761] FAULT_INJECTION: forcing a failure. [ 1249.475837][ T1761] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.484187][ T1761] CPU: 3 UID: 0 PID: 1761 Comm: syz.9.7966 Not tainted syzkaller #0 PREEMPT(full) [ 1249.484213][ T1761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1249.484223][ T1761] Call Trace: [ 1249.484230][ T1761] [ 1249.484236][ T1761] dump_stack_lvl+0x16c/0x1f0 [ 1249.484261][ T1761] should_fail_ex+0x512/0x640 [ 1249.484285][ T1761] should_failslab+0xc2/0x120 [ 1249.484306][ T1761] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1249.484331][ T1761] ? __alloc_skb+0x2b2/0x380 [ 1249.484353][ T1761] __alloc_skb+0x2b2/0x380 [ 1249.484369][ T1761] ? __pfx___alloc_skb+0x10/0x10 [ 1249.484388][ T1761] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1249.484410][ T1761] netlink_alloc_large_skb+0x69/0x130 [ 1249.484430][ T1761] netlink_sendmsg+0x6a1/0xdd0 [ 1249.484451][ T1761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.484471][ T1761] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1249.484489][ T1761] ____sys_sendmsg+0xa95/0xc70 [ 1249.484512][ T1761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.484533][ T1761] ? get_compat_msghdr+0x11a/0x170 [ 1249.484553][ T1761] ? __pfx__kstrtoull+0x10/0x10 [ 1249.484574][ T1761] ___sys_sendmsg+0x134/0x1d0 [ 1249.484595][ T1761] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.484613][ T1761] ? __pfx_kstrtouint+0x10/0x10 [ 1249.484634][ T1761] ? rcu_is_watching+0x12/0xc0 [ 1249.484657][ T1761] __sys_sendmmsg+0x2f9/0x420 [ 1249.484677][ T1761] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1249.484695][ T1761] ? lock_release+0x201/0x2f0 [ 1249.484718][ T1761] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1249.484744][ T1761] ? fput+0x9b/0xd0 [ 1249.484765][ T1761] ? ksys_write+0x1ac/0x250 [ 1249.484783][ T1761] ? __pfx_ksys_write+0x10/0x10 [ 1249.484803][ T1761] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1249.484823][ T1761] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1249.484843][ T1761] __do_fast_syscall_32+0x7c/0x3a0 [ 1249.484864][ T1761] do_fast_syscall_32+0x32/0x80 [ 1249.484884][ T1761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1249.484904][ T1761] RIP: 0023:0xf7f77579 [ 1249.484917][ T1761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1249.484932][ T1761] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1249.484948][ T1761] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000140 [ 1249.484959][ T1761] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 1249.484969][ T1761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1249.484979][ T1761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1249.484988][ T1761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.485003][ T1761] [ 1249.561033][ T1763] ceph: No mds server is up or the cluster is laggy [ 1249.657163][ T1775] FAULT_INJECTION: forcing a failure. [ 1249.657163][ T1775] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.662839][ T1775] CPU: 0 UID: 0 PID: 1775 Comm: syz.5.7970 Not tainted syzkaller #0 PREEMPT(full) [ 1249.662863][ T1775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1249.662874][ T1775] Call Trace: [ 1249.662880][ T1775] [ 1249.662887][ T1775] dump_stack_lvl+0x16c/0x1f0 [ 1249.662913][ T1775] should_fail_ex+0x512/0x640 [ 1249.662939][ T1775] should_failslab+0xc2/0x120 [ 1249.662964][ T1775] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1249.662985][ T1775] ? __alloc_skb+0x2b2/0x380 [ 1249.663007][ T1775] __alloc_skb+0x2b2/0x380 [ 1249.663026][ T1775] ? __pfx___alloc_skb+0x10/0x10 [ 1249.663047][ T1775] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1249.663071][ T1775] netlink_alloc_large_skb+0x69/0x130 [ 1249.663094][ T1775] netlink_sendmsg+0x6a1/0xdd0 [ 1249.663117][ T1775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.663141][ T1775] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1249.663161][ T1775] ____sys_sendmsg+0xa95/0xc70 [ 1249.663189][ T1775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.663214][ T1775] ? get_compat_msghdr+0x11a/0x170 [ 1249.663242][ T1775] ? kstrtouint_from_user+0x13c/0x1d0 [ 1249.663265][ T1775] ___sys_sendmsg+0x134/0x1d0 [ 1249.663285][ T1775] ? get_pid_task+0xfc/0x250 [ 1249.663309][ T1775] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.663335][ T1775] ? rcu_is_watching+0x12/0xc0 [ 1249.663360][ T1775] __sys_sendmsg+0x16d/0x220 [ 1249.663381][ T1775] ? __pfx___sys_sendmsg+0x10/0x10 [ 1249.663407][ T1775] ? rcu_is_watching+0x12/0xc0 [ 1249.663425][ T1775] __do_fast_syscall_32+0x7c/0x3a0 [ 1249.663448][ T1775] do_fast_syscall_32+0x32/0x80 [ 1249.663470][ T1775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1249.663492][ T1775] RIP: 0023:0xf7ff8579 [ 1249.663505][ T1775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1249.663521][ T1775] RSP: 002b:00000000f551655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1249.663538][ T1775] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1249.663549][ T1775] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1249.663558][ T1775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1249.663567][ T1775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1249.663577][ T1775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.663593][ T1775] [ 1249.859353][ T1785] __nla_validate_parse: 1 callbacks suppressed [ 1249.859366][ T1785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1249.874201][ T1785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1250.094062][ T1796] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7973'. [ 1250.102489][ T1644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1250.107620][ T1644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1250.115186][ T1644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1250.121115][ T1644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1250.163698][ T1644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.175520][ T1644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.180983][T24691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.183228][T24691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.196239][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.198541][T11106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.317854][ T1644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.434733][ T1644] veth0_vlan: entered promiscuous mode [ 1250.438303][ T1644] veth1_vlan: entered promiscuous mode [ 1250.457167][ T1644] veth0_macvtap: entered promiscuous mode [ 1250.460922][ T1644] veth1_macvtap: entered promiscuous mode [ 1250.467270][ T1644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.472879][ T1644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.486415][T24691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.490517][T24691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.493470][T24691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.496401][T24691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.537340][T11109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.540638][T11109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.545361][T15437] Bluetooth: hci2: command 0x041b tx timeout [ 1250.553889][T24691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.557991][T24691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.633676][ T40] kauditd_printk_skb: 397 callbacks suppressed [ 1250.633743][ T40] audit: type=1326 audit(1755651799.956:49486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.668125][ T40] audit: type=1326 audit(1755651799.977:49487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.675221][ T40] audit: type=1326 audit(1755651799.977:49488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.681811][ T40] audit: type=1326 audit(1755651799.977:49489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.688636][ T40] audit: type=1326 audit(1755651799.977:49490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.695191][ T40] audit: type=1326 audit(1755651799.977:49491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.703739][ T40] audit: type=1326 audit(1755651799.977:49492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.711499][ T40] audit: type=1326 audit(1755651799.977:49493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.719372][ T40] audit: type=1326 audit(1755651799.977:49494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1250.734104][ T40] audit: type=1326 audit(1755651799.977:49495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1848 comm="syz.4.7940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 1251.504807][ T1876] tipc: Enabled bearer , priority 0 [ 1251.509240][ T1876] syzkaller0: entered promiscuous mode [ 1251.511432][ T1876] syzkaller0: entered allmulticast mode [ 1251.521177][ T1876] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1251.524497][ T1876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7982'. [ 1251.533917][ T1876] tipc: Resetting bearer [ 1251.544101][ T1873] tipc: Resetting bearer [ 1251.551117][ T1873] tipc: Disabling bearer [ 1251.554602][ T1880] tipc: Started in network mode [ 1251.557157][ T1880] tipc: Node identity fe0c5035a962, cluster identity 4711 [ 1251.565102][ T1880] tipc: Enabled bearer , priority 0 [ 1251.571677][ T1880] syzkaller0: entered promiscuous mode [ 1251.573771][ T1880] syzkaller0: entered allmulticast mode [ 1251.577860][ T1880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1251.580812][ T1880] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7984'. [ 1251.586801][ T1880] tipc: Resetting bearer [ 1251.589593][ T1886] tipc: Started in network mode [ 1251.591141][ T1886] tipc: Node identity 9242b8ae1216, cluster identity 4711 [ 1251.593315][ T1886] tipc: Enabled bearer , priority 0 [ 1251.595736][ T1879] tipc: Resetting bearer [ 1251.599374][ T1879] tipc: Disabling bearer [ 1251.602153][ T1886] syzkaller0: entered promiscuous mode [ 1251.609077][ T1886] syzkaller0: entered allmulticast mode [ 1251.620513][ T1886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1251.656599][ T1886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7985'. [ 1251.672300][ T1886] FAULT_INJECTION: forcing a failure. [ 1251.672300][ T1886] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.677032][ T1886] CPU: 3 UID: 0 PID: 1886 Comm: syz.4.7985 Not tainted syzkaller #0 PREEMPT(full) [ 1251.677050][ T1886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1251.677057][ T1886] Call Trace: [ 1251.677061][ T1886] [ 1251.677066][ T1886] dump_stack_lvl+0x16c/0x1f0 [ 1251.677082][ T1886] should_fail_ex+0x512/0x640 [ 1251.677098][ T1886] ? tomoyo_encode2+0x100/0x3e0 [ 1251.677113][ T1886] should_failslab+0xc2/0x120 [ 1251.677127][ T1886] __kmalloc_noprof+0xd2/0x510 [ 1251.677141][ T1886] tomoyo_encode2+0x100/0x3e0 [ 1251.677156][ T1886] tomoyo_encode+0x29/0x50 [ 1251.677170][ T1886] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1251.677185][ T1886] ? tomoyo_profile+0x47/0x60 [ 1251.677195][ T1886] tomoyo_path_number_perm+0x245/0x580 [ 1251.677207][ T1886] ? tomoyo_path_number_perm+0x237/0x580 [ 1251.677220][ T1886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1251.677235][ T1886] ? preempt_count_add+0x76/0x150 [ 1251.677253][ T1886] ? rcu_is_watching+0x12/0xc0 [ 1251.677265][ T1886] ? __fget_files+0x204/0x3c0 [ 1251.677276][ T1886] ? hook_file_ioctl_common+0x145/0x410 [ 1251.677295][ T1886] ? lock_release+0x201/0x2f0 [ 1251.677309][ T1886] ? __fget_files+0x20e/0x3c0 [ 1251.677321][ T1886] security_file_ioctl_compat+0x9b/0x240 [ 1251.677335][ T1886] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1251.677352][ T1886] __do_fast_syscall_32+0x7c/0x3a0 [ 1251.677367][ T1886] do_fast_syscall_32+0x32/0x80 [ 1251.677381][ T1886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1251.677394][ T1886] RIP: 0023:0xf7f15579 [ 1251.677402][ T1886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1251.677413][ T1886] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1251.677424][ T1886] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 1251.677430][ T1886] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1251.677437][ T1886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1251.677443][ T1886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1251.677449][ T1886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1251.677458][ T1886] [ 1251.677467][ T1886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1251.757317][ T1886] tipc: Resetting bearer [ 1251.759582][ T1898] netlink: 'syz.1.7986': attribute type 1 has an invalid length. [ 1251.766073][ T1885] tipc: Resetting bearer [ 1251.776058][ T1885] tipc: Disabling bearer [ 1251.926047][ T1902] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1251.928120][ T1902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1251.936527][ T1902] vhci_hcd vhci_hcd.0: Device attached [ 1252.240866][T31275] usb 56-1: SetAddress Request (2) to port 0 [ 1252.242874][T31275] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1252.527097][ T5988] Bluetooth: hci2: command 0x041b tx timeout [ 1252.545893][ T1903] vhci_hcd: connection reset by peer [ 1252.549962][T11106] vhci_hcd: stop threads [ 1252.551441][T11106] vhci_hcd: release socket [ 1252.553193][T11106] vhci_hcd: disconnect device [ 1252.581566][ T1916] netlink: 'syz.1.7993': attribute type 6 has an invalid length. [ 1253.189950][ T1930] bridge_slave_0: left promiscuous mode [ 1253.190051][ T1930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.197324][ T1930] bridge_slave_1: left allmulticast mode [ 1253.197338][ T1930] bridge_slave_1: left promiscuous mode [ 1253.197432][ T1930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.200634][ T1930] bond0: (slave bond_slave_0): Releasing backup interface [ 1253.201882][ T1930] bond0: (slave bond_slave_1): Releasing backup interface [ 1253.203542][ T1930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.203552][ T1930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.204277][ T1930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.204286][ T1930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.142087][T15437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1254.144677][T15437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1254.148288][T15437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1254.151894][T15437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1254.155336][T15437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1254.232810][ T1942] chnl_net:caif_netlink_parms(): no params data found [ 1254.277998][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.281469][ T1942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.283797][ T1942] bridge_slave_0: entered allmulticast mode [ 1254.286462][ T1942] bridge_slave_0: entered promiscuous mode [ 1254.289329][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.291729][ T1942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.294042][ T1942] bridge_slave_1: entered allmulticast mode [ 1254.296374][ T1942] bridge_slave_1: entered promiscuous mode [ 1254.322981][T11110] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.326153][T11110] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1254.332036][ T1942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.337653][ T1942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.357771][ T1942] team0: Port device team_slave_0 added [ 1254.360599][ T1942] team0: Port device team_slave_1 added [ 1254.379840][T11110] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.382978][T11110] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1254.388365][ T1942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.390728][ T1942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.398987][ T1942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.403169][ T1942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.406022][ T1942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.414576][ T1942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.436342][T11110] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.439481][T11110] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1254.445278][ T1942] hsr_slave_0: entered promiscuous mode [ 1254.447537][ T1942] hsr_slave_1: entered promiscuous mode [ 1254.449606][ T1942] debugfs: 'hsr0' already exists in 'hsr' [ 1254.451530][ T1942] Cannot create hsr debugfs directory [ 1254.500604][T11110] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.503565][T11110] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1254.508531][T15437] Bluetooth: hci2: command 0x041b tx timeout [ 1254.750950][T11110] bond0 (unregistering): Released all slaves [ 1254.755125][T11110] bond1 (unregistering): Released all slaves [ 1254.759068][T11110] bond2 (unregistering): Released all slaves [ 1254.810855][T11110] tipc: Left network mode [ 1254.867080][ T5961] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 1254.869792][ T5961] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5961, name: syz-executor [ 1254.874617][ T5961] preempt_count: 1, expected: 0 [ 1254.876499][ T5961] RCU nest depth: 0, expected: 0 [ 1254.878060][ T5961] INFO: lockdep is turned off. [ 1254.879964][ T5961] Preemption disabled at: [ 1254.879969][ T5961] [] schedule+0xe0/0x3a0 [ 1254.883448][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc [ 1254.883463][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1254.883470][ T5961] Call Trace: [ 1254.883474][ T5961] [ 1254.883479][ T5961] dump_stack_lvl+0x16c/0x1f0 [ 1254.883494][ T5961] __might_resched+0x3c0/0x5e0 [ 1254.883506][ T5961] ? __pfx___might_resched+0x10/0x10 [ 1254.883516][ T5961] ? pcpu_block_update+0x562/0x660 [ 1254.883532][ T5961] ? pcpu_chunk_relocate+0x126/0x190 [ 1254.883544][ T5961] vfree+0x75/0xb50 [ 1254.883560][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.883571][ T5961] ? kfree+0x24f/0x4d0 [ 1254.883580][ T5961] ? free_percpu+0x6db/0x13c0 [ 1254.883593][ T5961] futex_hash_free+0x98/0xc0 [ 1254.883606][ T5961] __mmdrop+0x33f/0x580 [ 1254.883619][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.883635][ T5961] finish_task_switch.isra.0+0x7a4/0xc10 [ 1254.883648][ T5961] ? __switch_to+0x7a5/0x11a0 [ 1254.883666][ T5961] __schedule+0x1198/0x5de0 [ 1254.883680][ T5961] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1254.883696][ T5961] ? debug_object_activate+0x2ec/0x4c0 [ 1254.883709][ T5961] ? debug_object_activate+0x1/0x4c0 [ 1254.883722][ T5961] ? __pfx___schedule+0x10/0x10 [ 1254.883735][ T5961] ? schedule+0x2d7/0x3a0 [ 1254.883745][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.883755][ T5961] ? lock_release+0x201/0x2f0 [ 1254.883769][ T5961] schedule+0xe7/0x3a0 [ 1254.883780][ T5961] schedule_hrtimeout_range_clock+0x217/0x320 [ 1254.883791][ T5961] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 1254.883818][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.883829][ T5961] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1254.883847][ T5961] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1254.883859][ T5961] ? __pollwait+0x271/0x490 [ 1254.883870][ T5961] poll_schedule_timeout.constprop.0+0xc4/0x1c0 [ 1254.883882][ T5961] do_select+0x1339/0x17e0 [ 1254.883896][ T5961] ? __pfx_do_select+0x10/0x10 [ 1254.883908][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883918][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883928][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883938][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883948][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883958][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883968][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883978][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883988][ T5961] ? __pfx_pollwake+0x10/0x10 [ 1254.883997][ T5961] ? lock_release+0x201/0x2f0 [ 1254.884010][ T5961] ? fput+0x9b/0xd0 [ 1254.884024][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.884034][ T5961] ? compat_core_sys_select+0x1dd/0x880 [ 1254.884044][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.884056][ T5961] ? compat_core_sys_select+0x685/0x880 [ 1254.884066][ T5961] compat_core_sys_select+0x685/0x880 [ 1254.884078][ T5961] ? __pfx_compat_core_sys_select+0x10/0x10 [ 1254.884089][ T5961] ? ___pte_offset_map+0x2ad/0x4f0 [ 1254.884108][ T5961] ? set_compat_user_sigmask+0x213/0x2a0 [ 1254.884119][ T5961] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1254.884131][ T5961] __ia32_compat_sys_pselect6_time32+0x2d1/0x390 [ 1254.884144][ T5961] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 1254.884159][ T5961] ? rcu_is_watching+0x12/0xc0 [ 1254.884170][ T5961] __do_fast_syscall_32+0x7c/0x3a0 [ 1254.884184][ T5961] do_fast_syscall_32+0x32/0x80 [ 1254.884198][ T5961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1254.884211][ T5961] RIP: 0023:0xf70de579 [ 1254.884220][ T5961] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1254.884231][ T5961] RSP: 002b:00000000ffcc6f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1254.884241][ T5961] RAX: ffffffffffffffda RBX: 0000000000000021 RCX: 00000000ffcc7174 [ 1254.884248][ T5961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffcc6f90 [ 1254.884254][ T5961] RBP: 00000000ffcc6fa4 R08: 0000000000000000 R09: 0000000000000000 [ 1254.884260][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.884266][ T5961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1254.884276][ T5961] [ 1255.227996][T11110] hsr_slave_0: left promiscuous mode [ 1255.229976][T11110] hsr_slave_1: left promiscuous mode [ 1255.233503][T11110] veth0_macvtap: left promiscuous mode [ 1255.235380][T11110] veth1_vlan: left promiscuous mode [ 1255.634981][T11110] IPVS: stop unused estimator thread 0... [ 1255.693310][T11110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.750261][T11110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.798857][T11110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.836382][T11110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.906421][T11110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.969816][T11110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.027379][T11110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.105325][T11110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.118560][T15437] Bluetooth: hci0: command tx timeout [ 1256.189453][T11110] bridge_slave_1: left allmulticast mode [ 1256.191421][T11110] bridge_slave_1: left promiscuous mode [ 1256.193535][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.198867][T11110] bridge_slave_0: left allmulticast mode [ 1256.200819][T11110] bridge_slave_0: left promiscuous mode [ 1256.202649][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.206653][T11110] bridge_slave_1: left allmulticast mode [ 1256.208458][T11110] bridge_slave_1: left promiscuous mode [ 1256.210619][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.214853][T11110] bridge_slave_0: left allmulticast mode [ 1256.216671][T11110] bridge_slave_0: left promiscuous mode [ 1256.218497][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.312634][T11110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.316312][T11110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.320573][T11110] bond0 (unregistering): (slave team0): Releasing backup interface [ 1256.323742][T11110] bond0 (unregistering): Released all slaves [ 1256.400724][T11110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.404480][T11110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.407714][T11110] bond0 (unregistering): Released all slaves [ 1256.479265][T11110] tipc: Left network mode [ 1256.481487][T11110] tipc: Left network mode [ 1256.780025][T11110] hsr_slave_0: left promiscuous mode [ 1256.782120][T11110] hsr_slave_1: left promiscuous mode [ 1256.784048][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.787205][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.789551][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.794252][T11110] hsr_slave_0: left promiscuous mode [ 1256.796915][T11110] hsr_slave_1: left promiscuous mode [ 1256.799135][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.801442][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.804355][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.806646][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.812424][T11110] veth1_macvtap: left promiscuous mode [ 1256.814794][T11110] veth0_macvtap: left promiscuous mode [ 1256.816571][T11110] veth1_vlan: left promiscuous mode [ 1256.818348][T11110] veth0_vlan: left promiscuous mode [ 1256.821321][T11110] veth1_macvtap: left promiscuous mode [ 1256.823198][T11110] veth0_macvtap: left promiscuous mode [ 1256.824934][T11110] veth1_vlan: left promiscuous mode [ 1256.826553][T11110] veth0_vlan: left promiscuous mode [ 1256.931734][T11110] team0 (unregistering): Port device team_slave_1 removed [ 1256.937104][T11110] team0 (unregistering): Port device team_slave_0 removed [ 1257.013045][T11110] team0 (unregistering): Port device team_slave_1 removed [ 1257.021066][T11110] team0 (unregistering): Port device team_slave_0 removed [ 1257.108953][T31275] usb 56-1: device descriptor read/8, error -110 [ 1257.481470][T31275] usb usb56-port1: attempt power cycle [ 1257.691114][T11110] bridge_slave_1: left allmulticast mode [ 1257.693006][T11110] bridge_slave_1: left promiscuous mode [ 1257.695244][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.698439][T11110] bridge_slave_0: left allmulticast mode [ 1257.700591][T11110] bridge_slave_0: left promiscuous mode [ 1257.702857][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.771137][T11110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.774710][T11110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.778447][T11110] bond0 (unregistering): Released all slaves [ 1257.902748][T11110] hsr_slave_0: left promiscuous mode [ 1257.905571][T11110] hsr_slave_1: left promiscuous mode [ 1257.908020][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.911486][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.940609][T11110] team0 (unregistering): Port device team_slave_1 removed [ 1257.945778][T11110] team0 (unregistering): Port device team_slave_0 removed [ 1258.033473][T31275] usb usb56-port1: unable to enumerate USB device VM DIAGNOSIS: 00:37:38 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc900030a6d58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffa18925e9c CR3=000000004b648000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000000001 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005560eeac3323 00005560eeac3323 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa18c56050 00007ffa18c550c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa18c56580 00007ffa18c55b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa189580c0 00007ffa18c56ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa18c94da0 00007ffa18c555f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa189586b0 00007ffa189580c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa18c56ab0 00007ffa18c56580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa18c55b20 00007ffa18c56050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000042d554c RBX=0000000000000001 RCX=ffffffff8b908bf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f538c135e9c CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000002004088 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c4a58f0 00007f538c4a5310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c466050 00007f538c4650c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c466580 00007f538c465b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c1680c0 00007f538c466ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c4a4da0 00007f538c4655f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c1686b0 00007f538c1680c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c466ab0 00007f538c466580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f538c465b20 00007f538c466050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6f7365722f6574 6174732d6b6f6f68 2f6463706368642f 6e75722f7261762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365722f65 746174732d6b6f6f 682f646370636864 2f6e75722f726176 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 743d646572756769 666e6f635f666900 6b6e696c2e303168 74652e666e6f632e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff1100a294c03 RBX=0000000000000002 RCX=ffffffff8b870326 RDX=00007fdf8e638000 RSI=0000564f1e407fff RDI=0000000000000006 RBP=ffff8880514a6018 RSP=ffffc90006ff75a8 R8 =0000000000000000 R9 =0000000000000002 R10=000000000000000b R11=0000000000000001 R12=000000000000000b R13=0000000000000002 R14=00007fdf8e638000 R15=0000564f1e407fff RIP=ffffffff81bb0760 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdf8e63d000 CR3=000000005c84d000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696d6f74616269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000248 0000000000007db8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000186b724 RBX=0000000000000003 RCX=ffffffff8b908bf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003862000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801c310000 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055deab95ef40 CR3=000000004bbaf000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39b220721bfa352b e3855e2372932669 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d11b749727408b16 eedd550d76afa25e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86d2eb8fe5926b4e e70af01b040ea259 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de346dc54080a11c 9fb3c279848d7588 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002f8 e44999bc00bfd9ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002f8000002f8 00000000000002f8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000e32a5694 00c5e982e2e9b982 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e44ec4b0035af6ac 0000000000218d12 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e468a4abd83d42e 396107559d399fc1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4fec2069bbe6857 726ed443336fdc51 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=49a02be977258a08 a382a144a762d5d3 49a02be977258a08 a382a144a762d5d3 49a02be977258a08 a382a144a762d5d3 49a02be977258a08 a382a144a762d5d3 ZMM18=55ef5fd2ed428ffe 79840253395e2ef2 55ef5fd2ed428ffe 79840253395e2ef2 55ef5fd2ed428ffe 79840253395e2ef2 55ef5fd2ed428ffe 79840253395e2ef2 ZMM19=7e3e000000000000 0000000000000004 7e3e000000000000 0000000000000003 7e3e000000000000 0000000000000002 7e3e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 008077a000ffffff ff82164d6d000000 0000000000000000 0080800000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080779000ffffff ff82164d6d000000 0000000000000000 0080800000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080778000ffffff ff82164d6d000000 0000000000000000 0080800000000000 ZMM24=07e8bf7407e8bf74 07e8bf7407e8bf74 07e8bf7407e8bf74 07e8bf7407e8bf74 07e8bf7407e8bf74 07e8bf7407e8bf74 07e8bf7407e8bf74 07e8bf7407e8bf74 ZMM25=77b080a377b080a3 77b080a377b080a3 77b080a377b080a3 77b080a377b080a3 77b080a377b080a3 77b080a377b080a3 77b080a377b080a3 77b080a377b080a3 ZMM26=56798ea756798ea7 56798ea756798ea7 56798ea756798ea7 56798ea756798ea7 56798ea756798ea7 56798ea756798ea7 56798ea756798ea7 56798ea756798ea7 ZMM27=6d1c0dac6d1c0dac 6d1c0dac6d1c0dac 6d1c0dac6d1c0dac 6d1c0dac6d1c0dac 6d1c0dac6d1c0dac 6d1c0dac6d1c0dac 6d1c0dac6d1c0dac 6d1c0dac6d1c0dac ZMM28=000001f0000001ef 000001ee000001ed 000001ec000001eb 000001ea000001e9 000001e8000001e7 000001e6000001e5 000001e4000001e3 000001e2000001e1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0d6e00000d6e0000 0d6e00000d6e0000 0d6e00000d6e0000 0d6e00000d6e0000 0d6e00000d6e0000 0d6e00000d6e0000 0d6e00000d6e0000 0d6e00000d6e0000