last executing test programs: 10m36.593355606s ago: executing program 32 (id=1448): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0xa, 0x3, 0x87) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x400000, 0x4, 0xaccc, 0xfc}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2070bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffec}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x72}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x4048000) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m50.003777573s ago: executing program 33 (id=2554): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xfffe, @private2={0xfc, 0x2, '\x00', 0x5}, 0x6f}}}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@updsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast1, 0x4d2, 0x2b}, @in=@rand_addr=0x64010101, {}, {0x4f5, 0x0, 0x0, 0xcb66}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x42}, [@encap={0x1c, 0x4, {0xad4ab344a903da57, 0x4e21, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}}]}, 0x10c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') 8m12.140304231s ago: executing program 34 (id=2966): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) r2 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r2, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) preadv(r2, &(0x7f0000000380), 0x0, 0x80000000, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x200, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x200, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x130, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x103, 0xc, "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"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x4}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x4, 0x2, 0xfffffffd}}, 0x4, 0x0, 0xfe}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000010440)={r5, 0xe0, &(0x7f0000010340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000010140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000010180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000101c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000010200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000010280), &(0x7f00000102c0), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000010300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000104c0)={0xc, 0x12, &(0x7f0000010000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x7, 0x4, 0x4, 0x3, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000100c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x30, '\x00', r9, @fallback=0x11, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000010100)={0x3, 0xa, 0x1, 0x7}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000010480)=[r5], 0x0, 0x10, 0x5}, 0x94) 6m39.948487938s ago: executing program 35 (id=4014): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$mouse(&(0x7f00000002c0), 0x2800000000000000, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x802}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r3, 0x2000, 0x0) 6m35.832512749s ago: executing program 36 (id=4046): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in6}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff06}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff06}, 0x48) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x310) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x310) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020025bd7000fddbdf25030000000500040002000000080008000a01010108000b00", @ANYRES32=r3, @ANYBLOB="af442404"], 0x30}, 0x1, 0x0, 0x0, 0x34008090}, 0x4044840) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r5 = fanotify_init(0x0, 0x80000) fanotify_mark(r5, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e4fffffffffffbff", "9da15200", "b6730761", "f3ffffffffffffff"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e4fffffffffffbff", "9da15200", "b6730761", "f3ffffffffffffff"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="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", 0xfc) (async) write(r7, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000b80000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfde89d334b2b6af2a8d03f2329622943283f4b9e611183b102b2b8f5566791802e07f050cae2015180a94a27b1d7b02d3f4e84f2013cd1890058a10000c880ac801fe4af00004995c7a596dae744f0d4794eedfca92c09d776e7a90ab79a6f00a1960000", 0xfc) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4785babf00", '\x00', "e54f2a4000"}, 0x28) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r8, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f046}) (async) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f046}) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x2, 0xce, 0x6, 0x1}}) sendto$inet6(r0, &(0x7f0000000300)="0e", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000300)="0e", 0x1, 0x0, 0x0, 0x0) 6m8.896264906s ago: executing program 37 (id=4141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc848}, 0x20004800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, 0x36, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x1c}}, 0xc000) 6m7.904334998s ago: executing program 4 (id=4302): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d76697274696f2c7665727369112be051b9a846f0302e1b345a"]) 6m7.774774951s ago: executing program 4 (id=4304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c5) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x80000000) (async) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x10000000) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) (async) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x5, 0x0, 0x9}) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x800000000000000, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x8, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000002c0)=[@clear_death], 0x0, 0x0, 0x0}) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000b33ce46cab20391f77"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) (async) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) (async) close(r8) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x60, 0x10, r10, 0x0, 0x0, 0x0, 0x40000022}) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 6m7.469652536s ago: executing program 4 (id=4308): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x530dbdb7c0738e9c, 0x2c, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f0000000400)={0x5, 0x2, 0x660, 0x5a9}, 0x10}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m6.984975824s ago: executing program 4 (id=4314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x200001, 0x1c8) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x3, 0x6, 0x0, 0x400, 0x4, 0x540100, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x700, 0x6, 0x188011f, r7}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r10, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route_sched(r11, 0x0, 0x44080) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r12 = userfaultfd(0x801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0xfff2}, {0x0, 0xfff3}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x20008054) close(0x3) 6m6.024484739s ago: executing program 4 (id=4322): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x100, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) r2 = timerfd_create(0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x26081, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x2020}, {r3, 0x5c0}], 0x2, 0x0, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@filename='./file0\x00', r1, &(0x7f0000000440)) r4 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0420"], 0xa) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 6m5.52653503s ago: executing program 4 (id=4323): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd28, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c141}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000a00)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x400, 0x208, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0xffffffff, 0xff000000, 0x4, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0xe, 0xfffd, 0x1, 0x0, 0x6, 0x4, 'vxcan1\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x102}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d22cf9c3313ad41900b9cc958044db636bbb67a12fdcebac5f852ce42401"}}, {{@arp={@remote, @remote, 0x0, 0xffffffff, 0x2, 0xb, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xeaba, 0x0, 0x5, 0x59, 0x81, 0x2, 'ip6erspan0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x0, {0x800}}}}, {{@arp={@loopback, @broadcast, 0x0, 0xff000000, 0x9, 0x7, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x5713f7281883830c, 0xff]}}, 0x400, 0x3, 0xc, 0x4, 0x0, 0x8, 'pim6reg1\x00', 'pimreg0\x00', {0x1fe}, {}, 0x0, 0x24}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @empty, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f00000000c0), 0x4) r7 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r8 = shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r9, &(0x7f0000000900)}, 0x20) shmctl$SHM_UNLOCK(r7, 0xc) shmdt(r8) 5m49.490680952s ago: executing program 38 (id=4323): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd28, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c141}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000a00)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x400, 0x208, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0xffffffff, 0xff000000, 0x4, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0xe, 0xfffd, 0x1, 0x0, 0x6, 0x4, 'vxcan1\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x102}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d22cf9c3313ad41900b9cc958044db636bbb67a12fdcebac5f852ce42401"}}, {{@arp={@remote, @remote, 0x0, 0xffffffff, 0x2, 0xb, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xeaba, 0x0, 0x5, 0x59, 0x81, 0x2, 'ip6erspan0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x0, {0x800}}}}, {{@arp={@loopback, @broadcast, 0x0, 0xff000000, 0x9, 0x7, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x5713f7281883830c, 0xff]}}, 0x400, 0x3, 0xc, 0x4, 0x0, 0x8, 'pim6reg1\x00', 'pimreg0\x00', {0x1fe}, {}, 0x0, 0x24}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @empty, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f00000000c0), 0x4) r7 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r8 = shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r9, &(0x7f0000000900)}, 0x20) shmctl$SHM_UNLOCK(r7, 0xc) shmdt(r8) 2m48.039453377s ago: executing program 9 (id=6042): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x40400c1) 2m47.986845675s ago: executing program 9 (id=6043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000084000000040000000900000000000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r1, r2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x400000}}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8ce76d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc8266a7bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c0ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f7d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69daaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r9, r10, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000440)={'\x00', 0x64, 0x2, 0x7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r11, 0x545c, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_setup(0x2182, &(0x7f0000000540)={0x0, 0x9b91, 0x1, 0x5, 0x54}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x40, 0x6000, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r15 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r16 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r16, 0x0, &(0x7f0000000180)) syz_ublk_add_dev(r1, 0x0, r5, r14, &(0x7f00000001c0)={0x2e, 0x20, 0x0, r15, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x3, 0x5f4, 0x0, 0x0, 0x1000, 0xee4, r16, 0x0, 0xd2}}}, &(0x7f0000000280)) 2m47.848646411s ago: executing program 9 (id=6044): clock_settime(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x7, 0xff, 0x80000001, 0x9, 0xfffffffd}, &(0x7f0000000240)=0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r3, &(0x7f0000000bc0)=""/4096, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffe9d, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a010200000000000000000200fffc040004800900010073797a3000000073797a32000000001400000011000100000000fe9e2c69e500000000", @ANYRESOCT=r2], 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0xc4) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="400000001f00010027bd703f6cf521a98bd500fedbdf25ac1e0001000000000000a10000000000000004d6020033007f00000100000000000000000000000002", @ANYRES64=r1, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40040) 2m47.847452602s ago: executing program 9 (id=6045): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0xc3, 0x8, 0x1) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000fee000/0x10000)=nil, 0x10000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) 2m47.549793482s ago: executing program 9 (id=6047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x100}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44044}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x1, "453738c30bfbd0928027ebbf5f9e9ca5b200f6095e0dd4d757ecc5d94c1dea67"}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0) 2m47.46285085s ago: executing program 9 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0xfd) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x10}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x10}) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r6, 0x4) (async) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r7, 0x4) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) lseek(r8, 0x101, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYBLOB="010026c170000400000015000000180001801400020064756d6d7930", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000180), 0x3, 0x18000) ioctl$XFS_IOC_FSCOUNTS(r11, 0x80205871, &(0x7f00000001c0)) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x5) 2m35.570190434s ago: executing program 7 (id=6141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0x6) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setresuid(0x0, 0xffffffffffffffff, 0xee01) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000080)=0x8000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYBLOB="d10304c61beda50ac711fc6157b181ebcbc8ff58741abfd4839a480d54ea6094d8e0f3d07635ce586bb2744c222186045701a13f16aaeb45767485870e3104b238694849520bba6cbc99f182450a3cf5c0457b6e84739da729b764d6760826422a5ac699a5a0321ea57d2f50d0a8a273c7b1d7663550212ddf95216f8f14a42458d5794b4e52aeea9c96ccfdf874bff804f07e31"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) 2m35.431146372s ago: executing program 7 (id=6142): r0 = socket(0x2b, 0x80801, 0x1) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x200048c0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20008040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000070001000700000005000500020000000c000780080006400000000011000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00148008000140"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) getsockname$packet(r3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0xa4, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2m35.376957905s ago: executing program 7 (id=6144): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r1, 0xc}, &(0x7f0000000140)=0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) (async) close(0x3) 2m34.447707182s ago: executing program 7 (id=6148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, &(0x7f0000000080)=@gcm_256={{0x303}, '\x00', "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "71856135", 'N_3\t\x00\x00\x008'}, 0x38) (async, rerun: 64) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000002c0)="240000001a005f0400f9f407000904018010200000000009000000000800010000000000", 0x24) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x7a}, '.\x00'}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0x800000d, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 2m31.40563507s ago: executing program 39 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0xfd) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x10}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x10}) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r6, 0x4) (async) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r7, 0x4) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) lseek(r8, 0x101, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESHEX=r0, @ANYBLOB="010026c170000400000015000000180001801400020064756d6d7930", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000180), 0x3, 0x18000) ioctl$XFS_IOC_FSCOUNTS(r11, 0x80205871, &(0x7f00000001c0)) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x5) 2m26.549706129s ago: executing program 7 (id=6149): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x4, {0xffffffffffffffff}, {0xee00}, 0x80, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x4, 0x4038, {r1}, {r2}, 0x800, 0x100000001}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000180)={0x0, 0x0, 0x8116}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000340)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000400)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000004c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000005c0)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f00000006c0)={0x3, 0x89a67e744da04fd7}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f00000006c0)={0x3, 0x89a67e744da04fd7, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000700)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000780)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000800)={0x4, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000840)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000880)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000008c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000001200)={r3, 0x0, {0x30, 0xa, &(0x7f0000001000)=[{0x0, r4, 0x3, 0x7, 0xffffffff, {0x10, 0x4, &(0x7f0000000300)=[{0x1, r5, 0x7}, {0x80000000, r6, 0x100}, {0x80000001, r7, 0x7}, {0xff, r8, 0x7}]}}, {0x0, r9, 0x6, 0x401, 0x2, {0x10, 0x6, &(0x7f0000000500)=[{0x0, r10, 0x4}, {0x80000000, r11, 0x7fffffff}, {0x1, r12, 0x5b422e21}, {0x0, r13, 0x9}, {0x1, r14}, {0x1, r15, 0x6}]}}, {0x10000000, 0x0, 0x4, 0x8, 0x9, {0x10, 0x2, &(0x7f0000000600)=[{0x0, r16, 0x1000}, {0x0, r17, 0xffffffffffffd09d}]}}, {0x0, r18, 0x8, 0x3, 0xf0, {0x10, 0x0, &(0x7f0000000680)}}, {0x2, r19, 0x1, 0x3, 0x8, {0x10, 0x3, &(0x7f00000007c0)=[{0xc00000fe, r20, 0xffffffffffffffbf}, {0x80000000, r21, 0x7}, {0x80000000, r22}]}}, {0x4, r23, 0x1f, 0xc6f, 0x0, {0x10, 0x6, &(0x7f00000009c0)=[{0x38e4683280032809, r24, 0x2}, {0x0, r25, 0xa}, {0x1, r26, 0x1800000000000000}, {0x1, r27, 0x6}, {0x80000000, 0x0, 0xd89f}, {0x1, 0x0, 0x1}]}}, {0x2, 0x0, 0x8000, 0x6, 0x5, {0x10, 0x2, &(0x7f0000000b00)=[{0x0, 0x0, 0xcfb8}, {0x0, 0x0, 0x80000000}]}}, {0x4, 0x0, 0x0, 0x8, 0x1, {0x10, 0x4, &(0x7f0000000c40)=[{0xff, 0x0, 0x6}, {0x1, 0x0, 0x5}, {0x80000000, 0x0, 0x63b6}, {0x80000000, 0x0, 0x24e4a36e}]}}, {0x10000000, 0x0, 0x5, 0x1, 0x4, {0x10, 0x6, &(0x7f0000000e40)=[{0x1, 0x0, 0x400000000}, {0x0, 0x0, 0x100000001}, {0x80000000, 0x0, 0x1}, {0xff, 0x0, 0x101}, {0x1, 0x0, 0x5}, {0x1, 0x0, 0x6}]}}, {0x1, 0x0, 0x5, 0x2, 0x1ff, {0x10, 0x5, &(0x7f0000000f80)=[{0x0, 0x0, 0x1000}, {0x0, 0x0, 0x9}, {0x80000000, 0x0, 0x6}, {0x80000000}, {0x0, 0x0, 0x5}]}}]}}) (async) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000001200)={r3, 0x0, {0x30, 0xa, &(0x7f0000001000)=[{0x0, r4, 0x3, 0x7, 0xffffffff, {0x10, 0x4, &(0x7f0000000300)=[{0x1, r5, 0x7}, {0x80000000, r6, 0x100}, {0x80000001, r7, 0x7}, {0xff, r8, 0x7}]}}, {0x0, r9, 0x6, 0x401, 0x2, {0x10, 0x6, &(0x7f0000000500)=[{0x0, r10, 0x4}, {0x80000000, r11, 0x7fffffff}, {0x1, r12, 0x5b422e21}, {0x0, r13, 0x9}, {0x1, r14}, {0x1, r15, 0x6}]}}, {0x10000000, 0x0, 0x4, 0x8, 0x9, {0x10, 0x2, &(0x7f0000000600)=[{0x0, r16, 0x1000}, {0x0, r17, 0xffffffffffffd09d}]}}, {0x0, r18, 0x8, 0x3, 0xf0, {0x10, 0x0, &(0x7f0000000680)}}, {0x2, r19, 0x1, 0x3, 0x8, {0x10, 0x3, &(0x7f00000007c0)=[{0xc00000fe, r20, 0xffffffffffffffbf}, {0x80000000, r21, 0x7}, {0x80000000, r22}]}}, {0x4, r23, 0x1f, 0xc6f, 0x0, {0x10, 0x6, &(0x7f00000009c0)=[{0x38e4683280032809, r24, 0x2}, {0x0, r25, 0xa}, {0x1, r26, 0x1800000000000000}, {0x1, r27, 0x6}, {0x80000000, 0x0, 0xd89f}, {0x1, 0x0, 0x1}]}}, {0x2, 0x0, 0x8000, 0x6, 0x5, {0x10, 0x2, &(0x7f0000000b00)=[{0x0, 0x0, 0xcfb8}, {0x0, 0x0, 0x80000000}]}}, {0x4, 0x0, 0x0, 0x8, 0x1, {0x10, 0x4, &(0x7f0000000c40)=[{0xff, 0x0, 0x6}, {0x1, 0x0, 0x5}, {0x80000000, 0x0, 0x63b6}, {0x80000000, 0x0, 0x24e4a36e}]}}, {0x10000000, 0x0, 0x5, 0x1, 0x4, {0x10, 0x6, &(0x7f0000000e40)=[{0x1, 0x0, 0x400000000}, {0x0, 0x0, 0x100000001}, {0x80000000, 0x0, 0x1}, {0xff, 0x0, 0x101}, {0x1, 0x0, 0x5}, {0x1, 0x0, 0x6}]}}, {0x1, 0x0, 0x5, 0x2, 0x1ff, {0x10, 0x5, &(0x7f0000000f80)=[{0x0, 0x0, 0x1000}, {0x0, 0x0, 0x9}, {0x80000000, 0x0, 0x6}, {0x80000000}, {0x0, 0x0, 0x5}]}}]}}) 2m26.549460546s ago: executing program 7 (id=6184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) sync() 2m10.471087027s ago: executing program 40 (id=6184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) sync() 2m6.012134414s ago: executing program 5 (id=6376): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x1600) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x1600) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x200000) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x5, 0x1, 0x4, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x5, 0x1, 0x4, 0x2}) 2m5.933009933s ago: executing program 5 (id=6379): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1, {0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@assoc={0x18, 0x117, 0x4, 0x2b7}], 0x18, 0x4090}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000540)={{0x77359400}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x800, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4008000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000740), 0x0, 0x400c0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 2m4.976242704s ago: executing program 5 (id=6400): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000df2896f97b7502cc532c59ade81ab52c390000000000000000000006040000000d009e1c670c32f9262be5799941e83ea8fc7786709bbe032058645e9c884e441ae8fc78635d5a7360b866aafe4a4698c379e5f1816b0762420fa4c67297be526825a8b02279abfe58f630ff3788884edb944919f493479aa6ee95f4a85465df405bbc586eacb2534c51ea6f90091a0117c79ea9129f5f9a996f7cf748a73543c9"], 0x0, 0xfffffffffffffe50}, 0x20) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffff3, 0x2a4041) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x4208, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='wl', 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000180)=[r7], 0x0, 0x0, 0x0, 0x0, 0x6}) (async, rerun: 32) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000005f00)={0x1bc, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x746559c6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0xe5, 0xc, "8d8d431498bdda30e8e194ac54c553c00fd122b551db1b488bc781ba20d5dd44eed32d86e1428142d5e052159b40d072e40c3f9f277712de617ee140ccb8eca2b3689acdc78f24017fe1b21534e44dd08b552070b236b3c244d1197eaf7c457b3d115235b502db86f26555fa3be4724eac1cb0a07d475e15d1f96513ac3c2a07a8ac91bbefe7dc51378443a1e624500addc582958cb54e3c7e37e132a47343a07e3b378a69dd5949f8c786732afc904352f69bed6052ccf345e144521022fcedf32a6aa481d1a7d0b7a0d5b01fe4b03182252653f7c9b3a8fea6091a47a37cb6ea"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a6b1661}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47a2ebdd}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20024010}, 0x8040) (rerun: 32) r8 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x8, 0x3a, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x5) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0), 0x4) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f0000000100)) (async) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r9, 0x0) 2m4.684903885s ago: executing program 5 (id=6407): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000000080000000000000002000000030000000000000000000004000000000000"], 0x0, 0x3e}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) (async) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x15, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) (async) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000000c0)={0x0, 0x200, 0xf, @multicast, 'veth1_to_batadv\x00'}) 2m4.579268201s ago: executing program 5 (id=6408): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x110) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x17, r8, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000300)={"230002e6e7d4b198325d6b628cd78ed894e8cd3f70db6e15ba56f5bafd7b", 0x6, 0x12000, 0x7, [0x7, 0x2, 0x8, 0x7, 0x8001, 0x7, 0x12d, 0x8a0d, 0x5, 0x7, 0x4, 0x8000, 0x3, 0x200000, 0x9, 0x6, 0x3, 0x6]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) 2m4.297354951s ago: executing program 5 (id=6414): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x101000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x24, 0x0}) accept4(r0, 0x0, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x35dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098c9}, 0x4080) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m53.205179719s ago: executing program 6 (id=6526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111ab000000000085100000020000008500000000950008101800033d881f253983b2f81b887234033519d7862ddf71bbdce9c1ac0e6376212e9823d92350d324fb426261e90000b8b4895ff4d73fe757f4f15985454d10e3d90700000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcd, &(0x7f0000000340)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback=0x54, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000240)=0x4) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000000)) 1m53.14107032s ago: executing program 6 (id=6529): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040d4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, &(0x7f0000000380)=ANY=[@ANYBLOB='mpde=01000*00000000000000004,\x00']) socket$packet(0x11, 0x3, 0x300) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x2c) socket$netlink(0x10, 0x3, 0xe) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r7) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r11) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5, 0x0, 0x6c}, [@mark={0xc}]}, 0x47}}, 0x0) socket$alg(0x26, 0x5, 0x0) 1m52.883753808s ago: executing program 6 (id=6531): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1, 0xd}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000140)=0x7f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x296000, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@private0, @dev={0xfe, 0x80, '\x00', 0x3c}, @empty, 0x1, 0xa, 0x2, 0x0, 0x5, 0x90088, r4}) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f00000002c0)={0x9, 0x7, 0x8001, 0x5be4e5a2, 0x2}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000300)={0x15, 0x2, {0x40, @usage=0x9, 0x0, 0x6, 0xf, 0xfc12, 0x7, 0xfffffffffffffde9, 0x2, @struct={0xfffffff9, 0x80000000}, 0x4, 0x6, [0x7, 0x1, 0x0, 0x7ff, 0x1]}, {0x2, @usage=0x9, 0x0, 0x0, 0x7, 0x7ad, 0x9, 0x0, 0x88c, @struct={0x7c6, 0x2}, 0x8, 0x7, [0xd58, 0xc000000000000000, 0x8596, 0x1000, 0x8, 0x8]}, {0xeb, @struct={0xe4c7}, 0x0, 0x5, 0x4, 0x6, 0x4, 0x1, 0xa, @struct={0x6}, 0x5fc, 0x81, [0x3, 0x1, 0x8, 0x2, 0x0, 0x4]}, {0x4, 0x8000000000000001, 0x40}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000700)={r5, 0xd, 0x1, [0x9, 0x3, 0xb144937, 0xd1, 0x7], [0x1b47, 0x3, 0x3, 0x2, 0x4, 0x2, 0x5, 0x8, 0x8000000000000000, 0x6, 0x62, 0x5, 0xa32, 0x2, 0x6, 0x6507db17, 0x4, 0x4e5, 0x9, 0x8c3, 0x7, 0x46e0000000000000, 0x400, 0x0, 0x5, 0xffffffff, 0x7, 0x7, 0x79, 0x100000001, 0x20, 0x8, 0x2, 0xa, 0xca06, 0x10001, 0x9, 0xc5f, 0x5, 0x7deca9d7, 0x100000000, 0x400, 0xaa5, 0xffff, 0x4, 0x2, 0x5, 0x4, 0x8, 0x2, 0xbb0, 0x8, 0x7, 0x6, 0x0, 0x3, 0x2, 0xa, 0x7, 0x1, 0x101, 0x1, 0x1f56, 0x401, 0x4, 0xfffffffffffffffb, 0xd8e, 0x4, 0xfffffffffffffff6, 0x0, 0x1, 0xfff, 0x6, 0x8, 0x6, 0x401, 0x3, 0x2, 0xc, 0xf62, 0x6, 0x7, 0x0, 0x6, 0x4, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1c5, 0x7c23, 0x5, 0x1, 0x4, 0x8, 0x2, 0x5, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0xf, 0x9, 0x9, 0x7, 0x1, 0x7ff, 0x21f, 0x3a, 0x2, 0x2, 0x200, 0x401, 0x7c, 0x0, 0x7fffffff, 0x7, 0x101]}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001dc0)={{'\x00', 0x1}, {0x9f96}, 0x104, 0x0, 0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)="3bbd75bce829506c95e813bcce7febf142b6db38d45630a9c82403e29c8dc5c055b3253bbcf4a3eea1ddff782da7843dd4f64bf0e48c2a1906b03d03f5bac216fd1e500ca446a5386f65a96a2a6ad5030e3e5236a5ebc00c", 0x58, 0x0, &(0x7f0000000c40)={0x2, 0x1103, {0x0, 0xc, 0x1000, "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", 0xf6, "75b54f4df4b7214075d526209265fd20f63349812d8cd0f81234342b20a714c7542d3cf98f4a5ff785f264c8a9454ae45368cb125a4fbcf3418fca1e23545948eb66e22592a99dc5ec6b42683ba38312f2d0e19c650b7208a4514659d9338d21159ddb212370c9b1e8d2e03ebf243be2034d67c25baf663f03ed4ea4b4618781af12c5119690404aa2bad870c038095be93327d1401c202df80af818e2162359a38171cc8fd360b4fe25e3ef352d4a73b64e2eea5084b3186d9bf2c856bf7b43093dfd5868be7f245178dc97efb5dc17abf69eaf24f0b60bac809db6964f4d4748091bacf547e11d37d0d5a89b1595924cc71a4e8454"}, 0x4c, "587879a8e6a8eb1035d0e71a665567689b8983758e74badf20c21c1a02745134f790c9d077af469d774f17ffedf30dfbf8d65779b10f3c9727ad5f19cd503a17d7f4754bce33a4958440b0b8"}, 0x115b}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000001e40)={0x7, 0x7, 0x2}, &(0x7f0000001e80)=0x28) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000001f40)={0x6976d3ef, 0x48, '\x00', 0x0, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r3) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r3, 0xc0106450, &(0x7f0000001fc0)={0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r3, 0xc010644d, &(0x7f0000002040)={r7, 0x0, &(0x7f0000002000)='/dev/sequencer2\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000002080)) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r8, 0x40106e8c, &(0x7f00000020c0)=[0x6]) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000002100)={0x3ff, 0x3, 0x7, 0x7, 0x4, "f37a05839a5d2cb27cdd71dd0b01ea478d5743"}) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000002140)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000021c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x44, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000002300)) mount$bind(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), 0x3010c44, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000002400)={0x3, "a2a76d"}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r3) 1m52.881254922s ago: executing program 6 (id=6533): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x5000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000300)={[{}]}) 1m52.725426478s ago: executing program 6 (id=6534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0300ffff0000", 0x6}]) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3eb}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x8418101, 0x0, 0x8, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x6dbf}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000140)) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r11 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x101, 0x41) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r13, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r12, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x40005) openat$cgroup_ro(r11, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) 1m49.237688946s ago: executing program 6 (id=6558): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0d00000005000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000023deb9dcae99a95b1cdf980208243b6f6b43295f187350597ba0905884f6e9fccdf0c623753e462e2c16239e1a8b81285eb2f8bd1b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r3}, 0x38) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x9, 0x3, 0x89f80000, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0x247, 0x3, 0x6, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x5, 0x10, 0x3, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x3, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xf, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0xffffffff, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x401, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x3, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_TDX_INIT_VCPU(r5, 0xc008aeba, &(0x7f0000000300)={0x2, 0x0, 0x33fb}) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000200)=0x17) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m48.214349822s ago: executing program 41 (id=6414): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x101000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x24, 0x0}) accept4(r0, 0x0, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x35dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098c9}, 0x4080) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m40.888795164s ago: executing program 1 (id=6597): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) 1m40.888538546s ago: executing program 1 (id=6598): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000002c0)) 1m40.796480529s ago: executing program 1 (id=6599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) close(r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="051600ee740f00000108000a0000000000bd83f7d125c3b500"/35, @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0xfffff000, 0x0, 0x4008}, 0x22010008) 1m40.717904287s ago: executing program 1 (id=6600): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002100010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03c4f079d8349395"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'pim6reg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70fd27, 0x25dfdbbe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x2, 0xa}, {0xffe0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getdents64(r3, 0x0, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) getdents64(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m40.214843212s ago: executing program 1 (id=6603): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000004c0)={0x1, &(0x7f00001a2dc0)=[{0x8000001, 0xf00, 0x0, 0x2, 0x76d36a65}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/oops_count', 0x2a0201, 0x1) read$alg(r2, &(0x7f0000000e00)=""/59, 0x3b) write$sndseq(r2, &(0x7f00000029c0)=[{0xf9, 0x6c, 0xb4, 0x14, @time={0x0, 0x9}, {0x81, 0xe0}, {0xf9, 0x8}, @raw32={[0xfffffff7, 0x80]}}, {0x0, 0x84, 0x1, 0x2, @tick=0x6a, {0x8, 0xfb}, {0x9, 0x4}, @connect={{0x4, 0x3}, {0x7, 0x1}}}, {0xb, 0x8, 0x0, 0xf9, @time={0xffffffff, 0x4}, {0x2e, 0x4}, {0x4, 0x8}, @raw32={[0xfffffd07, 0xb, 0x8]}}], 0x54) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="03"], 0xfd1, 0x800) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000002980)={&(0x7f0000001040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000001080)=""/43, 0x2b}, {&(0x7f00000010c0)=""/38, 0x26}, {&(0x7f0000002a40)=""/227, 0xe3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/178, 0xb2}, {&(0x7f0000002300)=""/221, 0xdd}, {&(0x7f0000002400)=""/186, 0xba}], 0x7, &(0x7f00000027c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)}, &(0x7f0000002580)}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x2}, &(0x7f00000025c0)=0x8, &(0x7f0000002600)=0x2bf734d0, 0x6, 0x1, 0x5, 0x4, 0x68, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @cswp={0x58, 0x114, 0x7, {{0x10e5, 0x6}, &(0x7f0000002640), &(0x7f0000002680)=0x5, 0x10, 0x1, 0xffffffffffffff4f, 0x100000001, 0x62, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x57, 0x5}, &(0x7f00000026c0)=0xfffffffffffffffa, &(0x7f0000002700)=0xe5, 0xffffffffffff674f, 0x1, 0x7, 0xffffffffffffffff, 0xd, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xb}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002740)=""/2, 0x2}, &(0x7f0000002780), 0x1}}], 0x198, 0x4080050}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@gettfilter={0x6c, 0x2e, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0xffff, 0x7}, {0x7, 0xe}, {0xffe0, 0x6}}, [{0x8, 0xb, 0xa0000000}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x14b6}, {0x8, 0xb, 0x9c96}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r10 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r10, 0x39d7, 0x1, 0x1, 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304fcfffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000c0000075005001c0012800b00010062726964676500000c00028008001a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m39.85253879s ago: executing program 1 (id=6606): r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) r1 = syz_usbip_server_init(0x2) write$usbip_server(r1, &(0x7f0000002b40)=@ret_unlink={{0x4, 0x6}, {0x8}}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xf) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\xde\xba\x10Jn\xc24\x15\x1c\xe9\xa8L\xf0\xa36nG\x0e\x02\x80z\x87\fa\x00\x13g\xca\xec\xe8\xa4\xd3\xb3\xfa\xbar}\xe2\xbft\x9e\x15\x9e\x7fj\x16{c', &(0x7f00000004c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\x02\x00\x00\x00\x00\x00\x00\x00\x95Kv\xc1\xf0\x8d\x02\xd7\xd5\xb6\xe3\x82\xa9\fX\xa4c\xc2A\'bW\xbdD>\xc1\xe0\xdd\f[K\xa3\xe7\xea\xe3\xe5\xe8\xaa_.\xba_\xed%\x9c\xa9', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1\x00\x00\x00') (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) 1m39.781140512s ago: executing program 42 (id=6606): r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) r1 = syz_usbip_server_init(0x2) write$usbip_server(r1, &(0x7f0000002b40)=@ret_unlink={{0x4, 0x6}, {0x8}}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xf) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\xde\xba\x10Jn\xc24\x15\x1c\xe9\xa8L\xf0\xa36nG\x0e\x02\x80z\x87\fa\x00\x13g\xca\xec\xe8\xa4\xd3\xb3\xfa\xbar}\xe2\xbft\x9e\x15\x9e\x7fj\x16{c', &(0x7f00000004c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\x02\x00\x00\x00\x00\x00\x00\x00\x95Kv\xc1\xf0\x8d\x02\xd7\xd5\xb6\xe3\x82\xa9\fX\xa4c\xc2A\'bW\xbdD>\xc1\xe0\xdd\f[K\xa3\xe7\xea\xe3\xe5\xe8\xaa_.\xba_\xed%\x9c\xa9', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1\x00\x00\x00') (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) 1m33.211380872s ago: executing program 43 (id=6558): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0d00000005000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000023deb9dcae99a95b1cdf980208243b6f6b43295f187350597ba0905884f6e9fccdf0c623753e462e2c16239e1a8b81285eb2f8bd1b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r3}, 0x38) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x9, 0x3, 0x89f80000, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0x247, 0x3, 0x6, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x5, 0x10, 0x3, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x3, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xf, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0xffffffff, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x401, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x3, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_TDX_INIT_VCPU(r5, 0xc008aeba, &(0x7f0000000300)={0x2, 0x0, 0x33fb}) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000200)=0x17) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.755393678s ago: executing program 2 (id=7056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) r6 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x0, 0x5, [{0xffffffffffffffff, 0x0, 0xfffefffff0000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0xf6f7b4fe01af9632, 0x4000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000000}]}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@alu={0x4, 0x0, 0x9, 0xa}]}, &(0x7f00000003c0)='syzkaller\x00'}, 0xfffffffffffffd3c) 1.206443271s ago: executing program 2 (id=7058): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x908c3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000003c0)={0x17, &(0x7f00000000c0)=[{0xd, '\x00', @data=0x9, 0x7fffffff}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8ab43, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x80) fdatasync(r5) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) r6 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$dsp(r7, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r8, 0xaead) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200030000000800010001000000140003007866726d3f00"/64], 0x58}}, 0x0) syz_open_procfs(r6, &(0x7f0000000040)='auxv\x00') r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f00000002c0)={0x20003, 0x0, {[0x5, 0x5, 0x40004, 0xa, 0x8, 0x6, 0xffffffff, 0x20]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r11, 0x6, 0xa, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x11) 1.205849394s ago: executing program 3 (id=7059): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 1.205494679s ago: executing program 0 (id=7060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000280)={'sit0\x00', @ifru_data=&(0x7f0000000000)="77aa17a39a7a645242e1ce12b1b09976503f05ee36ef6246b6d4808aedf1cea4"}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000340)={0x42}) (async) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000340)={0x42}) close(r0) (async) close(r0) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$inet6_mtu(r3, 0x29, 0x1e, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setresgid(0xee00, 0xee01, 0x0) (async) setresgid(0xee00, 0xee01, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0x0, 0x0) (async) keyctl$chown(0x4, r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x804c884}, 0xc000) 1.112346076s ago: executing program 3 (id=7061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x17, r3, 0x1, 0x7, 0x6, @local}, 0x14) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7001010000000000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="05002e0000000000060028000100000008003c00080000000a000900bbbbbbbbbbbb0000050029000100000008000b000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x44001) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) creat(&(0x7f0000000580)='./bus\x00', 0x9e) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r7 = getpgid(0x0) (rerun: 32) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x177) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000300), &(0x7f0000000280)=r5}, 0x20) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r9, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xd4, "d4"}}}}}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async, rerun: 32) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 1.111979851s ago: executing program 0 (id=7062): r0 = socket(0x26, 0x80000, 0x2001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='\aTl\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002d00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = fanotify_init(0x40, 0x101000) write$binfmt_elf64(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001c"], 0x40) (async) write$binfmt_elf64(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001c"], 0x40) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be}) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) close(0x3) (async) close(0x3) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e20, 0x80020, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x440e0) recvmmsg$unix(r0, &(0x7f0000005d80), 0x0, 0x36102, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000005d80), 0x0, 0x36102, 0x0) 631.396243ms ago: executing program 8 (id=7066): modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x4, 0x1000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x6b, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 630.998586ms ago: executing program 3 (id=7067): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 630.452339ms ago: executing program 3 (id=7068): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x9, 0x7, 0x0, 0x8000, 0x15, "df24374f1068c745"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xda) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf2) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0x8, 0x9, 0x21, &(0x7f00000001c0)="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"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000600)=0xa) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000680)=0x2) ioctl$TIOCNXCL(r2, 0x540d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r5, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xda0, 0x1a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x376}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x876e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x90}}, 0x40841) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{0x4, 0x3ff}, {0x4, 0x2}, {0x0, 0x7}, {0x100, 0xfbff}, {0x6, 0x7f}, {0x8001, 0x6}, {0x0, 0x8}]}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000900), 0x4080, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000940)={0x0, 0x9, 0x2, 0x5, 0x3, "47e7be8188ee77b8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000980)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r4, {0x400000}}, './file0\x00'}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000a00)=0x40) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000a40)) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000a80), &(0x7f0000000ac0)=0x10) r8 = syz_open_dev$video4linux(&(0x7f0000000b00), 0x5, 0x80) sendfile(r8, r1, &(0x7f0000000b40)=0x1, 0x83eb) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000b80)=0x6) write$qrtrtun(r7, &(0x7f0000000bc0)="d379ae99ad4f1a42caf89b1aed71", 0xe) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000c00)={0x2, {0x2, 0x1000, 0x8000, 0x1, 0x3}}) 626.798435ms ago: executing program 8 (id=7069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r1, &(0x7f0000004340)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x7, 0x0, 0xf, 0x4, 0x7, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff79}, 0x94) 503.471853ms ago: executing program 8 (id=7070): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x3c, r1, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7317, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet6(0xa, 0x4, 0xffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="c000000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414bb0c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000004005c000680"], 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 287.559612ms ago: executing program 0 (id=7071): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x199}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r3, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x8, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x1d, 0xffe0}, {0x4, 0xd}, {0xf, 0x3}}}, 0x30}}, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000b"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 263.82836ms ago: executing program 8 (id=7072): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x3, 0x2, '\x00', 0xc, 0x8a}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x2, 0x51020402, 0x0, 0xa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/cpu_byteorder', 0x20000, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0xfffffffe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032b3d7000ffdbdf25010000000001000000005915120003a97f4371b11bdf6efc2600006c3006"], 0x30}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) 259.360206ms ago: executing program 3 (id=7073): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x8000000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfe, &(0x7f0000000440)={@empty, @local, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, 'G)\t', 0xc8, 0x6, 0xfe, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x3c, 0x0, 0x8f, 0x0, 0x0, 0x8, 0x68}, @dstopts={0x84, 0x7, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0xb}, @pad1, @ra={0x5, 0x2, 0x26}, @enc_lim, @ra={0x5, 0x2, 0x7fff}, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x3, [0x80000001, 0x10b2, 0xa]}}]}, @hopopts={0x32}, @fragment={0xb4, 0x0, 0xc, 0x1, 0x0, 0x1, 0x67}, @fragment={0xff, 0x0, 0x7c, 0x1, 0x0, 0x7, 0x66}], @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xfb9c, 0x0, 0x0, 0xd0cb, 0x0, 0x4, 0x4e20, 0x4e21, 0x3, 0x2, 0x0, 0x0, 0x1}, [{0xfdf, 0x0, 0x6, 0x7fffffff, 0x5, 0x3, 0x0, 0x5}, {0x34e3, 0x1ff, 0x2, 0x3, 0x1, 0x400, 0x3, 0x574}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 258.947266ms ago: executing program 2 (id=7074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100002, 0x189002) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000002500)={r4, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000103, 0x0, 0x5}]}) 255.253437ms ago: executing program 0 (id=7075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) r1 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x401, 0x10, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)='squashfs\x00', 0x20e001, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r3, &(0x7f0000002a00)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756f74610000001c0002800c00044000000000000000050c00014000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad52f1ef536617b70beb71f34391fb4b05a10a6615b081f7fa7a2a1b75aa779a597a3367f790b24acfc272d9b7ff2b7b240fd0c350a0c0799df638ecac43d980885ea1bbc4db6104be739becb9ab492498866afada51cc4b63d124f61d1fcf712db8c1620584709f4ece1894d4c"], 0x84}}, 0x0) 182.674177ms ago: executing program 3 (id=7076): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000200)=ANY=[@ANYBLOB="67727071756fd50f5f696e6f0600000000000000696d69743d312c00"]) 182.449063ms ago: executing program 8 (id=7077): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000040)) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xe78b, @private2, 0x7}, 0x1c) (async) close(r1) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x304, 0x38}, '\x00', "73248f9afc0057baf37500", '\x00', "00000000000000fd"}, 0x28) (async) splice(r0, 0x0, r1, 0x0, 0x8201, 0x9) 118.824395ms ago: executing program 0 (id=7078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 118.333941ms ago: executing program 8 (id=7079): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pause() ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newqdisc={0x2e4, 0x24, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x10, 0xd}, {0xd, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x331}, @qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x3, [0x4, 0x2, 0xd, 0xf, 0xf, 0x7, 0xb, 0x5, 0xf, 0x3, 0xd, 0x10, 0x1, 0x9, 0x3, 0x9], 0x0, [0x3, 0x81, 0x8, 0x50, 0x2, 0x38c3, 0x9, 0xaba, 0x765, 0x0, 0x6, 0x7, 0x9, 0x80, 0x10, 0x7], [0x2, 0x522, 0x4, 0xfffe, 0x2, 0x3, 0x6, 0x1, 0x8000, 0x1, 0x8, 0x6ad, 0x1ff, 0x7, 0xfff, 0x100]}, [@TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0xfffffffffffffff9}, {0x0, 0x3, 0x7}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x7}]}, @TCA_MQPRIO_MAX_RATE64={0x0, 0x4, 0x0, 0x1, [{0x0, 0x4, 0x4}, {0x0, 0x4, 0x7fffffff}, {0x0, 0x4, 0xa}, {0x0, 0x4, 0x24}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0x3ff}, {0x0, 0x4, 0xc8cc}, {0x0, 0x4, 0xffffffffffff0001}, {0x0, 0x4, 0x9}, {0x0, 0x4, 0x3ff}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0xa4cc}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x3}, {0x0, 0x3, 0xa3}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0xffffffffffffff26}, {0x0, 0x3, 0x3}, {0x0, 0x3, 0x3}, {0x0, 0x3, 0x4ba}, {0x0, 0x3, 0x8}]}]}}}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x72, 0x5708, 0x2, 0x2, 0x3, 0x3, 0x6}}, {0x10, 0x2, [0x8, 0x2, 0x8, 0x8, 0xd, 0x69]}}, {{0x1c, 0x1, {0xbb, 0x9, 0x9, 0x5, 0x1, 0x4, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0xf]}}, {{0x1c, 0x1, {0xfa, 0x4, 0x200, 0xb, 0x1, 0x9, 0x3, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x6, 0x6, 0x8, 0x6]}}, {{0x1c, 0x1, {0x7, 0xff, 0xb25, 0x1, 0x0, 0x1, 0x6, 0x6}}, {0x10, 0x2, [0x9, 0xfffb, 0x1, 0x2, 0xfff9, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0x90}}, @qdisc_kind_options=@q_gred={{0x9}, {0x140}}, @qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7e}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2aa1}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xff}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010003b15000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="4848060000000600140012800a000100767863616e000000000002bc3d5e510070696d36726567310000000000000000"], 0x48}}, 0x840) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r4], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x4}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000200)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x6}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') 53.11818ms ago: executing program 2 (id=7080): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) (async) getpgid(0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @empty}, {0x1, @multicast}, 0x0, {0x2, 0x4e24, @remote}, 'lo\x00'}) (async) tkill(r2, 0x13) (async) tkill(r2, 0x12) (async) wait4(r2, 0x0, 0x8, 0x0) (async) migrate_pages(r2, 0xfffffffffffffffa, &(0x7f00000000c0)=0x7, &(0x7f0000000080)=0x85) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r1, 0xac9d4000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 50.901545ms ago: executing program 0 (id=7081): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x1ff) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mq_notify(r1, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x84, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x55c, 0x7d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "a499a870fcfffa1a"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "481681cf46"}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "0c016e834a84581332"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x84}}, 0x0) read(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x1c, "5f3c9d676ca0c2757b4b0a6d7e193ef53ad759eb87444b58c2639359"}, &(0x7f0000000200)=0x24) 708.605µs ago: executing program 2 (id=7082): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000040000000400000001", @ANYRESDEC=0x0, @ANYRES16], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000040000000400000001", @ANYRESDEC=0x0, @ANYRES16], 0x48) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) (async) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000080)=[0xfa, 0x1]) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x40, 0x8001, {{0x1c, 0x4, 0x1, 0x33, 0x70, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @multicast2, {[@ssrr={0x89, 0xb, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @end, @lsrr={0x83, 0x7, 0x64, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xf8, [@private=0xa010100]}, @lsrr={0x83, 0x23, 0x20, [@empty, @rand_addr=0x64010102, @multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0x15, 0x3, [{0x7, 0xf, "8c7371036a96dad14ae89d11ca"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 0s ago: executing program 2 (id=7083): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000015000000a30c43"]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11a) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x6a040000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7fe}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) unshare(0x40020000) unshare(0x0) kernel console output (not intermixed with test programs): em_u:object_r:node_t tclass=node permissive=1 [ 687.629945][ T42] audit: type=1400 audit(1433.161:214357): avc: denied { read } for pid=29719 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.643972][ T42] audit: type=1400 audit(1433.161:214358): avc: denied { read open } for pid=29719 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.657134][ T42] audit: type=1400 audit(1433.161:214359): avc: denied { getattr } for pid=29719 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.657421][T18620] net_ratelimit: 5 callbacks suppressed [ 687.657436][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 687.674577][ T42] audit: type=1400 audit(1433.199:214360): avc: denied { write } for pid=29718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.686255][ T42] audit: type=1400 audit(1433.199:214361): avc: denied { add_name } for pid=29718 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.700204][ T42] audit: type=1400 audit(1433.199:214362): avc: denied { create } for pid=29718 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.710114][ T42] audit: type=1400 audit(1433.199:214363): avc: denied { write open } for pid=29718 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=24972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.721546][ T42] audit: type=1400 audit(1433.199:214364): avc: denied { append } for pid=29718 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=24972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.772959][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 687.797914][ T5884] bond1: (slave syz_tun): failed to get link speed/duplex [ 687.841468][T29569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.878848][T29569] veth0_vlan: entered promiscuous mode [ 687.891902][T29569] veth1_vlan: entered promiscuous mode [ 687.912568][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 687.943096][T29569] veth0_macvtap: entered promiscuous mode [ 687.948894][T29569] veth1_macvtap: entered promiscuous mode [ 687.958455][T29569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.970218][T29569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.980224][T18620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.984465][T18620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.989374][T18620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.993043][T18620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.035640][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 688.211196][ T9133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.223386][ T9133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.306301][ T5815] hsr_slave_0: left promiscuous mode [ 688.310817][ T5815] hsr_slave_1: left promiscuous mode [ 688.317197][ T5815] veth1_macvtap: left promiscuous mode [ 688.319284][ T5815] veth0_macvtap: left promiscuous mode [ 688.321086][ T5815] veth1_vlan: left promiscuous mode [ 688.322781][ T5815] veth0_vlan: left promiscuous mode [ 688.479172][T29619] vivid-000: kernel_thread() failed [ 688.665446][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 688.692930][ T5741] Bluetooth: hci7: command tx timeout [ 688.734088][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.740425][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.758486][T18601] bond1: (slave syz_tun): failed to get link speed/duplex [ 688.908721][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 688.954842][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 689.030832][T29756] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 689.035851][T18601] bond1: (slave syz_tun): failed to get link speed/duplex [ 689.041982][ T5741] Bluetooth: hci2: command tx timeout [ 689.155212][ T13] bond1: (slave syz_tun): failed to get link speed/duplex [ 689.184070][T29656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 689.203526][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.207808][T29656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 689.213035][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.226313][T29656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 689.238369][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.241743][T29656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 689.247992][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.271864][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 689.326916][T29656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.340277][T29656] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.349531][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.352572][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.369244][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.372125][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.390634][T29768] netlink: 4832 bytes leftover after parsing attributes in process `syz.1.6574'. [ 689.419945][ T13] bond1: (slave syz_tun): failed to get link speed/duplex [ 689.550193][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 689.626928][T29802] netlink: 'syz.1.6577': attribute type 29 has an invalid length. [ 689.655783][T29656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.685485][T29656] veth0_vlan: entered promiscuous mode [ 689.692266][T29656] veth1_vlan: entered promiscuous mode [ 689.707477][T29656] veth0_macvtap: entered promiscuous mode [ 689.714349][T29656] veth1_macvtap: entered promiscuous mode [ 689.726396][T29656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.734478][T29656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.744017][T18620] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.749820][T18620] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.753747][T18620] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.766817][T18620] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.823362][T11451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.838801][T11451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.850536][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.872260][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.894052][T29815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29815 comm=syz.1.6579 [ 689.909237][T29815] netlink: 'syz.1.6579': attribute type 1 has an invalid length. [ 690.080034][T29820] kvm: kvm [29819]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 690.085042][T29820] kvm: kvm [29819]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 690.268223][T29845] xt_hashlimit: size too large, truncated to 1048576 [ 690.376330][T29851] ipvlan1: entered promiscuous mode [ 690.384339][T29851] ipvlan1: entered allmulticast mode [ 690.386091][T29851] veth0_vlan: entered allmulticast mode [ 690.426923][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6587'. [ 690.648959][T29872] binder: Bad value for 'max' [ 690.817002][T29881] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 690.822610][T29882] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 690.914936][T29886] can0: slcan on ttyS3. [ 690.927880][ T5741] Bluetooth: hci7: command tx timeout [ 691.023947][T29885] can0 (unregistered): slcan off ttyS3. [ 691.199566][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6592'. [ 691.237008][T29900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6594'. [ 691.244616][T29899] unsupported nla_type 4111 [ 691.258883][ T5741] Bluetooth: hci2: command tx timeout [ 691.324531][T29907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.329119][T29907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.340662][T29906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.551840][T29914] netlink: 'syz.1.6599': attribute type 1 has an invalid length. [ 691.558681][T29914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6599'. [ 691.651617][T29920] xt_hashlimit: size too large, truncated to 1048576 [ 691.805867][T29619] vivid-000: kernel_thread() failed [ 692.527844][ T42] kauditd_printk_skb: 332 callbacks suppressed [ 692.527901][ T42] audit: type=1400 audit(1437.763:214697): avc: denied { write } for pid=29943 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.544860][ T42] audit: type=1400 audit(1437.763:214698): avc: denied { remove_name } for pid=29943 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=25017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.559560][ T42] audit: type=1400 audit(1437.763:214699): avc: denied { unlink } for pid=29943 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=25017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 692.574599][ T42] audit: type=1400 audit(1437.810:214700): avc: denied { execute } for pid=29945 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 692.591011][ T42] audit: type=1400 audit(1437.810:214701): avc: denied { execute_no_trans } for pid=29945 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 692.593596][T18601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.621631][ T42] audit: type=1400 audit(1437.856:214702): avc: denied { execmem } for pid=29945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 692.641211][ T42] audit: type=1400 audit(1437.856:214703): avc: denied { create } for pid=29946 comm="syz.3.6607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 692.653616][ T42] audit: type=1400 audit(1437.856:214704): avc: denied { read } for pid=29946 comm="syz.3.6607" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 692.665777][ T42] audit: type=1400 audit(1437.856:214705): avc: denied { open } for pid=29946 comm="syz.3.6607" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 692.671869][T29947] binder: 29946:29947 unknown command 65231 [ 692.686385][ T42] audit: type=1400 audit(1437.856:214706): avc: denied { ioctl } for pid=29946 comm="syz.3.6607" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 692.691696][T29947] binder: 29946:29947 ioctl c0306201 2000000001c0 returned -22 [ 692.715085][T29947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6607'. [ 692.789775][T19219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 692.823837][T19219] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 692.846583][T19219] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 692.850829][T19219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 692.853721][T19219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 692.854306][T18601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.072166][T18601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.087449][T18620] net_ratelimit: 24 callbacks suppressed [ 693.087463][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 693.225793][T18601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.271232][ T13] bond1: (slave syz_tun): failed to get link speed/duplex [ 693.419572][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 693.494714][ T5741] Bluetooth: hci2: command tx timeout [ 693.533292][T29951] ±ÿ speed is unknown, defaulting to 1000 [ 693.536118][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 693.599874][T18601] bridge_slave_1: left allmulticast mode [ 693.603278][T18601] bridge_slave_1: left promiscuous mode [ 693.605324][T18601] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.624351][T18601] bridge_slave_0: left allmulticast mode [ 693.627715][T18601] bridge_slave_0: left promiscuous mode [ 693.629859][T18601] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.700335][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6612'. [ 693.704431][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6612'. [ 693.830746][T18601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.856906][T18601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.861731][T18601] bond0 (unregistering): Released all slaves [ 693.876558][T29992] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6615'. [ 693.881106][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 693.932424][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 694.258266][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 694.261214][T30016] tipc: Failed to obtain node identity [ 694.263218][T30016] tipc: Enabling of bearer rejected, failed to enable media [ 694.287139][T29951] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.295698][T29951] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.300079][T29951] bridge_slave_0: entered allmulticast mode [ 694.303500][T29951] bridge_slave_0: entered promiscuous mode [ 694.311331][T29951] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.315472][T29951] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.318955][T29951] bridge_slave_1: entered allmulticast mode [ 694.322910][T29951] bridge_slave_1: entered promiscuous mode [ 694.389618][T29951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.415567][ T13] bond1: (slave syz_tun): failed to get link speed/duplex [ 694.437991][T29951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.506469][T29951] team0: Port device team_slave_0 added [ 694.519815][T29951] team0: Port device team_slave_1 added [ 694.558743][T29951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.561063][T29951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.569345][T29951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.573227][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 694.580730][T29951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.589374][T29951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.600012][T29951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.640580][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 694.647094][T30032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6620'. [ 694.695170][T29951] hsr_slave_0: entered promiscuous mode [ 694.697854][T29951] hsr_slave_1: entered promiscuous mode [ 694.700867][T29951] debugfs: 'hsr0' already exists in 'hsr' [ 694.705546][T29951] Cannot create hsr debugfs directory [ 694.717894][T18601] hsr_slave_0: left promiscuous mode [ 694.720817][T18601] hsr_slave_1: left promiscuous mode [ 694.724860][T18601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.728945][T18601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.732449][T18601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.735356][T18601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.757372][T18601] veth1_macvtap: left promiscuous mode [ 694.759282][T18601] veth0_macvtap: left promiscuous mode [ 694.761490][T18601] veth1_vlan: left promiscuous mode [ 694.763600][T18601] veth0_vlan: left promiscuous mode [ 694.974174][T18601] team0 (unregistering): Port device team_slave_1 removed [ 694.987874][T18601] team0 (unregistering): Port device team_slave_0 removed [ 695.022367][ T5741] Bluetooth: hci6: command tx timeout [ 695.089161][T30040] input: syz0 as /devices/virtual/input/input100 [ 695.237857][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 695.484152][T30047] __nla_validate_parse: 2 callbacks suppressed [ 695.484171][T30047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6624'. [ 695.519605][T30047] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 695.546285][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 695.573609][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 695.728330][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 696.093370][T30076] netlink: 'syz.3.6628': attribute type 12 has an invalid length. [ 696.096729][T30076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6628'. [ 696.295636][T29951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.300226][T29951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.304783][T29951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.312729][T29951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.316962][T29951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.322896][T29951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.338574][T29951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.347013][T29951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.440533][T29951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.464496][T29951] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.472773][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.475139][ T9133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.482994][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.485383][ T9133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.590814][T29619] vivid-000: kernel_thread() failed [ 696.877018][T29951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.939879][T29951] veth0_vlan: entered promiscuous mode [ 696.954328][T29951] veth1_vlan: entered promiscuous mode [ 696.992684][T29951] veth0_macvtap: entered promiscuous mode [ 696.999206][T29951] veth1_macvtap: entered promiscuous mode [ 697.015228][T29951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.026287][T29951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.046127][T18620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.051012][T18620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.058635][T18601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.062132][T18601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.148235][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.150690][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.225503][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.228117][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.246315][ T5741] Bluetooth: hci6: command tx timeout [ 697.363070][T30136] netlink: 656 bytes leftover after parsing attributes in process `syz.2.6614'. [ 697.367509][T30136] netlink: 656 bytes leftover after parsing attributes in process `syz.2.6614'. [ 697.370798][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6614'. [ 697.414280][T30133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.500874][T30141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6632'. [ 697.577267][T30133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.894159][ T42] kauditd_printk_skb: 372 callbacks suppressed [ 697.894178][ T42] audit: type=1400 audit(1442.785:215079): avc: denied { write } for pid=30153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.910137][ T42] audit: type=1400 audit(1442.785:215080): avc: denied { perfmon } for pid=30149 comm="syz.3.6633" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 697.935625][ T42] audit: type=1400 audit(1442.823:215081): avc: denied { sendto } for pid=18601 comm="kworker/u32:7" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 697.959256][ T42] audit: type=1400 audit(1442.842:215082): avc: denied { write } for pid=30156 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.022059][ T42] audit: type=1400 audit(1442.907:215083): avc: denied { read write } for pid=30159 comm="syz.3.6634" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 698.033962][ T42] audit: type=1400 audit(1442.907:215084): avc: denied { open } for pid=30159 comm="syz.3.6634" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 698.044423][ T42] audit: type=1400 audit(1442.916:215085): avc: denied { read } for pid=30159 comm="syz.3.6634" name="nvme-fabrics" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 698.053549][ T42] audit: type=1400 audit(1442.916:215086): avc: denied { open } for pid=30159 comm="syz.3.6634" path="/dev/nvme-fabrics" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 698.064059][ T42] audit: type=1400 audit(1442.926:215087): avc: denied { write } for pid=30158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.072283][ T42] audit: type=1400 audit(1442.935:215088): avc: denied { module_request } for pid=30159 comm="syz.3.6634" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 698.444114][ T5815] net_ratelimit: 17 callbacks suppressed [ 698.444135][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 698.540957][T30133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.561245][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 698.689729][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 698.817873][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 698.935558][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 699.053248][T18620] bond1: (slave syz_tun): failed to get link speed/duplex [ 699.215821][ T5815] bond1: (slave syz_tun): failed to get link speed/duplex [ 699.233356][T19219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 699.240613][T19219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 699.249695][T19219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 699.259401][T19219] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 699.274988][T19219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 699.314702][ T5843] usb 11-1: USB disconnect, device number 57 [ 699.349940][T25467] bond1: (slave syz_tun): Removing an active aggregator [ 699.353115][T25467] bond1: (slave syz_tun): Releasing backup interface [ 699.490100][T19219] Bluetooth: hci6: command tx timeout [ 699.496783][T30133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.668693][T30194] xt_connbytes: Forcing CT accounting to be enabled [ 699.770841][T30179] ±ÿ speed is unknown, defaulting to 1000 [ 699.806262][T30201] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6640'. [ 700.041071][T30179] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.043897][T30179] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.046862][T30179] bridge_slave_0: entered allmulticast mode [ 700.051844][T30179] bridge_slave_0: entered promiscuous mode [ 700.056242][T30179] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.058869][T30179] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.061456][T30179] bridge_slave_1: entered allmulticast mode [ 700.064271][T30179] bridge_slave_1: entered promiscuous mode [ 700.083004][T30179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.087471][T30179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.104156][T30179] team0: Port device team_slave_0 added [ 700.107854][T30179] team0: Port device team_slave_1 added [ 700.122764][T30179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.125180][T30179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.134013][T30179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.138977][T30179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.141135][T30179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.148934][T30179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.174694][T30179] hsr_slave_0: entered promiscuous mode [ 700.177665][T30179] hsr_slave_1: entered promiscuous mode [ 700.179904][T30179] debugfs: 'hsr0' already exists in 'hsr' [ 700.181765][T30179] Cannot create hsr debugfs directory [ 700.969310][T30235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30235 comm=syz.3.6643 [ 700.973823][T30235] netlink: 'syz.3.6643': attribute type 1 has an invalid length. [ 701.072368][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.128136][T30242] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 701.335353][T30235] macvtap1: entered allmulticast mode [ 701.446125][ T5815] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.478075][ T5815] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.492597][ T5815] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.522914][T19219] Bluetooth: hci7: command tx timeout [ 701.704675][T19219] Bluetooth: hci6: command tx timeout [ 702.004024][T28190] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 702.177471][T28190] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 702.181962][T28190] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 702.185375][T28190] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 702.189195][T28190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.196736][T30265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 702.202478][T28190] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 702.421651][T28190] usb 7-1: USB disconnect, device number 74 [ 702.755085][T30179] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 702.814061][T30179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.835718][T30179] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 702.859523][ T5112] block nbd2: Possible stuck request ffff8880298c7000: control (read@0,1024B). Runtime 180 seconds [ 702.863090][ T5112] block nbd2: Possible stuck request ffff8880298c71c0: control (read@1024,3072B). Runtime 180 seconds [ 702.883519][T30179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.889752][T30179] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 702.916317][T30303] overlay: ./file0 is not a directory [ 702.929790][T30179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.938609][T30179] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 702.980006][T30179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.109186][T30179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.129111][T30179] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.138638][T11451] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.141720][T11451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.153784][T11451] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.156649][T11451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.280167][ T42] kauditd_printk_skb: 232 callbacks suppressed [ 703.280181][ T42] audit: type=1400 audit(1447.827:215321): avc: denied { sys_module } for pid=30179 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 703.291016][ T42] audit: type=1400 audit(1447.827:215322): avc: denied { module_request } for pid=30179 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 703.299912][ T42] audit: type=1400 audit(1447.836:215323): avc: denied { write } for pid=30327 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.354354][ T42] audit: type=1400 audit(1447.892:215324): avc: denied { unmount } for pid=29656 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 703.438554][ T42] audit: type=1400 audit(1447.976:215325): avc: denied { write } for pid=30333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.491585][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 703.499463][ T42] audit: type=1400 audit(1448.023:215326): avc: denied { write } for pid=30338 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.598489][T30179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.757856][T19219] Bluetooth: hci7: command tx timeout [ 703.823442][T30179] veth0_vlan: entered promiscuous mode [ 703.835066][ T42] audit: type=1400 audit(1448.341:215327): avc: denied { sendto } for pid=5815 comm="kworker/u32:3" daddr=ff02::1:ffaa:aa1b netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 703.835772][T30179] veth1_vlan: entered promiscuous mode [ 703.898687][T30179] veth0_macvtap: entered promiscuous mode [ 703.905152][T30179] veth1_macvtap: entered promiscuous mode [ 703.908063][ T42] audit: type=1400 audit(1448.416:215328): avc: denied { create } for pid=30350 comm="syz.3.6651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 703.922904][T30179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.928491][ T42] audit: type=1400 audit(1448.416:215329): avc: denied { ioctl } for pid=30350 comm="syz.3.6651" path="socket:[167894]" dev="sockfs" ino=167894 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 703.951306][T30179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.969427][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.981478][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.985404][ T42] audit: type=1400 audit(1448.481:215330): avc: denied { recv } for pid=5717 comm="syz-executor" saddr=127.0.0.1 src=42558 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 704.046894][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.054078][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.068562][T30362] xt_hashlimit: size too large, truncated to 1048576 [ 704.219445][T30368] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6654'. [ 704.260736][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.271936][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.332275][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.338461][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.530769][T30376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.544061][T30376] bridge0: entered allmulticast mode [ 704.546383][T30376] bridge0: entered promiscuous mode [ 705.001022][T30406] bond1: ARP target 9.0.0.0 is already present [ 705.003077][T30406] bond1: option arp_ip_target: invalid value (9) [ 705.053731][T30406] bond1 (unregistering): Released all slaves [ 705.063237][T30412] xt_hashlimit: max too large, truncated to 1048576 [ 705.605615][T20804] IPVS: starting estimator thread 0... [ 705.714478][T30435] IPVS: using max 47 ests per chain, 112800 per kthread [ 705.981422][T19219] Bluetooth: hci7: command tx timeout [ 706.264349][T30452] netlink: 'syz.8.6673': attribute type 1 has an invalid length. [ 706.284183][T30452] gretap1: entered promiscuous mode [ 706.755998][T30457] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 706.759659][T30457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 706.764674][T30457] overlayfs: failed to set uuid (15/file1, err=-13); falling back to uuid=null. [ 707.007129][T30465] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6677'. [ 707.153498][T30474] program syz.0.6680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 707.360669][T28190] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 707.532770][T28190] usb 13-1: Using ep0 maxpacket: 32 [ 707.537139][T28190] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 707.540664][T28190] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 707.545166][T28190] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 707.549473][T28190] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 707.554645][T28190] usb 13-1: config 0 interface 0 has no altsetting 0 [ 707.559044][T28190] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 707.561997][T28190] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 707.564770][T28190] usb 13-1: Product: syz [ 707.566080][T28190] usb 13-1: Manufacturer: syz [ 707.567576][T28190] usb 13-1: SerialNumber: syz [ 707.571005][T28190] usb 13-1: config 0 descriptor?? [ 707.574827][T28190] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 707.579276][T28190] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 707.803628][T30470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6678'. [ 707.811904][ T10] usb 13-1: USB disconnect, device number 2 [ 707.813239][ C2] ldusb 13-1:0.0: usb_submit_urb failed (-19) [ 707.828278][ T10] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 707.836035][T30470] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 707.855753][T20804] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 707.991357][T20804] usb 7-1: device descriptor read/64, error -71 [ 708.195378][T19219] Bluetooth: hci7: command tx timeout [ 708.247989][T20804] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 708.410760][T20804] usb 7-1: device descriptor read/64, error -71 [ 708.431186][T30493] netlink: 'syz.8.6687': attribute type 15 has an invalid length. [ 708.491107][T30496] 9p: Unknown access argument l÷ÒtÝPqÄRf -üÚmTR4­fÂ×ox¨æçÜsyüÙÛãwŠ”<>ÃÌ>Õ#QË@ûø1•1CÉK¡Lö#c¢^dz¦ô>X“S$N(%ØejMï>yÈ3I³x^P´*…oÃXëçöÀ™Š00000000004294967295: -22 [ 708.541565][T20804] usb usb7-port1: attempt power cycle [ 708.563331][T30499] xt_hashlimit: size too large, truncated to 1048576 [ 708.578525][T30502] JFS: charset not found [ 708.645675][ T42] kauditd_printk_skb: 302 callbacks suppressed [ 708.645688][ T42] audit: type=1400 audit(1452.849:215633): avc: denied { allowed } for pid=30505 comm="syz.0.6692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 708.701661][ T42] audit: type=1400 audit(1452.896:215634): avc: denied { cmd } for pid=30505 comm="iou-wrk-30507" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 708.716678][ T42] audit: type=1400 audit(1452.905:215635): avc: denied { map } for pid=30505 comm="syz.0.6692" path="/dev/ublkc5" dev="devtmpfs" ino=4571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 708.771247][ T42] audit: type=1400 audit(1452.952:215636): avc: denied { create } for pid=30511 comm="syz.0.6693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 708.780907][ T42] audit: type=1400 audit(1452.962:215637): avc: denied { read write } for pid=30511 comm="syz.0.6693" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 708.781569][T30512] fuseblk: Bad value for 'group_id' [ 708.788271][ T42] audit: type=1400 audit(1452.962:215638): avc: denied { open } for pid=30511 comm="syz.0.6693" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 708.790235][T30512] fuseblk: Bad value for 'group_id' [ 708.805507][ T42] audit: type=1400 audit(1452.999:215639): avc: denied { prog_load } for pid=30511 comm="syz.0.6693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.812818][ T42] audit: type=1400 audit(1452.999:215640): avc: denied { bpf } for pid=30511 comm="syz.0.6693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.821237][ T42] audit: type=1400 audit(1453.008:215641): avc: denied { connect } for pid=30516 comm="syz.8.6694" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 708.854300][ T42] audit: type=1400 audit(1453.036:215642): avc: denied { create } for pid=30521 comm="syz.8.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 708.887516][T30525] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6696'. [ 708.900524][T20804] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 708.926681][T20804] usb 7-1: device descriptor read/8, error -71 [ 709.200299][T20804] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 709.221563][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 709.221788][T20804] usb 7-1: device descriptor read/8, error -71 [ 709.338957][T20804] usb usb7-port1: unable to enumerate USB device [ 709.381364][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 709.385699][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 709.389027][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.393302][T19489] IPVS: starting estimator thread 0... [ 709.394890][T30547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6702'. [ 709.395451][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.398712][T30547] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6702'. [ 709.402001][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.405741][T30547] tipc: Invalid UDP bearer configuration [ 709.409578][T30547] tipc: Enabling of bearer rejected, failed to enable media [ 709.410314][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.418562][T30547] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20002 [ 709.419515][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 709.421184][T30547] IPVS: sh: FWM 3 0x00000003 - no destination available [ 709.423737][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.427514][ C3] IPVS: sh: FWM 3 0x00000003 - no destination available [ 709.510076][T30548] IPVS: using max 47 ests per chain, 112800 per kthread [ 709.652773][ T10] usb 5-1: usb_control_msg returned -32 [ 709.655236][ T10] usbtmc 5-1:16.0: can't read capabilities [ 710.448898][T30590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6711'. [ 710.464831][T30592] batadv_slave_1: entered promiscuous mode [ 710.626388][ T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 710.680561][T30529] batadv_slave_1: left promiscuous mode [ 710.709003][T20804] usb 5-1: USB disconnect, device number 31 [ 710.821021][T30609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30609 comm=syz.3.6714 [ 710.827298][T30609] netlink: 'syz.3.6714': attribute type 1 has an invalid length. [ 710.854302][T30612] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 710.859969][T30609] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6714'. [ 710.860228][T30612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6715'. [ 710.890448][T30615] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 711.052259][T30631] sctp: [Deprecated]: syz.3.6719 (pid 30631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.052259][T30631] Use struct sctp_sack_info instead [ 711.202294][T30641] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 711.367290][T30654] xt_connbytes: Forcing CT accounting to be enabled [ 711.371379][T30654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.431341][T30662] fuse: Bad value for 'fd' [ 711.441630][T30594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.594650][T30668] syzkaller0: entered promiscuous mode [ 711.596955][T30668] syzkaller0: entered allmulticast mode [ 711.616256][T30665] random: crng reseeded on system resumption [ 711.758528][T30678] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 712.631060][T30687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.894328][T30695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30695 comm=syz.0.6737 [ 714.926735][T30707] netlink: 'syz.2.6740': attribute type 1 has an invalid length. [ 714.929834][T30707] netlink: 'syz.2.6740': attribute type 4 has an invalid length. [ 714.934933][T30707] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6740'. [ 714.945026][ T42] kauditd_printk_skb: 318 callbacks suppressed [ 714.945039][ T42] audit: type=1400 audit(1458.732:215961): avc: denied { mounton } for pid=30706 comm="syz.2.6740" path="/27/bus" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 714.945065][T30707] virtiofs: Unknown parameter 'trans' [ 714.962556][ T42] audit: type=1400 audit(1458.751:215962): avc: denied { create } for pid=30706 comm="syz.2.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 714.972666][ T42] audit: type=1400 audit(1458.751:215963): avc: denied { setopt } for pid=30706 comm="syz.2.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 715.043295][ T42] audit: type=1400 audit(1458.826:215964): avc: denied { map_create } for pid=30708 comm="syz.2.6741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 715.050000][ T42] audit: type=1400 audit(1458.826:215965): avc: denied { bpf } for pid=30708 comm="syz.2.6741" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 715.085306][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6742'. [ 715.325260][ T42] audit: type=1400 audit(1459.088:215966): avc: denied { read append } for pid=30712 comm="syz.2.6743" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 715.333514][ T42] audit: type=1400 audit(1459.088:215967): avc: denied { open } for pid=30712 comm="syz.2.6743" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 715.607808][ T42] audit: type=1400 audit(1459.359:215968): avc: denied { create } for pid=30717 comm="syz.2.6744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.616842][ T42] audit: type=1400 audit(1459.359:215969): avc: denied { write } for pid=30717 comm="syz.2.6744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.625920][ T42] audit: type=1400 audit(1459.359:215970): avc: denied { ioctl } for pid=30717 comm="syz.2.6744" path="socket:[170416]" dev="sockfs" ino=170416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 719.839367][ T5148] udevd[5148]: worker [19319] /devices/virtual/block/nbd2 timeout; kill it [ 719.844936][ T5148] udevd[5148]: seq 35236 '/devices/virtual/block/nbd2' killed [ 725.038298][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 725.038319][ T42] audit: type=1400 audit(1468.179:215977): avc: denied { create } for pid=30729 comm="syz.2.6748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 725.039786][T30730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6748'. [ 725.043248][ T42] audit: type=1400 audit(1468.179:215978): avc: denied { write } for pid=30729 comm="syz.2.6748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 725.049668][T30730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6748'. [ 725.064579][ T42] audit: type=1400 audit(1468.198:215979): avc: denied { create } for pid=30733 comm="syz.0.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 725.064945][ T42] audit: type=1400 audit(1468.198:215980): avc: denied { write } for pid=30733 comm="syz.0.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 725.066229][T30732] kAFS: unable to lookup cell 'syz0' [ 725.081594][ T42] audit: type=1400 audit(1468.207:215981): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=42558 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 725.095655][ T42] audit: type=1400 audit(1468.226:215982): avc: denied { create } for pid=30729 comm="syz.2.6748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.102799][ T42] audit: type=1400 audit(1468.226:215983): avc: denied { bind } for pid=30729 comm="syz.2.6748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.109194][ T42] audit: type=1400 audit(1468.226:215984): avc: denied { write } for pid=30729 comm="syz.2.6748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.114952][ T42] audit: type=1400 audit(1468.226:215985): avc: denied { read } for pid=30736 comm="syz.0.6751" dev="nsfs" ino=4026534732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 725.125702][ T42] audit: type=1400 audit(1468.226:215986): avc: denied { open } for pid=30736 comm="syz.0.6751" path="net:[4026534732]" dev="nsfs" ino=4026534732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 725.332158][T30745] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6753'. [ 725.412398][T30757] netlink: 'syz.8.6757': attribute type 1 has an invalid length. [ 725.431246][T30759] FAT-fs (nbd0): unable to read boot sector [ 725.620453][T30768] netlink: 'syz.0.6761': attribute type 19 has an invalid length. [ 725.623807][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6761'. [ 725.832853][T30775] 9p: Bad value for 'port' [ 725.980180][T30782] support for the xor transformation has been removed. [ 727.002164][T30809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.008436][T30809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.106340][T30812] nicvf0: renamed from team0 (while UP) [ 727.156529][T30812] nicvf0: Cannot enslave team device to itself [ 727.159201][T30812] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 727.258054][T20804] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 727.431023][T20804] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.435234][T20804] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 727.438911][T20804] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 727.443691][T20804] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.450641][T20804] usb 13-1: config 0 descriptor?? [ 727.457251][T20804] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 727.460081][T20804] dvb-usb: bulk message failed: -22 (3/0) [ 727.467098][T20804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 727.471272][T20804] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 727.474687][T20804] usb 13-1: media controller created [ 727.477717][T20804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.483381][T20804] dvb-usb: bulk message failed: -22 (6/0) [ 727.487671][T20804] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 727.497105][T20804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input105 [ 727.515739][T20804] dvb-usb: schedule remote query interval to 150 msecs. [ 727.518001][T20804] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 727.691195][T28190] usb 13-1: USB disconnect, device number 3 [ 727.691223][T20804] dvb-usb: bulk message failed: -22 (1/0) [ 727.700933][T20804] dvb-usb: error while querying for an remote control event. [ 727.737083][T30817] ±ÿ speed is unknown, defaulting to 1000 [ 727.800331][T28190] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 728.337365][T30840] binder: 30839:30840 unknown command 0 [ 728.339468][T30840] binder: 30839:30840 ioctl c0306201 2000000003c0 returned -22 [ 728.445015][T30842] tipc: Started in network mode [ 728.446591][T30842] tipc: Node identity 00000000000000000008, cluster identity 4711 [ 728.829615][ T5822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 728.990174][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 728.998147][ T5822] usb 5-1: config 250 has an invalid interface number: 172 but max is 1 [ 729.002360][ T5822] usb 5-1: config 250 contains an unexpected descriptor of type 0x2, skipping [ 729.006020][ T5822] usb 5-1: config 250 has an invalid interface number: 66 but max is 1 [ 729.010384][ T5822] usb 5-1: config 250 contains an unexpected descriptor of type 0x1, skipping [ 729.014779][ T5822] usb 5-1: config 250 has an invalid interface number: 187 but max is 1 [ 729.017980][ T5822] usb 5-1: config 250 has 3 interfaces, different from the descriptor's value: 2 [ 729.021367][ T5822] usb 5-1: config 250 has no interface number 0 [ 729.024122][ T5822] usb 5-1: config 250 has no interface number 1 [ 729.026441][ T5822] usb 5-1: config 250 has no interface number 2 [ 729.028803][ T5822] usb 5-1: config 250 interface 172 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 729.032073][ T5822] usb 5-1: config 250 interface 172 altsetting 188 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 729.035950][ T5822] usb 5-1: config 250 interface 172 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 729.039446][ T5822] usb 5-1: config 250 interface 172 altsetting 188 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 729.043072][ T5822] usb 5-1: config 250 interface 172 altsetting 188 has a duplicate endpoint with address 0xD, skipping [ 729.047491][ T5822] usb 5-1: config 250 interface 172 altsetting 188 endpoint 0x5 has an invalid bInterval 127, changing to 10 [ 729.051855][ T5822] usb 5-1: config 250 interface 172 altsetting 188 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 729.057035][ T5822] usb 5-1: config 250 interface 172 altsetting 188 endpoint 0x8 has invalid maxpacket 520, setting to 64 [ 729.061786][ T5822] usb 5-1: config 250 interface 172 altsetting 188 has a duplicate endpoint with address 0x3, skipping [ 729.067341][ T5822] usb 5-1: config 250 interface 172 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 729.071472][ T5822] usb 5-1: config 250 interface 66 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 729.075867][ T5822] usb 5-1: config 250 interface 66 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 729.079549][ T5822] usb 5-1: config 250 interface 66 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 729.082888][ T5822] usb 5-1: config 250 interface 66 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 729.086588][ T5822] usb 5-1: config 250 interface 66 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 729.090102][ T5822] usb 5-1: config 250 interface 66 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 729.093691][T30859] netlink: 'syz.2.6786': attribute type 13 has an invalid length. [ 729.094235][ T5822] usb 5-1: too many endpoints for config 250 interface 187 altsetting 234: 120, using maximum allowed: 30 [ 729.102574][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has an invalid descriptor for endpoint zero, skipping [ 729.107118][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0x1, skipping [ 729.107145][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0xC, skipping [ 729.107164][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 729.107182][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0x8E, skipping [ 729.107200][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has an invalid descriptor for endpoint zero, skipping [ 729.107218][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0x8, skipping [ 729.107236][ T5822] usb 5-1: config 250 interface 187 altsetting 234 endpoint 0xB has invalid maxpacket 1040, setting to 64 [ 729.107258][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0x8, skipping [ 729.107280][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0xE, skipping [ 729.107300][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0xE, skipping [ 729.107318][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has a duplicate endpoint with address 0x6, skipping [ 729.107337][ T5822] usb 5-1: config 250 interface 187 altsetting 234 has 13 endpoint descriptors, different from the interface descriptor's value: 120 [ 729.107359][ T5822] usb 5-1: config 250 interface 172 has no altsetting 0 [ 729.107375][ T5822] usb 5-1: config 250 interface 187 has no altsetting 0 [ 729.113093][ T5822] usb 5-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=dd.b3 [ 729.113110][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.113121][ T5822] usb 5-1: Manufacturer: à ‡ [ 729.113129][ T5822] usb 5-1: SerialNumber: 伖쮅å‰å¿¼ã»¥ã‚°âŒŠì°¿ëˆ¢ä…ƒä†ŠâŽœâ’‡æ³¬ä‡¤á‡ê®´ä£Šä»©ë •ì¶´à±ï‡‰ê¹˜ë’‚äµâ®…槇Ԃ欆ç²êš€â¯Ší…ã·ê“³êŽ—⧸䀞쑞떇쵿㋃㗞 [ 729.253136][T30859] gretap0: refused to change device tx_queue_len [ 729.255208][T30859] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 729.393174][T30873] afs: Unknown parameter 'usrquota' [ 729.515217][T30875] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 729.517583][T30875] overlayfs: overlapping lowerdir path [ 729.560914][ T5822] io_ti 5-1:250.172: required endpoints missing [ 729.576173][ T5822] io_ti 5-1:250.66: required endpoints missing [ 729.581881][ T5822] io_ti 5-1:250.187: required endpoints missing [ 729.585767][T30878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6792'. [ 729.589287][ T5822] usb 5-1: USB disconnect, device number 32 [ 729.785918][T30880] ±ÿ speed is unknown, defaulting to 1000 [ 730.284623][T19219] Bluetooth: hci6: Malformed Event: 0x02 [ 730.452476][ T42] kauditd_printk_skb: 247 callbacks suppressed [ 730.452489][ T42] audit: type=1400 audit(1473.239:216234): avc: denied { execute } for pid=30906 comm="syz.8.6801" name="file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 730.462263][ T42] audit: type=1400 audit(1473.239:216235): avc: denied { execute_no_trans } for pid=30906 comm="syz.8.6801" path="/33/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 730.528037][ T42] audit: type=1400 audit(1473.314:216236): avc: denied { create } for pid=30906 comm="syz.8.6801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 730.535437][ T42] audit: type=1400 audit(1473.314:216237): avc: denied { setopt } for pid=30906 comm="syz.8.6801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 730.583072][ T5843] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 730.601003][ T42] audit: type=1400 audit(1473.379:216238): avc: denied { write } for pid=30909 comm="syz.8.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.612901][ T42] audit: type=1400 audit(1473.379:216239): avc: denied { read } for pid=30909 comm="syz.8.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 730.623543][ T42] audit: type=1400 audit(1473.398:216240): avc: denied { read } for pid=30911 comm="syz.8.6803" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 730.632835][ T42] audit: type=1400 audit(1473.398:216241): avc: denied { open } for pid=30911 comm="syz.8.6803" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 730.642812][ T42] audit: type=1400 audit(1473.398:216242): avc: denied { ioctl } for pid=30911 comm="syz.8.6803" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 730.724749][ T5843] usb 7-1: device descriptor read/64, error -71 [ 730.798888][ T42] audit: type=1400 audit(1473.566:216243): avc: denied { create } for pid=30915 comm="syz.8.6805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 730.859883][T30918] program syz.3.6806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 730.978703][ T5843] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 731.119772][ T5843] usb 7-1: device descriptor read/64, error -71 [ 731.139939][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6807'. [ 731.156519][T30921] vlan2: entered promiscuous mode [ 731.158237][T30921] erspan0: entered promiscuous mode [ 731.235515][ T5843] usb usb7-port1: attempt power cycle [ 731.598897][ T5843] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 731.621182][ T5843] usb 7-1: device descriptor read/8, error -71 [ 731.876761][ T5843] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 731.898967][ T5843] usb 7-1: device descriptor read/8, error -71 [ 732.016408][ T5843] usb usb7-port1: unable to enumerate USB device [ 734.050399][T30973] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 734.060889][T30973] netlink: 232 bytes leftover after parsing attributes in process `syz.8.6824'. [ 734.771494][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6829'. [ 734.826036][T30992] ISOFS: Unable to identify CD-ROM format. [ 734.837547][T30993] ISOFS: Unable to identify CD-ROM format. [ 734.898034][T30995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6831'. [ 734.901944][T30995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6831'. [ 735.005910][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6832'. [ 735.020970][ T5112] block nbd2: Possible stuck request ffff8880298c7000: control (read@0,1024B). Runtime 210 seconds [ 735.032461][ T5112] block nbd2: Possible stuck request ffff8880298c71c0: control (read@1024,3072B). Runtime 210 seconds [ 735.493804][T31007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6835'. [ 735.867339][ T42] kauditd_printk_skb: 110 callbacks suppressed [ 735.867355][ T42] audit: type=1400 audit(1478.308:216354): avc: denied { read } for pid=31010 comm="syz.2.6837" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.879590][ T42] audit: type=1400 audit(1478.318:216355): avc: denied { open } for pid=31010 comm="syz.2.6837" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.889849][ T42] audit: type=1400 audit(1478.318:216356): avc: denied { write } for pid=31010 comm="syz.2.6837" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 735.898858][ T42] audit: type=1400 audit(1478.336:216357): avc: denied { connect } for pid=31010 comm="syz.2.6837" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 735.901529][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6837'. [ 735.905374][ T42] audit: type=1400 audit(1478.336:216358): avc: denied { write } for pid=31010 comm="syz.2.6837" path="socket:[171007]" dev="sockfs" ino=171007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 735.912054][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6837'. [ 735.916246][ T42] audit: type=1400 audit(1478.346:216359): avc: denied { create } for pid=31015 comm="syz.3.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 735.925492][ T42] audit: type=1400 audit(1478.346:216360): avc: denied { ioctl } for pid=31015 comm="syz.3.6839" path="socket:[173064]" dev="sockfs" ino=173064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 735.933431][ T42] audit: type=1400 audit(1478.346:216361): avc: denied { write } for pid=31015 comm="syz.3.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 735.970761][ T42] audit: type=1400 audit(1478.392:216362): avc: denied { connect } for pid=31015 comm="syz.3.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 735.976868][ T42] audit: type=1400 audit(1478.392:216363): avc: denied { getopt } for pid=31015 comm="syz.3.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 736.040255][T31027] netlink: 'syz.2.6841': attribute type 1 has an invalid length. [ 736.042856][T31028] netlink: 'syz.2.6841': attribute type 1 has an invalid length. [ 736.240449][T31028] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 736.241151][T31027] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 736.333232][T31036] netlink: 'syz.8.6843': attribute type 2 has an invalid length. [ 736.335393][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 736.474460][T31043] netlink: 'syz.8.6844': attribute type 1 has an invalid length. [ 736.488326][T31043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.494672][T31043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.524168][T31043] vlan2: entered allmulticast mode [ 736.526272][T31043] macsec0: entered allmulticast mode [ 736.528451][T31043] veth1_macvtap: entered allmulticast mode [ 736.535242][T31043] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 736.720623][T31053] loop5: detected capacity change from 0 to 2640 [ 736.723384][T31053] buffer_io_error: 11 callbacks suppressed [ 736.723398][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.729511][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.732982][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.735550][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.738094][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.740659][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.749971][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.753541][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.756251][T31053] ldm_validate_partition_table(): Disk read failed. [ 736.758419][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.760931][T31053] Buffer I/O error on dev loop5, logical block 0, async page read [ 736.761020][T31053] Dev loop5: unable to read RDB block 0 [ 736.767389][T31053] loop5: unable to read partition table [ 736.769324][T31053] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 736.775902][T31053] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6847'. [ 736.853095][T31066] netlink: 'syz.8.6851': attribute type 11 has an invalid length. [ 736.891171][T31070] overlayfs: workdir and upperdir must reside under the same mount [ 737.016015][T31072] Can't find ip_set type bitmap:ip [ 737.047573][T31081] futex_wake_op: syz.8.6855 tries to shift op by 32; fix this program [ 737.181218][T31088] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6859'. [ 737.217089][T31101] vxcan0: tx address claim with dlc 0 [ 737.260996][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6865'. [ 737.389873][T31117] ªªªªªªI¡§å!qƒú: renamed from lo [ 737.536154][T31129] binder: 31128:31129 ioctl c0306201 200000000640 returned -22 [ 737.602687][T31133] No source specified [ 737.832219][ T9] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 738.024475][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 738.027924][ T9] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 738.031246][ T9] usb 13-1: config 179 has no interface number 0 [ 738.034224][ T9] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 738.035421][ T5830] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 738.039077][ T9] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 738.047151][ T9] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 738.051342][ T9] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 738.055356][ T9] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 738.061014][ T9] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 738.064851][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.071635][T31131] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 738.196763][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 738.209871][ T5830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 738.216899][ T5830] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.229772][ T5830] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 738.233525][ T5830] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 738.236940][ T5830] usb 7-1: Product: syz [ 738.238877][ T5830] usb 7-1: Manufacturer: syz [ 738.240866][ T5830] usb 7-1: SerialNumber: syz [ 738.258290][ T5830] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input108 [ 738.300820][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input109 [ 738.467335][T31140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.472676][T31140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.477616][T31140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.482276][T31140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.489920][T31140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.496092][T31140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.501103][T31140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.504922][T31140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.510888][T31140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.515606][T31140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.525670][T31131] input: syz0 as /devices/virtual/input/input107 [ 738.666879][T28190] usb 7-1: USB disconnect, device number 83 [ 738.765713][T28190] appletouch 7-1:1.0: input: appletouch disconnected [ 739.535915][T31156] overlayfs: missing 'lowerdir' [ 739.843194][T28190] usb 13-1: USB disconnect, device number 4 [ 739.843298][ C0] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 739.849599][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 740.032240][T31163] bridge1: entered allmulticast mode [ 740.654246][T31190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 740.702310][T31198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6891'. [ 740.759655][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6893'. [ 740.782250][T31202] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6892'. [ 740.787813][T31202] nfs: Unknown parameter 'overlay' [ 740.797504][T31200] netlink: 'syz.3.6893': attribute type 3 has an invalid length. [ 740.800343][T31200] netlink: 'syz.3.6893': attribute type 1 has an invalid length. [ 740.803132][T31200] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6893'. [ 740.866878][T31210] overlayfs: missing 'workdir' [ 741.003118][T31214] sd 0:0:0:0: PR command failed: 1026 [ 741.005408][T31214] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 741.009610][T31214] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 741.504311][ T5815] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.571419][ T42] kauditd_printk_skb: 248 callbacks suppressed [ 741.571434][ T42] audit: type=1400 audit(1483.639:216612): avc: denied { execute } for pid=31216 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 741.582098][ T42] audit: type=1400 audit(1483.639:216613): avc: denied { execute_no_trans } for pid=31216 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 741.736301][ T5815] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.963592][ T5815] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.145924][ T5815] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.361972][ T42] audit: type=1400 audit(1484.378:216614): avc: denied { read } for pid=5450 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 742.411255][ T42] audit: type=1400 audit(1484.425:216615): avc: denied { search } for pid=5450 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.420942][ T42] audit: type=1400 audit(1484.425:216616): avc: denied { search } for pid=5450 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.430909][ T42] audit: type=1400 audit(1484.425:216617): avc: denied { search } for pid=5450 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.439215][ T42] audit: type=1400 audit(1484.425:216618): avc: denied { read } for pid=5450 comm="dhcpcd" name="n103" dev="tmpfs" ino=25979 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 742.449041][ T42] audit: type=1400 audit(1484.425:216619): avc: denied { open } for pid=5450 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=25979 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 742.456535][ T42] audit: type=1400 audit(1484.425:216620): avc: denied { getattr } for pid=5450 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=25979 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 742.465833][ T42] audit: type=1400 audit(1484.472:216621): avc: denied { read } for pid=31219 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.569075][ T5815] bridge_slave_1: left allmulticast mode [ 742.571531][ T5815] bridge_slave_1: left promiscuous mode [ 742.573924][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.665809][ T5815] bridge_slave_0: left allmulticast mode [ 742.668024][ T5815] bridge_slave_0: left promiscuous mode [ 742.670278][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.384739][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.478058][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.511915][ T5815] bond0 (unregistering): Released all slaves [ 743.518241][ T5815] bond1 (unregistering): Released all slaves [ 743.529433][ T5815] bond2 (unregistering): Released all slaves [ 743.587963][ T5450] 8021q: adding VLAN 0 to HW filter on device eth10 [ 743.744840][ T5450] 8021q: adding VLAN 0 to HW filter on device eth11 [ 744.293211][ T5450] 8021q: adding VLAN 0 to HW filter on device eth12 [ 744.784963][ T5450] 8021q: adding VLAN 0 to HW filter on device eth13 [ 745.156127][ T5815] hsr_slave_0: left promiscuous mode [ 745.209514][ T5815] hsr_slave_1: left promiscuous mode [ 745.213328][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.216379][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.243632][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.246100][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.349536][ T5815] veth1_macvtap: left promiscuous mode [ 745.351935][ T5815] veth0_macvtap: left promiscuous mode [ 745.354383][ T5815] veth1_vlan: left promiscuous mode [ 745.356675][ T5815] veth0_vlan: left promiscuous mode [ 746.268880][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 746.322219][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 747.458207][ T5815] IPVS: stop unused estimator thread 0... [ 751.400972][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 751.400988][ T42] audit: type=1400 audit(1492.833:216644): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 751.410072][ T42] audit: type=1400 audit(1492.833:216645): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 751.892144][ T12] bridge_slave_1: left allmulticast mode [ 751.894583][ T12] bridge_slave_1: left promiscuous mode [ 751.897171][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.956861][ T12] bridge_slave_0: left allmulticast mode [ 751.959378][ T12] bridge_slave_0: left promiscuous mode [ 751.962061][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.101242][ T56] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 753.368996][ T12] bond3 (unregistering): (slave geneve2): Releasing active interface [ 753.454296][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 753.496097][ T12] bridge0 (unregistering): left allmulticast mode [ 755.185206][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.239318][ T12] bond_slave_0: left allmulticast mode [ 755.260100][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.303167][ T12] bond_slave_1: left allmulticast mode [ 755.335159][ T12] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 755.378362][ T12] veth0_to_bond: left allmulticast mode [ 755.381675][ T12] bond0 (unregistering): Released all slaves [ 755.388943][ T12] bond1 (unregistering): Released all slaves [ 755.400582][ T12] bond2 (unregistering): Released all slaves [ 755.411186][ T12] bond3 (unregistering): Released all slaves [ 755.426935][ T12] bond4 (unregistering): Released all slaves [ 755.474557][ T12] bond5 (unregistering): (slave veth1): Releasing active interface [ 755.508054][ T12] bond5 (unregistering): Released all slaves [ 755.520656][ T12] bond6 (unregistering): Released all slaves [ 755.531156][ T12] bond7 (unregistering): Released all slaves [ 755.542961][ T12] bond8 (unregistering): Released all slaves [ 755.909733][ T42] audit: type=1400 audit(1497.052:216646): avc: denied { write } for pid=31253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.961682][ T42] audit: type=1400 audit(1497.098:216647): avc: denied { write } for pid=31256 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.506717][ T42] audit: type=1400 audit(1497.603:216648): avc: denied { write } for pid=31259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.571551][ T42] audit: type=1400 audit(1497.660:216649): avc: denied { write } for pid=31262 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.994348][ T42] audit: type=1400 audit(1498.062:216650): avc: denied { write } for pid=31265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.046018][ T42] audit: type=1400 audit(1498.108:216651): avc: denied { write } for pid=31268 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.531921][ T42] audit: type=1400 audit(1498.567:216652): avc: denied { write } for pid=31271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.595982][ T42] audit: type=1400 audit(1498.623:216653): avc: denied { write } for pid=31274 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.656401][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.659517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.815241][ T12] veth0_macvtap: left promiscuous mode [ 757.817554][ T12] veth1_vlan: left promiscuous mode [ 757.819659][ T12] veth0_vlan: left promiscuous mode [ 758.432154][ T42] audit: type=1400 audit(1499.409:216654): avc: denied { write } for pid=31277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.489371][ T42] audit: type=1400 audit(1499.465:216655): avc: denied { write } for pid=31280 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.522181][ T42] audit: type=1400 audit(1499.493:216656): avc: denied { read } for pid=5450 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 758.677382][T11451] smc: removing ib device syz0 [ 759.109344][ T12] team0 (unregistering): Port device team_slave_1 removed [ 759.285408][ T5843] syz0: Port: 1 Link DOWN [ 759.320329][ T42] audit: type=1400 audit(1500.232:216657): avc: denied { write } for pid=31282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.363422][ T42] audit: type=1400 audit(1500.278:216658): avc: denied { write } for pid=31285 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.367047][T11451] smbdirect: ib_dev[syz0] removed [ 759.450497][ T42] audit: type=1400 audit(1500.353:216659): avc: denied { write } for pid=31287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.456926][ T12] IPVS: stop unused estimator thread 0... [ 761.072589][T31312] random: crng reseeded on system resumption [ 761.096463][T31313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6902'. [ 761.097085][T31312] Unrecognized hibernate image header format! [ 761.103934][T31313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6902'. [ 761.111844][T31312] PM: hibernation: Image mismatch: architecture specific data [ 761.136818][ T5741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 761.153037][ T5741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 761.158771][ T5741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 761.166789][ T5741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 761.170408][ T5741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 761.201421][T31318] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6904'. [ 761.210087][T31318] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6904'. [ 761.232733][T31321] loop9: detected capacity change from 0 to 524287999 [ 761.235468][T31321] buffer_io_error: 341 callbacks suppressed [ 761.235479][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.240543][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.243154][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.245648][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.249963][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.253683][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.256262][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.260094][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.262580][T31321] ldm_validate_partition_table(): Disk read failed. [ 761.264695][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.267120][T31321] Buffer I/O error on dev loop9, logical block 0, async page read [ 761.270814][T31321] Dev loop9: unable to read RDB block 0 [ 761.273616][T31321] loop9: unable to read partition table [ 761.275987][T31321] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x) failed (rc=-5) [ 761.400048][T31314] ±ÿ speed is unknown, defaulting to 1000 [ 761.524345][T31335] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 761.567803][ T10] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 761.626943][T31314] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.630037][T31314] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.633254][T31314] bridge_slave_0: entered allmulticast mode [ 761.636053][T31314] bridge_slave_0: entered promiscuous mode [ 761.639295][T31314] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.641693][T31314] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.644658][T31314] bridge_slave_1: entered allmulticast mode [ 761.647707][T31314] bridge_slave_1: entered promiscuous mode [ 761.675463][T31314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.680643][T31314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.704559][T31314] team0: Port device team_slave_0 added [ 761.710734][T31314] team0: Port device team_slave_1 added [ 761.730066][ T10] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 761.732825][ T10] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 761.734311][T31314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.735935][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 761.738958][T31314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.743082][ T10] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 761.750654][T31314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.752488][T31314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.753850][ T10] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 761.757687][T31314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.757713][T31314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.759845][ T10] usb 13-1: Product: syz [ 761.776170][ T10] usb 13-1: Manufacturer: syz [ 761.777655][ T10] usb 13-1: SerialNumber: syz [ 761.780901][ T10] usb 13-1: config 0 descriptor?? [ 761.785282][ T10] hub 13-1:0.0: bad descriptor, ignoring hub [ 761.787623][ T10] hub 13-1:0.0: probe with driver hub failed with error -5 [ 761.791408][ T10] usb 13-1: selecting invalid altsetting 0 [ 761.793840][T31314] hsr_slave_0: entered promiscuous mode [ 761.796591][T31314] hsr_slave_1: entered promiscuous mode [ 761.800158][T31314] debugfs: 'hsr0' already exists in 'hsr' [ 761.802430][T31314] Cannot create hsr debugfs directory [ 762.331270][T31359] bond2 (unregistering): Released all slaves [ 762.450981][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 762.451002][ T42] audit: type=1400 audit(1503.168:216761): avc: denied { write } for pid=31361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.458760][T31326] usb 13-1: reset high-speed USB device number 5 using dummy_hcd [ 762.463782][ T42] audit: type=1400 audit(1503.168:216762): avc: denied { create } for pid=31361 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.463825][ T42] audit: type=1400 audit(1503.168:216763): avc: denied { write open } for pid=31361 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=26053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.463864][ T42] audit: type=1400 audit(1503.168:216764): avc: denied { append } for pid=31361 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=26053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.463898][ T42] audit: type=1400 audit(1503.168:216765): avc: denied { getattr } for pid=31361 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.477821][ T42] audit: type=1400 audit(1503.196:216766): avc: denied { read } for pid=31363 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.511328][ T42] audit: type=1400 audit(1503.225:216767): avc: denied { write } for pid=31364 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.520133][ T42] audit: type=1400 audit(1503.225:216768): avc: denied { unlink } for pid=31364 comm="rm" name="resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=26053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.576363][ T42] audit: type=1400 audit(1503.281:216769): avc: denied { create } for pid=31367 comm="syz.3.6911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.588460][ T42] audit: type=1400 audit(1503.299:216770): avc: denied { write } for pid=31366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.682322][T31326] usb 13-1: device firmware changed [ 762.689085][T19489] usb 13-1: USB disconnect, device number 5 [ 762.872141][T19489] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 763.033921][T19489] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 763.036794][T19489] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 763.039936][T19489] usb 13-1: config 0 interface 0 has no altsetting 0 [ 763.044888][T19489] usb 13-1: string descriptor 0 read error: -22 [ 763.047620][T19489] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 763.050537][T19489] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 763.054781][T19489] usb 13-1: config 0 descriptor?? [ 763.059217][T19489] hub 13-1:0.0: bad descriptor, ignoring hub [ 763.061408][T19489] hub 13-1:0.0: probe with driver hub failed with error -5 [ 763.065987][T19489] usb 13-1: selecting invalid altsetting 0 [ 763.183771][T31380] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 763.253203][T31392] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 763.365496][T19219] Bluetooth: hci5: command tx timeout [ 763.401065][ T56] usb 13-1: USB disconnect, device number 6 [ 763.452786][T19219] Bluetooth: hci3: unexpected event for opcode 0x203b [ 763.539909][T31405] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 763.662132][T31411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6917'. [ 763.667708][T31402] netlink: 'syz.3.6917': attribute type 3 has an invalid length. [ 764.142157][T31430] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 764.430057][T31449] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 764.522391][T31314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 764.568282][T31314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.574384][T31314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 764.609752][T31314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.613411][T31314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 764.756147][T31314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.761081][T31314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 764.815253][T31314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.816222][T31477] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 765.439580][T31314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.464632][T31314] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.473999][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.477094][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.493554][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.495888][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.588929][T19219] Bluetooth: hci5: command tx timeout [ 765.630932][ T10] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 765.723093][T31472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.730244][T31472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.791669][ T10] usb 13-1: Using ep0 maxpacket: 8 [ 765.796425][ T10] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 765.804068][ T10] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 765.817715][ T10] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 765.825906][ T10] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 765.840280][ T10] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.845943][ T10] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 765.849401][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.932364][T31519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 765.934432][T31519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 765.937062][T31519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 765.939471][T31519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 766.031433][T31519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 766.080141][ T10] usb 13-1: GET_CAPABILITIES returned 0 [ 766.081945][ T10] usbtmc 13-1:16.0: can't read capabilities [ 766.100702][T31472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.105044][T31472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.123271][T31519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 766.125989][T31519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 766.177829][T31519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 766.257346][T31519] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 766.261224][T31519] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 766.339213][T31519] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 766.430541][T31519] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 766.434720][T31519] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 766.443843][T31472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.447899][T31472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.511654][T31519] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 766.554906][T31314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.574285][T31529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.579737][T31529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.603795][T20804] usb 13-1: USB disconnect, device number 7 [ 766.613453][T31314] veth0_vlan: entered promiscuous mode [ 766.652878][T31314] veth1_vlan: entered promiscuous mode [ 766.702961][ T5884] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.705552][ T5884] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.710311][T31314] veth0_macvtap: entered promiscuous mode [ 766.716402][T31314] veth1_macvtap: entered promiscuous mode [ 766.726252][T31314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.730751][T31314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.758651][ T5884] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.761872][ T5884] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.772300][ T5884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.776062][ T5884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.803501][ T5884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.807576][ T5884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.817921][ T5884] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.823256][ T5884] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.902571][ T5884] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.905711][ T5884] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.977992][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.985045][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.023341][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.026488][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.170266][ T5112] block nbd2: Possible stuck request ffff8880298c7000: control (read@0,1024B). Runtime 240 seconds [ 767.174231][ T5112] block nbd2: Possible stuck request ffff8880298c71c0: control (read@1024,3072B). Runtime 240 seconds [ 767.228325][T31547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6900'. [ 767.549305][T31563] ±ÿ speed is unknown, defaulting to 1000 [ 767.771076][T31572] gretap0: entered promiscuous mode [ 767.802393][ T42] kauditd_printk_skb: 291 callbacks suppressed [ 767.802437][ T42] audit: type=1400 audit(1508.172:217062): avc: denied { create } for pid=31571 comm="syz.2.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 767.810784][ T42] audit: type=1400 audit(1508.172:217063): avc: denied { ioctl } for pid=31571 comm="syz.2.6948" path="socket:[173751]" dev="sockfs" ino=173751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 767.842166][ T42] audit: type=1400 audit(1508.210:217064): avc: denied { mounton } for pid=31571 comm="syz.2.6948" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 767.859494][ T42] audit: type=1400 audit(1508.210:217065): avc: denied { create } for pid=31577 comm="syz.0.6952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 767.868225][ T42] audit: type=1400 audit(1508.228:217066): avc: denied { write } for pid=31577 comm="syz.0.6952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 767.876216][ T42] audit: type=1400 audit(1508.228:217067): avc: denied { mmap_zero } for pid=31578 comm="syz.3.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 767.883608][ T42] audit: type=1400 audit(1508.238:217068): avc: denied { read } for pid=31578 comm="syz.3.6951" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 767.892177][ T42] audit: type=1400 audit(1508.238:217069): avc: denied { open } for pid=31578 comm="syz.3.6951" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 767.900149][ T42] audit: type=1400 audit(1508.238:217070): avc: denied { ioctl } for pid=31578 comm="syz.3.6951" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 767.909857][ T42] audit: type=1400 audit(1508.266:217071): avc: denied { allowed } for pid=31571 comm="syz.2.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 768.036228][T31587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6954'. [ 768.115474][T31594] netlink: 'syz.0.6956': attribute type 1 has an invalid length. [ 768.149052][T31594] bond2: (slave geneve2): making interface the new active one [ 768.152632][T31594] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 768.153933][T19219] Bluetooth: hci3: command 0x0405 tx timeout [ 768.154218][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 768.154259][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout [ 768.325054][T19219] Bluetooth: hci2: command 0x0c1a tx timeout [ 768.378909][T18620] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.381660][T18620] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.410636][T19219] Bluetooth: hci7: command 0x0c1a tx timeout [ 768.467121][T18620] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.472579][T18620] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.479064][T31608] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 768.532454][T31609] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6960'. [ 768.592461][ T5748] Bluetooth: hci5: command 0x0419 tx timeout [ 768.892935][T31641] netlink: 'syz.3.6971': attribute type 1 has an invalid length. [ 768.896446][T31641] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6971'. [ 768.920983][T31639] [ 769.035513][T31651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6975'. [ 769.217374][T31657] gretap0: entered promiscuous mode [ 770.026346][T31678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6984'. [ 770.040926][T31679] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 770.043137][T31679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 770.050925][T31679] vhci_hcd vhci_hcd.0: Device attached [ 770.227331][T31683] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6984'. [ 770.281757][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 770.345710][ T24] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 770.377990][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 770.431498][ T5886] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 770.549251][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 770.604158][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 770.609881][ T5886] usb 7-1: config 0 has no interfaces? [ 770.614867][ T5886] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 770.620190][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.624364][ T5886] usb 7-1: Product: syz [ 770.626681][ T5886] usb 7-1: Manufacturer: syz [ 770.628753][ T5886] usb 7-1: SerialNumber: syz [ 770.634670][ T5748] Bluetooth: hci7: command 0x0c1a tx timeout [ 770.634981][ T5886] usb 7-1: config 0 descriptor?? [ 770.805500][ T5748] Bluetooth: hci5: command 0x0419 tx timeout [ 770.854421][T31680] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 770.857120][ T5886] usb 7-1: USB disconnect, device number 84 [ 770.859816][ T12] vhci_hcd vhci_hcd.2: stop threads [ 770.861924][ T12] vhci_hcd vhci_hcd.2: release socket [ 770.864576][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 771.122899][T31709] netlink: 'syz.8.6990': attribute type 3 has an invalid length. [ 771.125755][T31709] netlink: 'syz.8.6990': attribute type 1 has an invalid length. [ 771.128673][T31709] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6990'. [ 771.131681][T31709] NCSI netlink: No device for ifindex 0 [ 771.164592][T31711] netlink: 'syz.8.6991': attribute type 1 has an invalid length. [ 771.180645][T31713] netlink: 'syz.8.6991': attribute type 1 has an invalid length. [ 771.268489][T31713] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 771.556233][T31717] syzkaller1: entered allmulticast mode [ 771.826728][T31730] program syz.2.6995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.862406][T31734] 9p: Bad value for 'port' [ 772.107207][T31742] fuse: Bad value for 'user_id' [ 772.109338][T31742] fuse: Bad value for 'user_id' [ 772.381081][T31756] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7005'. [ 772.523868][T31758] openvswitch: netlink: Missing valid actions attribute. [ 772.526717][T31758] openvswitch: netlink: Actions may not be safe on all matching packets [ 772.535645][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7006'. [ 772.564305][T31758] bridge2: port 1(dummy0) entered blocking state [ 772.567150][T31758] bridge2: port 1(dummy0) entered disabled state [ 772.570833][T31758] dummy0: entered allmulticast mode [ 772.574843][T31758] dummy0: entered promiscuous mode [ 772.580949][T31758] netlink: 'syz.8.7006': attribute type 10 has an invalid length. [ 772.584250][T31758] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7006'. [ 772.589599][T31758] bridge2: port 1(dummy0) entered blocking state [ 772.594703][T31758] bridge2: port 1(dummy0) entered forwarding state [ 772.599221][T31758] dummy0: left allmulticast mode [ 772.601956][ T5748] Bluetooth: hci3: command 0x0405 tx timeout [ 772.602705][T31758] bridge2: port 1(dummy0) entered disabled state [ 772.775493][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 772.858594][ T5748] Bluetooth: hci7: command 0x0c1a tx timeout [ 772.946655][T31770] 9p: Unknown access argument 18446744073709551615: -34 [ 773.041754][ T5748] Bluetooth: hci5: command 0x0419 tx timeout [ 773.136919][T31788] netlink: 'syz.0.7014': attribute type 32 has an invalid length. [ 773.159086][T31788] bond3: Setting coupled_control to off (0) [ 773.161649][T31788] bond3: entered promiscuous mode [ 773.168003][ T42] kauditd_printk_skb: 193 callbacks suppressed [ 773.168050][ T42] audit: type=1400 audit(1513.186:217265): avc: denied { create } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 773.179315][ T42] audit: type=1400 audit(1513.195:217266): avc: denied { create } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.188512][ T42] audit: type=1400 audit(1513.195:217267): avc: denied { write } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.197121][ T42] audit: type=1400 audit(1513.195:217268): avc: denied { read } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.205095][ T42] audit: type=1400 audit(1513.195:217269): avc: denied { bind } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 773.213079][ T42] audit: type=1400 audit(1513.223:217270): avc: denied { setopt } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 773.220551][ T42] audit: type=1400 audit(1513.223:217271): avc: denied { accept } for pid=31784 comm="syz.0.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 773.228745][ T42] audit: type=1400 audit(1513.223:217272): avc: denied { lock } for pid=31784 comm="syz.0.7014" path="socket:[175926]" dev="sockfs" ino=175926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 773.373475][ T10] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 773.531818][ T10] usb 13-1: Using ep0 maxpacket: 32 [ 773.535315][ T10] usb 13-1: config index 0 descriptor too short (expected 15270, got 18) [ 773.540363][ T10] usb 13-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 773.544535][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.547795][ T10] usb 13-1: Product: syz [ 773.549609][ T10] usb 13-1: Manufacturer: syz [ 773.551605][ T10] usb 13-1: SerialNumber: syz [ 773.556733][ T10] usb 13-1: config 0 descriptor?? [ 773.561519][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 773.564210][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 773.566178][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 773.569699][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 773.571595][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 773.579058][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 773.582709][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 773.585601][ T10] usb 13-1: media controller created [ 773.592543][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.602812][ T10] usb 13-1: selecting invalid altsetting 3 [ 773.604784][ T10] ttusb2: set interface to alts=3 failed [ 773.636112][ T10] DVB: Unable to find symbol tda10086_attach() [ 773.639049][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 773.643296][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 773.645402][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 773.648884][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 773.651404][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 773.655680][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 773.776422][T31787] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 773.781221][T31787] dvb-usb: bulk message failed: -22 (7/0) [ 773.787535][T31787] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 773.791748][T31787] ttusb2: i2c transfer failed. [ 773.797394][ T42] audit: type=1400 audit(1513.775:217273): avc: denied { write } for pid=31786 comm="syz.8.7015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 773.800214][ T56] usb 13-1: USB disconnect, device number 8 [ 773.806060][ T42] audit: type=1400 audit(1513.775:217274): avc: denied { nlmsg_write } for pid=31786 comm="syz.8.7015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 773.837021][ T56] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 774.088209][ T5748] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 774.154230][T31806] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7021'. [ 774.167762][T31811] tipc: Started in network mode [ 774.171198][T31811] tipc: Node identity 4004, cluster identity 4711 [ 774.175598][T31811] tipc: Node number set to 16388 [ 774.704005][T31834] netlink: 'syz.0.7029': attribute type 1 has an invalid length. [ 774.861422][T31834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 774.906841][T31840] bond4: (slave geneve3): making interface the new active one [ 774.911995][T31840] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 774.988789][ T56] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 775.077083][T31847] netlink: 'syz.0.7032': attribute type 16 has an invalid length. [ 775.082625][T31847] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.7032'. [ 775.156993][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 775.162693][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.167204][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.172518][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.177834][ T56] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 775.183864][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.191523][ T56] usb 7-1: config 0 descriptor?? [ 775.264962][ T5748] Bluetooth: hci5: command 0x0419 tx timeout [ 775.635665][ T56] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0020/input/input110 [ 775.779471][ T56] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 775.847635][ T5843] usb 7-1: USB disconnect, device number 85 [ 775.852420][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 775.857105][T31889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7041'. [ 775.894136][T31885] fido_id[31885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 776.043689][T31901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7047'. [ 776.050068][T31901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7047'. [ 776.088395][T31904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 776.264474][T31910] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7049'. [ 776.272455][ T5748] Bluetooth: hci7: unexpected event for opcode 0x0403 [ 776.336500][ T9] IPVS: starting estimator thread 0... [ 776.440138][T31915] IPVS: using max 23 ests per chain, 55200 per kthread [ 776.544166][T31914] ±ÿ speed is unknown, defaulting to 1000 [ 776.593365][T31920] lo: entered promiscuous mode [ 776.601095][T31920] tunl0: entered promiscuous mode [ 776.605189][T31920] gre0: entered promiscuous mode [ 776.608216][T31920] gretap0: entered promiscuous mode [ 776.612300][T31920] erspan0: entered promiscuous mode [ 776.615611][T31920] ip_vti0: entered promiscuous mode [ 776.618648][T31920] ip6_vti0: entered promiscuous mode [ 776.621693][T31920] sit0: entered promiscuous mode [ 776.624609][T31920] ip6tnl0: entered promiscuous mode [ 776.627560][T31920] ip6gre0: entered promiscuous mode [ 776.630507][T31920] syz_tun: entered promiscuous mode [ 776.633700][T31920] ip6gretap0: entered promiscuous mode [ 776.636854][T31920] bridge0: entered promiscuous mode [ 776.639899][T31920] vcan0: entered promiscuous mode [ 776.642870][T31920] bond0: entered promiscuous mode [ 776.645806][T31920] bond_slave_0: entered promiscuous mode [ 776.648566][T31920] bond_slave_1: entered promiscuous mode [ 776.652314][T31920] team0: entered promiscuous mode [ 776.654895][T31920] team_slave_0: entered promiscuous mode [ 776.657638][T31920] team_slave_1: entered promiscuous mode [ 776.662267][T31920] nlmon0: entered promiscuous mode [ 776.665341][T31920] batadv0: entered promiscuous mode [ 776.668404][T31920] vxcan0: entered promiscuous mode [ 776.671278][T31920] vxcan1: entered promiscuous mode [ 776.674126][T31920] wg0: entered promiscuous mode [ 776.678189][T31920] wg1: entered promiscuous mode [ 776.680893][T31920] wg2: entered promiscuous mode [ 776.683596][T31920] veth0_to_bridge: entered promiscuous mode [ 776.689623][T31920] veth1_to_bridge: entered promiscuous mode [ 776.693668][T31920] veth0_to_bond: entered promiscuous mode [ 776.697518][T31920] veth1_to_bond: entered promiscuous mode [ 776.700951][T31920] veth0_to_team: entered promiscuous mode [ 776.704622][T31920] veth1_to_team: entered promiscuous mode [ 776.710788][T31920] veth0_to_batadv: entered promiscuous mode [ 776.714070][T31920] batadv_slave_0: entered promiscuous mode [ 776.717125][T31920] veth1_to_batadv: entered promiscuous mode [ 776.726839][T31920] batadv_slave_1: entered promiscuous mode [ 776.731085][T31920] xfrm0: entered promiscuous mode [ 776.734242][T31920] veth0_to_hsr: entered promiscuous mode [ 776.737913][T31920] veth1_to_hsr: entered promiscuous mode [ 776.742584][T31920] hsr0: entered promiscuous mode [ 776.745102][T31920] veth1_virt_wifi: entered promiscuous mode [ 776.748210][T31920] veth0_virt_wifi: entered promiscuous mode [ 776.751533][T31920] virt_wifi0: entered promiscuous mode [ 776.759250][T31920] vlan0: entered promiscuous mode [ 776.764524][T31920] vlan1: entered promiscuous mode [ 776.766615][T31926] IPv6: NLM_F_CREATE should be specified when creating new route [ 776.767630][T31920] macvlan0: entered promiscuous mode [ 776.773738][T31920] macvlan1: entered promiscuous mode [ 776.776589][T31920] ipvlan0: entered promiscuous mode [ 776.778837][T31920] ipvlan1: entered promiscuous mode [ 776.782740][T31920] macvtap0: entered promiscuous mode [ 776.785735][T31920] macsec0: entered promiscuous mode [ 776.788464][T31920] geneve0: entered promiscuous mode [ 776.790639][T31920] geneve1: entered promiscuous mode [ 776.795101][T31920] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 776.798654][T31920] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 776.801708][T31920] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 776.805536][T31920] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 776.808714][T31920] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 776.811484][T31920] mac80211_hwsim hwsim73 wlan1: entered promiscuous mode [ 776.814551][T31920] bond_slave_1.1: entered promiscuous mode [ 776.816699][T31920] veth0: entered promiscuous mode [ 776.818407][T31920] veth1: entered promiscuous mode [ 776.820821][T31920] bond1: entered promiscuous mode [ 776.823769][T31920] bridge1: entered promiscuous mode [ 776.832451][T31920] bond2: entered promiscuous mode [ 776.836591][T31920] macsec1: entered promiscuous mode [ 776.838491][T31920] bridge2: entered promiscuous mode [ 777.496526][ T5748] Bluetooth: hci5: command 0x0419 tx timeout [ 778.771867][ T42] kauditd_printk_skb: 205 callbacks suppressed [ 778.771884][ T42] audit: type=1400 audit(1518.433:217480): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 780.824494][ C2] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 791.008779][ T42] audit: type=1400 audit(1529.871:217481): avc: denied { create } for pid=31949 comm="syz.3.7057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 791.015596][ T42] audit: type=1400 audit(1529.871:217482): avc: denied { create } for pid=31949 comm="syz.3.7057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.021546][ T42] audit: type=1400 audit(1529.871:217483): avc: denied { getopt } for pid=31949 comm="syz.3.7057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.027741][ T42] audit: type=1400 audit(1529.871:217484): avc: denied { ioctl } for pid=31949 comm="syz.3.7057" path="socket:[178602]" dev="sockfs" ino=178602 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 791.068494][ T42] audit: type=1400 audit(1529.927:217485): avc: denied { write } for pid=31949 comm="syz.3.7057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 791.077037][ T42] audit: type=1400 audit(1529.937:217486): avc: denied { setopt } for pid=31949 comm="syz.3.7057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 791.084226][ T42] audit: type=1400 audit(1529.937:217487): avc: denied { read write } for pid=31949 comm="syz.3.7057" name="video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 791.102743][ T42] audit: type=1400 audit(1529.937:217488): avc: denied { open } for pid=31949 comm="syz.3.7057" path="/dev/video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 791.115465][T18776] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 791.119162][ T42] audit: type=1400 audit(1529.937:217489): avc: denied { ioctl } for pid=31949 comm="syz.3.7057" path="/dev/video37" dev="devtmpfs" ino=1074 ioctlcmd=0x563b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 791.127859][ T42] audit: type=1400 audit(1529.965:217490): avc: denied { create } for pid=31953 comm="syz.3.7059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 791.199050][T31962] macvtap2: entered allmulticast mode [ 791.200842][T31962] bond0: entered allmulticast mode [ 791.207725][T31962] bond_slave_0: entered allmulticast mode [ 791.209974][T31962] bond_slave_1: entered allmulticast mode [ 791.212556][T31962] bond_slave_0: entered promiscuous mode [ 791.214481][T31962] bond_slave_1: entered promiscuous mode [ 791.218071][T31962] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 791.291599][T31962] bond0: left allmulticast mode [ 791.294175][T31962] bond_slave_0: left allmulticast mode [ 791.296546][T31962] bond_slave_1: left allmulticast mode [ 791.401002][T31983] sctp: [Deprecated]: syz.8.7064 (pid 31983) Use of int in max_burst socket option deprecated. [ 791.401002][T31983] Use struct sctp_assoc_value instead [ 791.494339][ T5843] bond_slave_0: left promiscuous mode [ 791.496680][ T5843] bond_slave_1: left promiscuous mode [ 791.516122][T31965] syzkaller1: entered promiscuous mode [ 791.517863][T31965] syzkaller1: entered allmulticast mode [ 791.519628][T31972] can0: slcan on ttyS3. [ 791.986652][T32001] tipc: MTU too low for tipc bearer [ 791.996947][T31955] can0 (unregistered): slcan off ttyS3. [ 792.063112][T32010] openvswitch: netlink: Actions may not be safe on all matching packets [ 792.325061][T32052] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7081'. [ 792.359759][T32054] program syz.2.7083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 792.363137][T32054] ata1.00: invalid command format 67 [ 792.369854][T32054] overlayfs: missing 'workdir' [ 792.455717][T32058] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7079'. [ 792.459192][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7079'. [ 792.923208][T32057] ±ÿ speed is unknown, defaulting to 1000 [ 793.082941][T32061] ±ÿ speed is unknown, defaulting to 1000 [ 793.142866][ T43] INFO: task syz.9.6048:27591 blocked in I/O wait for more than 143 seconds. [ 793.145999][ T43] Tainted: G L syzkaller #0 [ 793.148100][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.150801][ T43] task:syz.9.6048 state:D stack:25120 pid:27591 tgid:27590 ppid:21331 task_flags:0x400140 flags:0x00080002 [ 793.154758][ T43] Call Trace: [ 793.156089][ T43] [ 793.157409][ T43] __schedule+0x125c/0x6730 [ 793.159410][ T43] ? __pfx___schedule+0x10/0x10 [ 793.161437][ T43] ? find_held_lock+0x2b/0x80 [ 793.164028][ T43] ? schedule+0x225/0x2c0 [ 793.165778][ T43] schedule+0xdd/0x2c0 [ 793.167555][ T43] io_schedule+0x8a/0xf0 [ 793.169461][ T43] folio_wait_bit_common+0x414/0xa70 [ 793.171794][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 793.174463][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 793.176962][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 793.179263][ T43] ? __pfx___might_resched+0x10/0x10 [ 793.181561][ T43] migrate_pages_batch+0x7a1/0x45c0 [ 793.184149][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 793.186442][ T43] ? __pfx_compaction_free+0x10/0x10 [ 793.188628][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 793.190896][ T43] ? mark_held_locks+0x40/0x70 [ 793.193045][ T43] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 793.196179][ T43] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 793.198750][ T43] ? __pfx_remove_migration_pte+0x10/0x10 [ 793.201190][ T43] ? __lock_acquire+0x49f/0x1a40 [ 793.203327][ T43] migrate_pages_sync+0x4db/0x880 [ 793.206575][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 793.208672][ T43] ? __pfx_compaction_free+0x10/0x10 [ 793.210623][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 793.212696][ T43] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 793.214762][ T43] ? find_held_lock+0x2b/0x80 [ 793.220750][ T43] migrate_pages+0x1a83/0x2850 [ 793.222530][ T43] ? isolate_migratepages_block+0xd74/0x61d0 [ 793.224737][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 793.227129][ T43] ? __pfx_compaction_free+0x10/0x10 [ 793.229397][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 793.231463][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 793.233987][ T43] ? __pfx___might_resched+0x10/0x10 [ 793.236075][ T43] ? putback_movable_pages+0x7e0/0xbd0 [ 793.238340][ T43] compact_zone+0x243c/0x4420 [ 793.239890][ T43] ? __pfx_compact_zone+0x10/0x10 [ 793.241568][ T43] ? __flush_work+0xa38/0xcb0 [ 793.243092][ T43] ? __flush_work+0xa38/0xcb0 [ 793.244615][ T43] compact_node+0x17f/0x2c0 [ 793.246095][ T43] ? __pfx_compact_node+0x10/0x10 [ 793.247984][ T43] ? __lru_add_drain_all+0x441/0x650 [ 793.249663][ T43] sysctl_compaction_handler+0x141/0x210 [ 793.251510][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 793.253299][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 793.255209][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 793.256962][ T43] iter_file_splice_write+0x830/0x10b0 [ 793.259036][ T43] ? copy_splice_read+0x739/0xbb0 [ 793.260710][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 793.262634][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 793.264502][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 793.266347][ T43] direct_splice_actor+0x192/0x690 [ 793.268003][ T43] splice_direct_to_actor+0x345/0xa30 [ 793.269988][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 793.271865][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 793.273791][ T43] do_splice_direct+0x174/0x240 [ 793.275350][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 793.277032][ T43] ? avc_policy_seqno+0x9/0x20 [ 793.278622][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 793.280679][ T43] ? rw_verify_area+0xce/0x6d0 [ 793.282182][ T43] do_sendfile+0xadc/0xe20 [ 793.283575][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 793.285063][ T43] __x64_sys_sendfile64+0x154/0x220 [ 793.286782][ T43] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 793.288578][ T43] do_syscall_64+0x115/0x870 [ 793.290081][ T43] ? clear_bhb_loop+0x40/0x90 [ 793.291578][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.293427][ T43] RIP: 0033:0x7f6c08b9de99 [ 793.294829][ T43] RSP: 002b:00007f6c09982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.297444][ T43] RAX: ffffffffffffffda RBX: 00007f6c08e25fa0 RCX: 00007f6c08b9de99 [ 793.300015][ T43] RDX: 00002000000000c0 RSI: 000000000000000c RDI: 000000000000000d [ 793.303114][ T43] RBP: 00007f6c08c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 793.305658][ T43] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 793.308139][ T43] R13: 00007f6c08e26038 R14: 00007f6c08e25fa0 R15: 00007fff5fd83758 [ 793.310590][ T43] [ 793.311794][ T43] [ 793.311794][ T43] Showing all locks held in the system: [ 793.314248][ T43] 1 lock held by khungtaskd/43: [ 793.315767][ T43] #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 793.318934][ T43] 3 locks held by kworker/1:5/5830: [ 793.320585][ T43] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 793.324372][ T43] #1: ffffc90003ef7d08 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 793.328920][ T43] #2: ffffffff90f7ae00 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 793.333777][ T43] 3 locks held by kworker/u33:47/9133: [ 793.336016][ T43] #0: ffff88801bce4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 793.340139][ T43] #1: ffffc90005b7fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 793.344155][ T43] #2: ffffffff90a9c6c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 793.347810][ T43] 1 lock held by udevd/19319: [ 793.349643][ T43] #0: ffff888029828350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 793.353362][ T43] 3 locks held by kworker/3:5/20769: [ 793.355445][ T43] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 793.359443][ T43] #1: ffffc90006a5fd08 ((work_completion)(&rdev->destroy_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 793.364035][ T43] #2: ffffffff90a9c6c0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_destroy_iface_wk+0x12/0x30 [ 793.367881][ T43] 2 locks held by getty/22118: [ 793.369681][ T43] #0: ffff8880360220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 793.373620][ T43] #1: ffffc900061132e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 793.377608][ T43] 1 lock held by syz.9.6048/27591: [ 793.379595][ T43] #0: ffff888047ada450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 793.383460][ T43] 1 lock held by syz.7.6184/28177: [ 793.385568][ T43] #0: ffff888029828350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 793.391413][ T43] 1 lock held by syz.8.7079/32047: [ 793.393467][ T43] #0: ffffffff8ebf1af8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 793.397424][ T43] 3 locks held by syz.0.7081/32052: [ 793.399440][ T43] #0: ffffffff90f7ae00 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 793.403360][ T43] #1: ffffffff90a9c6c0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x29/0x50 [ 793.407136][ T43] #2: ffff8880641a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_leave+0x4f/0x90 [ 793.410918][ T43] 2 locks held by syz.2.7083/32057: [ 793.412951][ T43] #0: ffffffff90a83ac8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 793.416521][ T43] #1: ffffffff90a9c6c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 793.420160][ T43] 5 locks held by syz.2.7083/32061: [ 793.422264][ T43] #0: ffffffff90a83ac8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 793.425340][ T43] #1: ffffffff906af848 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 793.428834][ T43] #2: ffffffff906af5c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 793.432593][ T43] #3: ffff88804f400fe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 793.436845][ T43] #4: ffffffff90a9c6c0 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x12f/0xb40 [ 793.440776][ T43] [ 793.441713][ T43] ============================================= [ 793.441713][ T43] [ 793.444886][ T43] NMI backtrace for cpu 0 [ 793.444901][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.444923][ T43] Tainted: [L]=SOFTLOCKUP [ 793.444929][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.444936][ T43] Call Trace: [ 793.444943][ T43] [ 793.444951][ T43] dump_stack_lvl+0x100/0x190 [ 793.445010][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 793.445032][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.445053][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 793.445078][ T43] sys_info+0x141/0x190 [ 793.445102][ T43] watchdog+0xcb1/0x1030 [ 793.445122][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.445145][ T43] ? __pfx_watchdog+0x10/0x10 [ 793.445163][ T43] ? __kthread_parkme+0x18c/0x230 [ 793.445189][ T43] ? kthread+0x13a/0x450 [ 793.445211][ T43] ? __pfx_watchdog+0x10/0x10 [ 793.445222][ T43] kthread+0x370/0x450 [ 793.445246][ T43] ? __pfx_kthread+0x10/0x10 [ 793.445271][ T43] ret_from_fork+0x72b/0xd50 [ 793.445293][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 793.445316][ T43] ? __switch_to+0x800/0x10f0 [ 793.445329][ T43] ? __pfx_kthread+0x10/0x10 [ 793.445352][ T43] ret_from_fork_asm+0x1a/0x30 [ 793.445386][ T43] [ 793.445393][ T43] Sending NMI from CPU 0 to CPUs 1-3: [ 793.496497][ C2] NMI backtrace for cpu 2 [ 793.496512][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.496526][ C2] Tainted: [L]=SOFTLOCKUP [ 793.496530][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.496537][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 793.496558][ C2] Code: 06 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 b9 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 793.496567][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 793.496578][ C2] RAX: 000000000074de97 RBX: ffff88801eed4a80 RCX: ffffffff8bb9e2d5 [ 793.496584][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a474f RDI: ffffffff8c401280 [ 793.496590][ C2] RBP: ffffed1003dda950 R08: 0000000000000001 R09: ffffed100d4c678d [ 793.496596][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 793.496602][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 793.496608][ C2] FS: 0000000000000000(0000) GS:ffff8880d5fe7000(0000) knlGS:0000000000000000 [ 793.496634][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.496642][ C2] CR2: 000000110c3db287 CR3: 0000000038b64000 CR4: 0000000000352ef0 [ 793.496648][ C2] DR0: ffffffffffffffff DR1: 00000000000001fa DR2: ffffffffffff10a2 [ 793.496654][ C2] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 793.496660][ C2] Call Trace: [ 793.496664][ C2] [ 793.496668][ C2] default_idle+0x9/0x10 [ 793.496679][ C2] default_idle_call+0x6c/0xb0 [ 793.496690][ C2] do_idle+0x3a7/0x5b0 [ 793.496706][ C2] ? __pfx_do_idle+0x10/0x10 [ 793.496717][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 793.496732][ C2] cpu_startup_entry+0x4f/0x60 [ 793.496745][ C2] start_secondary+0x21d/0x2d0 [ 793.496757][ C2] ? __pfx_start_secondary+0x10/0x10 [ 793.496770][ C2] common_startup_64+0x13e/0x158 [ 793.496807][ C2] [ 793.496812][ C3] NMI backtrace for cpu 3 [ 793.496824][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.496838][ C3] Tainted: [L]=SOFTLOCKUP [ 793.496841][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.496847][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 793.496865][ C3] Code: 06 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 b9 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 793.496875][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 793.496883][ C3] RAX: 00000000006cfe45 RBX: ffff88801eed2540 RCX: ffffffff8bb9e2d5 [ 793.496890][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a474f RDI: ffffffff8c401280 [ 793.496896][ C3] RBP: ffffed1003dda4a8 R08: 0000000000000001 R09: ffffed100d4e678d [ 793.496901][ C3] R10: ffff88806a733c6b R11: 0000000000000000 R12: 0000000000000000 [ 793.496908][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 793.496914][ C3] FS: 0000000000000000(0000) GS:ffff8880d60e7000(0000) knlGS:0000000000000000 [ 793.496935][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.496943][ C3] CR2: 000000110c3a7d90 CR3: 00000000442a5000 CR4: 0000000000352ef0 [ 793.496950][ C3] DR0: 0000000000000005 DR1: 0000000000000005 DR2: 0000000000040004 [ 793.496956][ C3] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 793.496962][ C3] Call Trace: [ 793.496966][ C3] [ 793.496969][ C3] default_idle+0x9/0x10 [ 793.496980][ C3] default_idle_call+0x6c/0xb0 [ 793.496990][ C3] do_idle+0x3a7/0x5b0 [ 793.497004][ C3] ? __pfx_do_idle+0x10/0x10 [ 793.497015][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 793.497030][ C3] cpu_startup_entry+0x4f/0x60 [ 793.497043][ C3] start_secondary+0x21d/0x2d0 [ 793.497054][ C3] ? __pfx_start_secondary+0x10/0x10 [ 793.497067][ C3] common_startup_64+0x13e/0x158 [ 793.497084][ C3] [ 793.497090][ C1] NMI backtrace for cpu 1 [ 793.497106][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.497125][ C1] Tainted: [L]=SOFTLOCKUP [ 793.497131][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.497141][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 793.497168][ C1] Code: 06 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 b9 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 793.497184][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000202 [ 793.497198][ C1] RAX: 0000000000693b45 RBX: ffff88801eaea540 RCX: ffffffff8bb9e2d5 [ 793.497209][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a474f RDI: ffffffff8c401280 [ 793.497220][ C1] RBP: ffffed1003d5d4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 793.497230][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 793.497238][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 793.497246][ C1] FS: 0000000000000000(0000) GS:ffff8880d5ee7000(0000) knlGS:0000000000000000 [ 793.497278][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.497291][ C1] CR2: 000055fa4609f000 CR3: 000000000e992000 CR4: 0000000000352ef0 [ 793.497303][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 793.497313][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 793.497323][ C1] Call Trace: [ 793.497328][ C1] [ 793.497334][ C1] default_idle+0x9/0x10 [ 793.497351][ C1] default_idle_call+0x6c/0xb0 [ 793.497369][ C1] do_idle+0x3a7/0x5b0 [ 793.497391][ C1] ? __pfx_do_idle+0x10/0x10 [ 793.497416][ C1] cpu_startup_entry+0x4f/0x60 [ 793.497438][ C1] start_secondary+0x21d/0x2d0 [ 793.497458][ C1] ? __pfx_start_secondary+0x10/0x10 [ 793.497481][ C1] common_startup_64+0x13e/0x158 [ 793.497510][ C1] [ 793.716834][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 793.719451][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 793.723528][ T43] Tainted: [L]=SOFTLOCKUP [ 793.725199][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.729053][ T43] Call Trace: [ 793.730354][ T43] [ 793.731520][ T43] dump_stack_lvl+0x100/0x190 [ 793.733394][ T43] vpanic+0x552/0x970 [ 793.734945][ T43] ? __pfx_vpanic+0x10/0x10 [ 793.736732][ T43] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 793.739159][ T43] panic+0xd1/0xe0 [ 793.740639][ T43] ? __pfx_panic+0x10/0x10 [ 793.742406][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 793.744802][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 793.747219][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 793.749508][ T43] ? watchdog.cold+0x1ec/0x234 [ 793.751392][ T43] ? watchdog+0xcc1/0x1030 [ 793.753131][ T43] watchdog.cold+0x1fd/0x234 [ 793.754867][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.757117][ T43] ? __pfx_watchdog+0x10/0x10 [ 793.758943][ T43] ? __kthread_parkme+0x18c/0x230 [ 793.760940][ T43] ? kthread+0x13a/0x450 [ 793.762630][ T43] ? __pfx_watchdog+0x10/0x10 [ 793.764460][ T43] kthread+0x370/0x450 [ 793.766069][ T43] ? __pfx_kthread+0x10/0x10 [ 793.767895][ T43] ret_from_fork+0x72b/0xd50 [ 793.769432][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 793.771207][ T43] ? __switch_to+0x800/0x10f0 [ 793.772721][ T43] ? __pfx_kthread+0x10/0x10 [ 793.774159][ T43] ret_from_fork_asm+0x1a/0x30 [ 793.775798][ T43] [ 793.777662][ T43] Kernel Offset: disabled [ 793.779069][ T43] Rebooting in 86400 seconds..