last executing test programs: 3m51.354456009s ago: executing program 32 (id=466): ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x7, 0x1}, 0x8) 3m5.836550338s ago: executing program 4 (id=1515): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x3706, &(0x7f0000000000)={0x0, 0x6b37, 0x80, 0x3, 0x24}, &(0x7f0000000080)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x5]}, &(0x7f0000000200)=0x6) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0xc, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_io_uring_submit$UBLK(r1, 0x0, 0x0, &(0x7f0000000240)=@ublk_get_queue_affinity_sqe={0x2e, 0x1, 0x0, r4, 0x80207501, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, r5, '\x00', {r11, 0xffff, 0x8, &(0x7f0000000200), 0x3}}) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 3m5.788986403s ago: executing program 4 (id=1516): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 3m5.516936726s ago: executing program 4 (id=1520): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28286d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d6d", 0x62) 3m5.380304625s ago: executing program 4 (id=1523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x0, 0x6, 0x0, 0x0, 0x6, 0x49e0382, r2}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = fcntl$getown(r0, 0x9) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0x1e4, 0x10, 0x509, 0x70bd26, 0x0, "", [@nested={0x1d1, 0x31, 0x0, 0x1, [@generic="e7fd1cc987412abd12a61250be1a1ad1f9a11f196ac7446aa3a450935abca7f7f7200509e180ddc434b3a717de9332954acf415edd6e5cc1b36848dfc020a0d3196b64af1050252d4c77e46e53c0b45278490ca70e88acb72aa0fd88699e6d071b8c6cd70173cb8500279d021f54695a25f3d06d936e7b7577", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0xd1}, @nested={0x138, 0x7e, 0x0, 0x1, [@nested={0x134, 0x5e, 0x0, 0x1, [@typed={0x11e, 0x93, 0x0, 0x0, @binary="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"}, @typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xe2, 0x0, 0x0, @pid=r5}]}]}]}]}, 0x1e4}], 0x1, 0x0, 0x0, 0x40004}, 0x20004050) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @mcast2, 0x1}, 0x1c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xe0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, 0x0, 0x0, 0x7, 0x0, "51ce850900b78f18c9c18a2e1e2cf9c237d2f70aba90abdb0d01d8151c52d5fc4a8c34f6bdcb2a101c497d3646bbef6e9aa2ed0217f1ead763af7323a44f37b1e25f9a183199192171745da66766ab5b"}, 0xd8) 3m5.328119909s ago: executing program 4 (id=1525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r0, 0xfffffffffffffffe, &(0x7f0000000000)) (async) r1 = socket$inet6(0xa, 0x0, 0xffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @nfc={0x27, r2, 0x1, 0x4}, @llc={0x1a, 0x4, 0xf9, 0x9, 0x7f, 0xc, @remote}, @nfc={0x27, r3, 0x0, 0x7}, 0x8f, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bond_slave_0\x00', 0xb626, 0x370, 0x40}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=@newpolicy={0x618, 0x13, 0x2, 0x70bd2a, 0x25dfdbfd, {{@in=@multicast2, @in6=@loopback, 0x4e24, 0x0, 0x4e21, 0x7f, 0xa, 0x180, 0x80, 0x87, 0x0, r5}, {0x0, 0x6, 0x2, 0x8000, 0x10001, 0x0, 0x4, 0xaaff0000000000}, {0x10001, 0x0, 0xb9, 0x8}, 0x4, 0x6e6bb8, 0x1, 0x1, 0x1, 0x1}, [@algo_crypt={0x13d, 0x2, {{'cts-cbc-aes-neon\x00'}, 0x7a8, "2cfb555fbdf0839891101c4c4e33142efedf556f4d214ad2cc6adb8dab2c89abedafeba7a2eb6960864dd46f6da0b18742370222e8bb1f8fd1d2fc5d0aecfddee8a4db4c9ebc031cd1ab1f1bbe93ec7688abf3550bcd1814501f863fb471e0dcbb086abf44749b36877ae8239150e1f142b2c6f65d00c1013ee84d3a777a8c7ed84971e92597bfcd17f67e3b4058a469ac7b18d6c85cb11623e45d967b109d2862c50728ee9b174e79417d1fd2fb3541c799b518038659874415a766c3c4bbc2841a9fce026d1fa78d220f574ae205a0cfe023c168e4f9b5d6d5b37f8bd3d983c757b7c46081ebe7e185e858bd08c43080d4f79324"}}, @lastused={0xc, 0xf, 0x800}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@mcast2, 0x2, 0x38, 0x6}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e20, 0xf, 0x4e24, 0x7, 0x2, 0xa0, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@empty, {0x1000, 0x7, 0x100, 0x100000000, 0x1, 0x2, 0x8, 0x9}, {0xe3d1, 0x332c, 0x7, 0x10000}, {0x9, 0x1, 0xffff}, 0x70bd29, 0x3505, 0xa, 0x0, 0x6, 0x20}}, @algo_auth_trunc={0x103, 0x14, {{'sha512-ssse3\x00'}, 0x5b8, 0x180, "84bfe8fa01e5e751e79447440fae21ddc69cca6635fb807d8fc45b9c52ba093aa3d0bb9631d3d430e5e7479463ff5027bf69452e785ef112332dc842da74a5cb08d47b994ecefa49f0e561472afe094b0ab082cfce18459021fd0e56fe7ce6b7df5f2497c28c547772656cb98e0209acbf10fa38a7f48110e04002011ad3ff31c4c8bc91bb3efc0e529d8e82338293bb9c51d74e869470d64bbefc5467bfba02125e8f3c2bcae176ff7228c9d72c9995feadcf7bfe13de"}}, @algo_comp={0xa0, 0x3, {{'deflate\x00'}, 0x2c0, "6c14b6ee76a02f1c2b3b2243432348b2a45653560430a62999c2d1d99e13f845549b8d52543cc9ea6ab4f2376ad7e1fc46534f29dff278a7017599461d0192264624a0cb88022cab77ac5fe66aab3fb7c8895eeb83adb5c3"}}, @tfcpad={0x8, 0x16, 0x10}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @algo_aead={0xa7, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x2d8, 0x0, "8f70b59b2be7aa47c8804ae1d60f17264df2a8dec50ac652bd71c7f6c117fe6fc130f8ee9665ff142a4d0043fc914838af57ebe626fe38ecbb9dd0a0359eae8afb48c313646c4bed6a28c8db3a7983512ebf222cb39bc1d40c57b8"}}, @policy={0xac, 0x7, {{@in=@remote, @in=@multicast2, 0x4e20, 0x17fc, 0x4e23, 0x6, 0xa, 0xa0, 0x80, 0x11, 0x0, r6}, {0x4d, 0x200, 0x99b1, 0x9, 0xb75, 0x7, 0x1, 0xffff}, {0x3, 0xfffffffffffffffa, 0xfffffffffffff001, 0x6}, 0xc, 0x6e6bbb, 0x1, 0x1, 0x3}}]}, 0x618}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000a40)={r0, &(0x7f0000000940)='cts-cbc-aes-neon\x00', 0x42100, &(0x7f0000000980)={@_ha_fsid={[0x5, 0x8]}, {0xce, 0x80, 0x8, 0xed}}, 0x9, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x9}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000a80)={0x0, 0x6}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000b00)={r8, 0x3}, &(0x7f0000000b40)=0x8) (async) statx(r7, &(0x7f0000000b80)='./file0\x00', 0x2000, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setxattr$incfs_metadata(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000d40)="0bf6f9f9b8ceaebaec73613fd5462af2443422a8f741985242ab00808f4acf16ef2a07d6a4b6ceb5040f3a1b45ab5707f2f6321a80e75547a452a6ac0c0c52d55aa3646cf4610fa959494d24c276813094e0ff784eb847db890d5815193a3c75b2b19296dbec3a096ddd6703adae35101b3b8bc262a7da", 0x77, 0x2) (async) recvfrom(r1, &(0x7f0000000dc0)=""/113, 0x71, 0x41, &(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x3, @random="747677bd9a6b", 'vlan1\x00'}}, 0x80) write(r0, &(0x7f0000000ec0)="3e197ab62d4997f9d4abb9f8f2a709fdc56311b7f856938d4ba7a52b6c7a0c36493e527e0d029539440baa8cd8eaf3e71f5b2f3cf9b2a321dfc376709ba5c7e046e711c7f56c82af37d79705fe68b1838429c104e80480584fa08eaf51bde7bdd7d17e2d58e5a6336a0ec543", 0x6c) (async) preadv(r4, &(0x7f0000003340)=[{&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/33, 0x21}, {&(0x7f0000002080)=""/197, 0xc5}, {&(0x7f0000002180)=""/253, 0xfd}, {&(0x7f0000002280)=""/19, 0x13}, {&(0x7f00000022c0)=""/111, 0x6f}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x8, 0x7140204d, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000033c0)={'team_slave_0\x00'}) setxattr$incfs_id(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440), &(0x7f0000003480)={'0000000000000000000000000000000', 0x30}, 0x20, 0x9727e0399b990426) (async) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000003640)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003600)={&(0x7f0000003500)={0xdc, 0x453, 0x100, 0x70bd25, 0x25dfdbfb, "663b18d4b823a327c9b411c408d8db16c15a09aac318a36ed3b66259f5f23e9a6472de053e6a344ce8a614bc3676d7752924d822006fbe068e37684f1541cbbd5573c8738686975b857cd6f2fcd0edfd04479bb3c998266fae3b59e77655afd2ec38a025dcc74dd475c9c5e84f11c4640373081a2f30420ea03e5bf876e6b226cfd462ebbbb28ca2e0f3abccad8b04b0c1a06576161c21db587fd8bccfeda7c78dad1a4264f9fe4180e7c602d3113923c97f252733d6de3020135c3587d9d60bfbf4c61aac3e562549", ["", "", "", "", "", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) (async) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) (async) mount$fuseblk(&(0x7f0000003680), &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700), 0x80, &(0x7f0000003740)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x755}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, r6}}, {@dont_appraise}, {@uid_gt={'uid>', r5}}, {@appraise}]}}) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003900)=@ccm_128={{0x304}, "dd26aea648ba2301", "d45e0a6ee32f88c5e0bab19bdbf3ff75", "cd057707", "7674ed605e819834"}, 0x28) (async) setxattr$security_capability(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980), &(0x7f00000039c0)=@v2={0x2000000, [{0x7, 0x4}, {0x8, 0x6}]}, 0x14, 0x6) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000003a00)={r9, 0x8b77}, &(0x7f0000003a40)=0x8) mount$binderfs(&(0x7f0000003a80), &(0x7f0000003ac0)='./binderfs2\x00', &(0x7f0000003b00), 0x2b0000, &(0x7f0000003b40)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0xfffffffffffffff7}}], [{@dont_appraise}, {@euid_eq={'euid', 0x3d, r5}}, {@obj_type={'obj_type', 0x3d, 'group_id'}}, {@appraise}, {@fowner_gt={'fowner>', r10}}]}) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000003c40)=[@mss={0x2, 0xd}, @window={0x3, 0x8, 0x3000}, @window={0x3, 0x4, 0x101}, @mss={0x2, 0xcc7}, @timestamp], 0x5) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000003c80)={r9, 0x4}, &(0x7f0000003cc0)=0x8) 3m4.728668686s ago: executing program 4 (id=1534): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28286d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6dac", 0x62) 3m4.63446711s ago: executing program 33 (id=1534): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28286d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6dac", 0x62) 2m43.736658336s ago: executing program 2 (id=1722): bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f00000001c0)='./file0\x00'}, 0x18) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xa, @mcast2, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x4cf43000) mlockall(0x1) open(&(0x7f0000000140)='./file0\x00', 0x400180, 0x102) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fcffffff000000000100000024001680060005004e1e0000060001000200000008000300ac1414aa080006001500000068446e42fedec4aa24e33a3847a75586a02c6dfbfdaf624db24059ad045d459e4e6dacc5e4e41eb16c0b793ae01236008d6745475bb6eb8cc720227b17beae2668af3a3b7c45b56cc2eab3d2eae8594e63fd5e8576de9c33ccc7967994abeb5bedaf98d3c50462da438ee7a2"], 0x38}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r5, 0x2, 0x8, &(0x7f0000000080)=""/71, &(0x7f0000000100)=0x47) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="1c0000001d0021000000002d370000000700000005004b0000000000"], 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES16=r10, @ANYRESDEC=r7], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) syz_usb_disconnect(r0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r11, 0x0, 0x0) 2m40.73733042s ago: executing program 2 (id=1729): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 2m40.330529958s ago: executing program 2 (id=1738): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @dev, @local, {[@routing={0x5c, 0x0, 0x1}]}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x10a4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}, 0x1, 0x2}, 0x4040002) 2m40.24887063s ago: executing program 2 (id=1740): mknod(&(0x7f0000000080)='./bus\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) migrate_pages(r0, 0x3, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4eedf213a22b827b, 0x8) r3 = fanotify_init(0x200, 0x0) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r4, &(0x7f0000000800)='file *evio.c +', 0xe) fanotify_mark(r3, 0x1, 0x8000026, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x200, 0xa) 2m40.172967979s ago: executing program 2 (id=1742): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) r1 = inotify_init() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]}) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ftruncate(r5, 0x2000009) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400)=""/138, &(0x7f00000003c0)=0x8a) sendfile(r4, r5, 0x0, 0x20000000000006) r6 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x809, 0x9, [0x10, 0x40, 0x7, 0xc, 0xe, 0x270, 0x1, 0x4, 0x8]}, 0x1a) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f00000002c0)='u', 0x1}], 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) close(r7) 2m39.915704048s ago: executing program 2 (id=1747): r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x4, 0x1, 0x5392, 0x9, 0x9, {0x0, @in6={{0xa, 0x4e70, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x0, 0x9}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb63}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4004031) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000180)={r2, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={r1, 0x8}, &(0x7f00000004c0)=0x8) 2m39.848022529s ago: executing program 34 (id=1747): r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x4, 0x1, 0x5392, 0x9, 0x9, {0x0, @in6={{0xa, 0x4e70, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x0, 0x9}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb63}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4004031) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000180)={r2, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={r1, 0x8}, &(0x7f00000004c0)=0x8) 1m42.078586502s ago: executing program 0 (id=2102): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x40400) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x189) 1m42.02421512s ago: executing program 0 (id=2103): fsopen(&(0x7f0000000240)='smb3\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105038002040102b407"], 0x148) 1m38.948395687s ago: executing program 0 (id=2127): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0xc3ff, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 1m38.548131748s ago: executing program 0 (id=2132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/231) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000006c0), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0xc, 0x5, 0x9, 0x7e2}, {0x4, 0x4, 0x1f, 0x6}, {0x47c, 0xf, 0xd, 0x5}, {0x8e6, 0x2, 0x18, 0x7fffffff}, {0x2, 0x9e, 0xf, 0x6}, {0x1, 0x1, 0x7f, 0x5}, {0x28, 0x6, 0x0, 0xffff}]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xff19}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x6, 0x5, 0xe}, 0x10, 0x13993, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[r3, r3], &(0x7f0000000740)=[{0x0, 0x2, 0x1, 0x7}, {0x3, 0x1, 0x3, 0xa}, {0x3, 0x1, 0xa, 0xa}, {0x1, 0x4, 0x6, 0x5}, {0x0, 0x2, 0xb, 0xb}], 0x10, 0xa}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b000100627269646765000004000280440012800900010069706970000000003400028005000500ca000000080002007f000001050009008900000006000f000100000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m38.47738574s ago: executing program 0 (id=2134): syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB='\v'], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000100000000000000000000070000000900010073797a300000000064000000090a010400000000efffffff0700000008000a40000000000900020073797a320000000009000100737a30000000000800054000000021280011800b0001006f626a726566000002000000718af7acb0ec99f80900040073797a320000140000001000010000000000000000000500000a"], 0xac}}, 0x0) 1m38.018631224s ago: executing program 0 (id=2138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100001002abd700002d4df2500000000", @ANYRES32=r1, @ANYBLOB="94e406008353000020001280110001006272696467655f736c6176650000000008000580040018"], 0x40}}, 0x200088c2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0xff, 0x3, 0x1000, 0x5, 0x6, "c500000000001e00004000", 0x4, 0xfffffffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4000850) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 1m37.943068131s ago: executing program 35 (id=2138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100001002abd700002d4df2500000000", @ANYRES32=r1, @ANYBLOB="94e406008353000020001280110001006272696467655f736c6176650000000008000580040018"], 0x40}}, 0x200088c2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0xff, 0x3, 0x1000, 0x5, 0x6, "c500000000001e00004000", 0x4, 0xfffffffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4000850) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 1m13.146877521s ago: executing program 7 (id=2278): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x38, &(0x7f0000000500)=[{0x2c, '\x00', @data=0x3, 0x7fffffff}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x16371680, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x75) 1m13.146526305s ago: executing program 7 (id=2279): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}]}, 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (rerun: 32) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e2403220c"], 0x7) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x40007ff, 0x28842) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000080)={0xfffffffb, 0xb000, "cde939b73644e113dd00b3eb443710d2ab8943e11513fc39", {0x3, 0x9c}, 0x101}) (async) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) (rerun: 32) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x815090, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=r2]) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) (rerun: 32) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m13.068630712s ago: executing program 7 (id=2280): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) (fail_nth: 29) 1m12.768217911s ago: executing program 7 (id=2282): r0 = io_uring_setup(0x40000a71, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x277}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"d28cbfec70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281be36882ff896da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d383c178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401aff07b6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e815355d8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa901000000010000008dd78c219be7f0c53dddd4cea58ecac6cef53ed2ed1b67e63a7e04000000000000003949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d28ccb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5061ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f1fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b00"}) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) write$UHID_CREATE(r3, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x10000, 0x4, 0x7634, 0x3}}, 0x120) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.098038221s ago: executing program 7 (id=2290): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000040)={0x200004, 0x200000, 0xfffffffd, 0x9f0, 0xc8, 0x1002}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x7d0}], 0x1}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002280)=""/4088, 0xff8}], 0x1}, 0x40002160) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {r8, r9+60000000}}, 0x0) r10 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) sendto$inet(r3, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 64) close(0x3) mmap(&(0x7f0000082000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2fdff) 1m10.827831166s ago: executing program 7 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getrandom(&(0x7f0000000900)=""/4096, 0x1000, 0x3) (async) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000401}}}, 0x18) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000000080), 0x2080000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'gretap0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa46, 0x5}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m10.754075679s ago: executing program 36 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getrandom(&(0x7f0000000900)=""/4096, 0x1000, 0x3) (async) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000401}}}, 0x18) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000000080), 0x2080000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'gretap0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa46, 0x5}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m1.108282481s ago: executing program 3 (id=2349): socket$netlink(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x5, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x8, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x4, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x6, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x10000, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x7, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1m1.048207146s ago: executing program 3 (id=2350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000000c0)=0xfffffff3, 0x4) r1 = memfd_secret(0x80000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x19c}}, 0x4000) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/88, 0x58}], 0x3}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x41, &(0x7f0000000840)=[{&(0x7f0000000500)=""/101, 0x65}, {&(0x7f00000006c0)=""/222, 0xde}], 0x2}, 0x10140) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) ftruncate(r1, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 1m0.988379086s ago: executing program 3 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x10000000}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="0021470600710a5e31163ceb9d067120000000051000", 0x16}], 0x1, 0x8, 0x3) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x15, 0x0, 0x0, 0x0, "a846de6d99adb8a55267e10c7c67e5297453e8cf33f131e9b38f2ae05c6b6b36198be46c56f44e09cd2eda2ec1a74c4a7f2853e67869b6318e55d80a359efcc3"}}}}, 0x0) 1m0.936236524s ago: executing program 3 (id=2352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c74921", @ANYRES16=r5, @ANYBLOB="1b0225bd7000fcdbdf250300000014000100ff020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x80884}, 0x4000000) mount$bind(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x11490, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="66c4e18dabfe3d", @ANYRESHEX=r6, @ANYRES32=r6, @ANYRESHEX=r4, @ANYBLOB, @ANYRES64=r3, @ANYRES64=r4]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x13c, 0x28, 0x100, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x8}, {0xa}, {0x5, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_ACT={0x100, 0x1, [@m_bpf={0xfc, 0xa02, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x10000000, 0x0, 0x2}}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x94, 0x6, "d7aee70b0a946d0ff683d60f06c0b6a4c9cb1829324d1edb8fa1ea2b8229a3bec2dec281dd571268118f75f3617d81e796f06b62c5753d063c25f82a95cbc290f8ff6be6724052f200618009e69f4e18a749b8ee0bbd24f2f42a8f27c507c8f4c2118f4dc786886cfb82d7474d55b9fad137651bbaf808c27535fc6d80590f1ba12866ddab277d44577d3102f9fae0e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x13c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0x8, 0xfff1}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x71}}]}, 0x2c}}, 0x20040080) 1m0.039953808s ago: executing program 3 (id=2357): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x324, 0x0, 0x0, 0x46801}, 0x4000000) 59.768501546s ago: executing program 3 (id=2361): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) (async) listxattr(&(0x7f0000000000)='./config/usb_gadget/g1/max_speed\x00', &(0x7f0000000040)=""/102, 0x66) (async) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xe, {0x3, 0x0, 0xfffffffffffff8, 0x800, 0x0, 0x0, {0x0, 0x3, 0x1000000000000002, 0x1399, 0x7, 0x46, 0xffff8702, 0x0, 0x2, 0x4000, 0x0, r1, r2, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140), 0x12010, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x10000000002142}}, {@gid={'gid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x80, 0x0) 59.747562654s ago: executing program 37 (id=2361): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) (async) listxattr(&(0x7f0000000000)='./config/usb_gadget/g1/max_speed\x00', &(0x7f0000000040)=""/102, 0x66) (async) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xe, {0x3, 0x0, 0xfffffffffffff8, 0x800, 0x0, 0x0, {0x0, 0x3, 0x1000000000000002, 0x1399, 0x7, 0x46, 0xffff8702, 0x0, 0x2, 0x4000, 0x0, r1, r2, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140), 0x12010, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x10000000002142}}, {@gid={'gid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x80, 0x0) 15.157588651s ago: executing program 8 (id=2692): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x10000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000380)={0x10001, 0x5, 0x8000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x5, r2}) 15.088086778s ago: executing program 8 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x3f, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x9, @bearer=@l2={'ib', 0x3a, 'batadv_slave_1\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x810) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd21}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xb6ec}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xae51}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe7a}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x248}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d34"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 15.071710129s ago: executing program 8 (id=2695): fsopen(&(0x7f0000000240)='smb3\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105038002040102b407"], 0x148) 14.997225591s ago: executing program 8 (id=2696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x13f) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r5 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x1, 0x3, 0x8, 0x7, r5}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f00009df000/0x2000)=nil, 0x2000, 0x7) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x0, 0x0, @generic, 0x0, 0x0, 0x1}) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='\n', 0x1) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f00000001c0)={0x1, 'veth0_to_hsr\x00', {}, 0x8}) 14.787740372s ago: executing program 8 (id=2698): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000010000000000000000000000000000000000e4860f1fc0", @ANYRES32=r4, @ANYBLOB="46060900000800001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x3, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000002c0)=0x8, 0x4) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r9, 0x40045644, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="9c701d0900020000140035006873723000000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="44e566f42b7d75568e04eae700"], 0x3c}}, 0x8000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000240)=0x6, 0x4) 14.506991253s ago: executing program 8 (id=2699): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000000010002f00feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f00000005c0), 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x10, 0x7, 0x5, 0xffffffffffffffff, 0x401, 0x5, 0x0, 0x9}, &(0x7f0000000280)={0xa, 0x1, 0x4, 0x8, 0x5, 0x2237, 0x38e, 0xfffffffffffffffd}, &(0x7f00000002c0)={0x7, 0x7fffffffffffffff, 0x4ae8, 0x4, 0x4, 0x0, 0x1, 0x45}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) write$vga_arbiter(r0, &(0x7f0000000240)=@target={'target ', {'PCI:', '10', ':', '4', ':', '11', '.', '19'}}, 0x16) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x54) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc00000000000000000000000000414fa68a00000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100fe8000000000000000000000000000aaac1e000100000000000000000000000020010000000000000000000000000000ac14140400000000000000000000000032040000043500000a000200"], 0xa0}}, 0x0) 14.387545389s ago: executing program 38 (id=2699): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000000010002f00feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f00000005c0), 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x10, 0x7, 0x5, 0xffffffffffffffff, 0x401, 0x5, 0x0, 0x9}, &(0x7f0000000280)={0xa, 0x1, 0x4, 0x8, 0x5, 0x2237, 0x38e, 0xfffffffffffffffd}, &(0x7f00000002c0)={0x7, 0x7fffffffffffffff, 0x4ae8, 0x4, 0x4, 0x0, 0x1, 0x45}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) write$vga_arbiter(r0, &(0x7f0000000240)=@target={'target ', {'PCI:', '10', ':', '4', ':', '11', '.', '19'}}, 0x16) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x54) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc00000000000000000000000000414fa68a00000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100fe8000000000000000000000000000aaac1e000100000000000000000000000020010000000000000000000000000000ac14140400000000000000000000000032040000043500000a000200"], 0xa0}}, 0x0) 2.047594968s ago: executing program 5 (id=2880): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0d}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x80e, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xf, 0x27, 0x9a, 0x8, 0x403, 0xdf35, 0xd284, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7fc, 0x4, 0x5, 0x9, 0x10, 0x3, "", [{{0x9, 0x4, 0x9a, 0x2, 0x8, 0x11, 0x69, 0x47, 0x2e, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x9, 0xfc}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x4b, 0x8, 0x4, [@generic={0x47, 0x7, "154d319322ed839f784dab18a590ba3e7e608bea5e4bb90b49a4179abf0d6af82cadfd45fb9f6af1cb37695691c52d6d1993d209137171486f1e460ebd80375158fd2db640"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xa, 0x10, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2, 0xd, 0x8}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x9, 0xe1}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x0, 0x6, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x190}, @generic={0x3b, 0x1, "438eec586ac95eff284726613641105debaa642e03d312507d6f1b1686eb4593f01be4f987a0cec369f02d47cf15d72f463c12af54c3c01b8d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x4, 0x5}}]}}, {{0x9, 0x4, 0x60, 0x7e, 0x2, 0x19, 0x35, 0x89, 0xaa, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '5'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x289f, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa6, 0xe, 0xe50e}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x7, 0x6, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x4, 0x7, 0xa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x4, 0x4, "aa00d3675cb7010a1f"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x3, 0x7, "e1"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x3, "", "9e2a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x2, 0x1, 0x6}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x10, 0x3, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xb5, 0x0, 0xff}}]}}, {{0x9, 0x4, 0xb6, 0x9a, 0x10, 0xf4, 0x1c, 0x8d, 0x2, [@hid_hid={0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x85c}}, @generic={0xe6, 0x23, "cba643d3bc09b0ea4992f72e32d62835a73166401cf351fccb328b2f90d60933c5083de40e93e8e4cb2bd2978c50165f2b7c9566c7e9c5dd2fc9e86187e9537491ab26463d342ff72037130712febd65c4324883df7db37ea5fbc4969c5a147360664a2cede9385e26270d0f3216102446b26b3eb7c326381ef22a0b6bb9a27d1f04ffc28349829c854fc03b15417d1d6647514ce8a819db6f195ffe99a1cd4555876b0291eec97fb8e89a66c8d39b2d47a9145971b91209009f3e4ca2b35056a9fd552aece92900535e1623b83138e9dee2298cba3b33ad96677354859bb31e2db95c60"}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0xa, 0x6, 0x3, [@generic={0xe9, 0x9, "0a61b634ffe18bdf384d3f12a4bcb43f61a687be5db7a58671eaba129adfa4ca0725d4e3b84b6c4158541d3924c4c02176db95f926c3b77083e9eaf48aba7d93a923b549d3cf1b64a73146f4c35168dd130ed006867d984331c01a2b5a92aa3f00ba8dac837e8284312decb4770f7dd4705e5b644f61236f87bdb9e5e778dcc0a09d21a2eb2996f5e6ee54acf63c5d272699b15ffc874e281e3aaeae03e9b3394d4938f7e863853b3239a11073db6d9296c0ca1b044ada057a84bcc839a738963efcecdb4252eb029fe74e57b02b88533ecf478525c92277322fa32072df8489c90713bcb70091"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x2, 0x7, 0xc, [@generic={0xe5, 0x23, "480703fff5f10638182500527bdcc1a419de14f09307709619604688561f75b3dd3ab111c34acfcf396ebc43d9950907b9d51f945488c4e468a7e0e9fcbc329154ee4732f5a7fabd09b6cde70aea0503fe733cb16f0a3c02dcafb33f759700371fac8e75728bea1e828cb2478c6f12fa485ff449ff42f5e8b465c04eec1d2381cead550c8988ffa88c3f9e28a10c3492e125337e5f39a1c45dbaed135b67be8e2cb767583412e0d451fdd7e6a27d668ff9ab3a93baa3cffd32156f20b8e6c2748c5fdf578869075795e5d00a069ea9d1a132c80da3fe0b5cc7a3e788be837c8bc98bbb"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x4, 0x81, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}, @generic={0xb2, 0x6, "be69500fdf34a5697ce04c8cab58075bf531cc7e7341b280b87131de37414cd7a26bc5cd94cf9d1230939f44f0e8c302d722b2ca7ccde1ab4e1824145293acdcf99f9496053549fdaac0b2b29e58f6c99aba8136252a2faa9b16c376959b466ea269efcd0a9baaa936bf08806b24943c1cab6cd54437d612ad3b4c40fe2f3fd2d378a7a34559e701f7e44a02468c2f402841f5fd1ed376921820d6f66812c1be6453d38108138f31dd9e777faaf21608"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x5, 0x7, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0xeda2ff156abc2972, 0x0, 0xac, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0xf9, 0x5, 0x7}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x7, 0x9a, 0x12}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x71, 0x80, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x2, 0x2, 0x0, [@generic={0x75, 0x30, "8c55d2016a67669b827e36a62afcdb8a458fad305eebff6a20fc7251c9311cd7f53572b6d3adb2c4af4c68f3fddf41f1051b0e7725897a3c93c07fede7febd851fa4711401f39a584175a909f452983320547bc32ded2dc5407cb9294818bbc1d128276d81fb5e37ddd4f81b1eb073ebe8ca62"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x9, 0x10, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0xc0, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x6, 0xf3, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd2, 0x4}, @generic={0x46, 0xb, "0245b2d6440150cf8599f6c09b568e0823b3acb8808ab0d512e282239b70204bc4f72e09abb21dbe54681b64eb9e0d1a60a2616fc4753b45e7af619f4931bf10b7b8205c"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x4, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x2, 0x4, 0x6, [@generic={0x96, 0xe, "acc9d45aa6e5043f5697518dcbf5aaf3ae5b3d73adbda239e66eaa74d8f3f70bd90b2c219655a1a82a0557b6c92f89a4afb881ccd56b24d0d35485fef182a3c8fd7fe854659ed1d4b4926b81a788f902bcd22ca29b26a892e0da0d6f8df37c27cf33396c32681014b580b759d0b2db39902ccbe579eaffb5dcbe17a311b34bcd4c1d9151c37f863b61d78d675b941ca00e9daeba"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x6, 0x2, 0x3d, [@generic={0x12, 0x21, "6f6467b05c698367282093f2ce8ccec7"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x1e, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x8000}]}}]}}, {{0x9, 0x4, 0xf, 0x2, 0x0, 0xff, 0xff, 0xff, 0x6, [@generic={0xf0, 0x30, "2262ee3e7e649a379c7376ebcc50f9e3d8b8efd7f69cf5d55efab796d1e15aef5642b6df243cb405149312d0baac50225fae7b918c0583fb5e92e85004ba5042047dd72f234cb1733c4a8a6406e0fb2955e540d894e7cd2801704fef933418580b8ee78bb2ebeb8131abf22a820617d04e6bc823a4029c18797306134e7384b77003133fb34c062d501223d545a5ad96f5076b122fd1700516bc70ba71e8792eb4a8a7ff51af65dcb3aed960f4d92459daa3fa8b61fcdd5f48778e2967ad6332ad84b8f8a62ce88f2825563fa3e111fe3118fb8777b168f28127725b937bc415f976adb1c8a2f4370623556946d4"}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x200, 0x40, 0x5, 0x2, 0x8, 0xed}, 0x37, &(0x7f0000001180)={0x5, 0xf, 0x37, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "37085b0103aeacd5b4b5ae37f25bad46"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x0, 0x3f}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x4, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x9, 0x90}, @ptm_cap={0x3}]}, 0x1, [{0xb0, &(0x7f00000011c0)=@string={0xb0, 0x3, "7cce9eaf52c8330eae557903e6f1c9e0476564a0fde7e11332b9bf7a9134663330a7b45dea076edf054bfc933b078e313a1bf8307fcb1609bb25b223f1ffb2be9b37fdb20dcfc6b59f2478e035bc7ea4884f6109a779cb0f15e598f397f2ccf0c9475af0849b731037bc0da43453b19bc9759e0cc8ed46f116c3a95b7e01a7dad655b1d4d4c76fca14b24cf8b512accd72a67ed9aea8c3ba51b3fa8aae7ff5ea4d62ba9353d80e0834ac7931ab11"}}]}) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf25070000000500130081000000140008"], 0x38}}, 0x2) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000380)="f4c0", 0x2}], 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='xprtsec\x00', &(0x7f0000000200)='mtls\x00', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000fff00304004000010203010902240001010080040904000601070103090905014167d8611e665e4bcc707d2c024000"], &(0x7f0000001400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x4, 0xb4, 0xff, 0x8}, 0x151, &(0x7f0000000280)={0x5, 0xf, 0x151, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "c152023514d4f86348cef3b979e1f586"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x9, 0x1, 0x8, 0x6}, @ptm_cap={0x3}, @generic={0xf2, 0x10, 0xb, "80e5ec1dfe52d180d4414abce754e2ecd04ee77b7da5ce20276d404936bc784f5b5a8b5d46eb01ae04e93cbf54a1cabbeeea774fce305d7ede2bd6b3f512ed9db3feb25de4c4986c526a31935b8ef36eb70bf037d6d342c9ad1b59987d4795b3284069f955e158f7ba6e995c8717820ed6e4bdbf5b0c16fc29c1b5692bf8899da2eef427e0cef573d9c848f501af02e91bbef51704468d2fc08377801166cfa5b747261a7f828dea8efaa9e34183ef86eaed949c8cb2e729282e539bca03f70ab6472322080f4f44fe471fafbb0b875920f9af1b739b33e5b3b951c601f821bbec87904b001310806685be56f0a27b"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x0, 0x1e00, 0x8000, [0xf, 0x30]}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x9, 0xf00, 0x3, [0x0, 0xff0000, 0xf0, 0xffc060, 0xc0c0, 0xc000]}]}, 0x8, [{0xfd, &(0x7f0000000400)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x405}}, {0x93, &(0x7f0000000540)=@string={0x93, 0x3, "97023fd708f58e93c12964109de1d65a44952ee79a960c9753905a227a7e4101630d4029c68e90c559c7fe38ddc7d523ebe7232b3a9ab958e848c269e9f52836d897caed839a5e3dc28ad728e4dcd3c0bb398a8e77c02a0367e64fb091fa5710e19657c26e2301e8ebacf10824c6c0f0d16e47b14b6dfd8123a4b851308e9a46fc83cefc8e576515410aa7dba203e5bd4e"}}, {0x79, &(0x7f0000000600)=@string={0x79, 0x3, "994407348ca8cfd88ccb848b3848dfd4c5aee0973754828d02b3b2d28c53fd98b80c12f6f2f61e71693f6223f30d1246036106c0e5489b88c08417160fa9e187c3e397caa43cecae8bdc04b92516e0a60f391ce67c028019b73ae460e392360ba7f4aab7e0a3c33dd8ceb9f8d1f1fb24dd8d7cb9447003"}}, {0xdb, &(0x7f0000000680)=@string={0xdb, 0x3, "7435108be8098874ac7d55c347055966c98b5aff473c1148dcac24555825a5788346690927a4f29a4e42684082b3a50b8ba7f9c3ef2fd37547d9bfdf329e1869b5becd13724be27e85ee435037f09fd4a3c31c2fe9e3ab944fe053df5eb3f226994de6e1129753c8fac46f90a6b7dc26d59fa2f63aecaa0f4518c63f26c8179425116411ac5690e2d6019f8bdb628881716d1d559fca2a8cccfc623ecb2ffb662b66d6eef828aae70dfa2c57a17be260d76c21be38e54451c0b0ecac26c6f4e02fbd889a8d6425a0dff9a86ee932ac7adf2119fc60a4d47696"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x500a}}, {0xef, &(0x7f00000012c0)=@string={0xef, 0x3, "4087c1b55e82ac12d2daabc4c248658f644c20a0dc305116186b76c6f80774f6a4df1cd4b25132f5d3eef9e8f2a877ec7e2f454515d0cc2e69d309669e183de9277685d36acf4bb7af18f6688c4b1d2a210202dbc4296985748d79a2a8d4fae874b2e59839036a6531caa15840beb35ca73374468e23d01aaa7c85cdbb3e5928c63c7406b6c95f94e0c1c0334f60db77a66b5e5201d78b45b4919eff510f395c4f22356c782f0dee75fe5fe281a8abc24f6fe0680abade724c979c1210e82e485807b17a3c5ef6ba4eadc652289989d8d6e4d59bf031c0ec4872ea2a1123d91f3f5b89fca3f13e86f22249c3dd"}}, {0x9, &(0x7f00000013c0)=@string={0x9, 0x3, "6ecc7c81fc8e2c"}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.658399376s ago: executing program 9 (id=2886): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) (fail_nth: 76) 1.188807431s ago: executing program 9 (id=2892): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0, 0xae, 0xcc}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha384-arm\x00'}}, &(0x7f0000000340)="9db40a1d472b79ae9fab91669594c71e23d4aa320f5c7bdbbd79f2d5a571f7384d10aac282f44815b3c817cffac0cb64ebe7493c6c56b7ce7e4f2a7838b41481c80235ab3a44e194c013977bb4efbb905b7c612a26677e620ba27a85310e00ec3fa95e7eb91433a10509f39dd560dbd3b6689b11d220538604728cee1c2891a4ec9043ad72714eb154514af6f3f9e61cc8fee6562ffe34bfe25d7017b6e247912bf7ebed3fbd5fcb2d197a890b08", &(0x7f00000004c0)=""/204) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x184, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x289}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x184}}, 0x81) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000040)=0xfff7) keyctl$chown(0x4, r0, 0xee01, 0xee00) r11 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) fchdir(r12) bind$x25(r12, &(0x7f0000000100), 0x12) keyctl$setperm(0x5, r0, 0x20000220) keyctl$chown(0x4, r0, 0x0, 0x0) 1.188594513s ago: executing program 6 (id=2893): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0xfffffffe, 0x46801}, 0x4000000) 1.118548022s ago: executing program 9 (id=2894): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @generic={0x66}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 1.117775307s ago: executing program 9 (id=2896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') lseek(r4, 0x7, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000180)=[0x8000000000000001, 0x5]) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88507de050500000000f2170e65e3f50327e422000000000000bf0000000200000000001900", 0x3c}, 0x60) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88507de050500000000f2170e65e3f50327e422000000000000bf0000000200000000001900", 0x3c}, 0x60) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x300, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x20004, 0x51792e7248df3904}}, 0x20}}, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 999.288624ms ago: executing program 1 (id=2897): fsopen(&(0x7f0000000240)='smb3\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100"], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105038002040102b407"], 0x148) 868.240201ms ago: executing program 1 (id=2898): syz_emit_ethernet(0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$mouse(&(0x7f00000002c0), 0x2800000000000000, 0x2800) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 797.636721ms ago: executing program 9 (id=2899): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 797.234069ms ago: executing program 6 (id=2900): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) (fail_nth: 77) 736.41731ms ago: executing program 5 (id=2901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='md0\n', 0x4) (async) write(r0, &(0x7f00000001c0)='md0\n', 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x24080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000005c0)={0x0, 0x6, 0x3, {0x22c6, 0x2}, 0x10001}) 679.222342ms ago: executing program 5 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xffffffffffffff5b) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66ba6100b800900000efc461a814cbb8010000000f01c148b800000100000000000f23c00f21f835030009000f23f80f22d16567dbcbb9800000c00f3235000100000f30c744240078f00000c744240262aa0000c7442406000000000f01142436430f01c4c4c30d4b2c9cb8", 0x6c}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 584.95882ms ago: executing program 1 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000100)=0x10001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0ff0044745bb0720840822c10000010000108007266b97691690a2f140f1b6b4ebf5d61d484ea08c3aca5bfc6021f4091044fdec8503d80a9618010fc568d8f28c1476f871bebbda031ae46e6e8c1f2e95480f476843cdee7e776c169ffae882fa067a67c172711f1bc5e8632f3e0edddec04ee2be6eb4f1af13e5a9ac3d7dc6b41dbc20e4216a66926b79e4e5a5ddee1e20c2e39b7f68f26d9d85d32710e845b81f05fae6ac825eeb4e0146bc95c1fca2cce35e6a8ec2fdb956a0246c2ac7afdb92d8f1010bc227584e36a177e318551", @ANYRES32=0x0, @ANYBLOB="0000000058c400000400198008001b000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 449.521723ms ago: executing program 1 (id=2904): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) 388.257399ms ago: executing program 5 (id=2905): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r2, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x8000}}}}}}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000036007bc335bd7000f1cd0c5006"], 0x14}}, 0x4000) 338.083656ms ago: executing program 1 (id=2906): fsopen(&(0x7f0000000240)='smb3\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100"], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105038002040102b407"], 0x148) 336.905336ms ago: executing program 6 (id=2907): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}}, 0x24}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 336.420892ms ago: executing program 5 (id=2908): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x10128e0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x4000000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8240a3, &(0x7f0000000140)={[{@name={'name', 0x3d, 'veth1_to_bond\x00'}}, {@name={'name', 0x3d, './cgroup.cpu/syz0\x00'}}]}) 238.330341ms ago: executing program 9 (id=2909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b42415449400000000000000", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) 238.012308ms ago: executing program 1 (id=2910): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$inet(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x100000000000000, 0x46801}, 0x4000000) 237.866064ms ago: executing program 6 (id=2911): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x12b084226d2dad07, 0x70bd25, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000002380)={r6, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0x5, 0x3}, 0x90) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000000) 129.601524ms ago: executing program 5 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) close(0x3) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 127.039536ms ago: executing program 6 (id=2913): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) ioctl$RTC_ALM_READ(r2, 0x40187014, &(0x7f0000000040)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='nfsd 127.0.0.1\n', 0xf) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 0s ago: executing program 6 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0x0, 0x6}, {0x2, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000840}, 0x1) finit_module(r2, 0x0, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x4690d340, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) (async) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x0) kernel console output (not intermixed with test programs): ck0: Adding to iommu group 1 [ 280.900197][T13912] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 281.008162][ T42] audit: type=1400 audit(2000000064.269:1019): avc: denied { lock } for pid=13915 comm="syz.8.2470" path="socket:[63678]" dev="sockfs" ino=63678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 281.159784][T13925] netlink: 'syz.8.2472': attribute type 27 has an invalid length. [ 281.203971][ T42] audit: type=1400 audit(2000000064.459:1020): avc: denied { mounton } for pid=13926 comm="syz.8.2474" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 281.237638][T13931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.458910][ T42] audit: type=1400 audit(2000000064.719:1021): avc: denied { read } for pid=13949 comm="syz.6.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.390513][T13972] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 282.394216][ T64] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 282.442024][ T42] audit: type=1400 audit(2000000065.699:1022): avc: denied { checkpoint_restore } for pid=13975 comm="syz.6.2488" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.544873][ T42] audit: type=1400 audit(2000000065.809:1023): avc: denied { getopt } for pid=13977 comm="syz.6.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.908576][T13993] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=229 sclass=netlink_xfrm_socket pid=13993 comm=syz.6.2493 [ 284.303690][T13935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.514872][T14004] FAULT_INJECTION: forcing a failure. [ 284.514872][T14004] name failslab, interval 1, probability 0, space 0, times 0 [ 284.531561][T14004] CPU: 2 UID: 0 PID: 14004 Comm: syz.8.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.531583][T14004] Tainted: [L]=SOFTLOCKUP [ 284.531588][T14004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.531595][T14004] Call Trace: [ 284.531600][T14004] [ 284.531605][T14004] dump_stack_lvl+0x100/0x190 [ 284.531626][T14004] should_fail_ex.cold+0x5/0xa [ 284.531643][T14004] should_failslab+0xc2/0x120 [ 284.531660][T14004] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 284.531676][T14004] ? __alloc_skb+0x140/0x710 [ 284.531694][T14004] __alloc_skb+0x140/0x710 [ 284.531708][T14004] ? __alloc_skb+0x5b7/0x710 [ 284.531721][T14004] ? __pfx___alloc_skb+0x10/0x10 [ 284.531735][T14004] ? if_nlmsg_size+0x4b/0xd80 [ 284.531755][T14004] rtmsg_ifinfo_build_skb+0x81/0x260 [ 284.531777][T14004] rtmsg_ifinfo+0xa4/0x1b0 [ 284.531797][T14004] netif_state_change+0x17f/0x380 [ 284.531816][T14004] ? __pfx_netif_state_change+0x10/0x10 [ 284.531836][T14004] ? netif_change_flags+0x10d/0x160 [ 284.531852][T14004] do_setlink.isra.0+0x31ce/0x3e60 [ 284.531871][T14004] ? rcu_is_watching+0x12/0xc0 [ 284.531891][T14004] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 284.531909][T14004] ? __lock_acquire+0x49f/0x1a40 [ 284.531928][T14004] ? do_raw_spin_lock+0x128/0x260 [ 284.531946][T14004] ? find_held_lock+0x2b/0x80 [ 284.531965][T14004] ? debug_mutex_remove_waiter+0xa0/0x320 [ 284.531984][T14004] ? debug_mutex_remove_waiter+0xa0/0x320 [ 284.532005][T14004] ? mark_held_locks+0x40/0x70 [ 284.532020][T14004] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.532034][T14004] ? __mutex_lock+0x82c/0x1bd0 [ 284.532046][T14004] ? lockdep_hardirqs_on+0x78/0x100 [ 284.532059][T14004] ? __mutex_lock+0x82c/0x1bd0 [ 284.532072][T14004] ? __mutex_lock+0x26d/0x1bd0 [ 284.532085][T14004] ? rtnl_newlink+0x8bb/0x2380 [ 284.532102][T14004] ? __pfx___mutex_lock+0x10/0x10 [ 284.532115][T14004] ? rcu_is_watching+0x12/0xc0 [ 284.532133][T14004] ? cap_capable+0x107/0x430 [ 284.532162][T14004] rtnl_newlink+0x1b7e/0x2380 [ 284.532182][T14004] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.532196][T14004] ? find_held_lock+0x2b/0x80 [ 284.532214][T14004] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 284.532228][T14004] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 284.532244][T14004] ? avc_has_perm_noaudit+0x145/0x3b0 [ 284.532261][T14004] ? __lock_acquire+0x49f/0x1a40 [ 284.532282][T14004] ? find_held_lock+0x2b/0x80 [ 284.532300][T14004] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 284.532315][T14004] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 284.532331][T14004] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.532347][T14004] rtnetlink_rcv_msg+0x95e/0xe90 [ 284.532364][T14004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.532383][T14004] ? ref_tracker_free+0x37e/0x6c0 [ 284.532406][T14004] netlink_rcv_skb+0x159/0x420 [ 284.532424][T14004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.532447][T14004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.532466][T14004] ? netlink_deliver_tap+0x1ae/0xcc0 [ 284.532487][T14004] netlink_unicast+0x585/0x850 [ 284.532501][T14004] ? __pfx_netlink_unicast+0x10/0x10 [ 284.532516][T14004] netlink_sendmsg+0x8b0/0xda0 [ 284.532530][T14004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.532543][T14004] ? selinux_socket_sendmsg+0x198/0x2f0 [ 284.532562][T14004] ____sys_sendmsg+0xa4d/0xbe0 [ 284.532580][T14004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.532593][T14004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.532617][T14004] ___sys_sendmsg+0x190/0x1e0 [ 284.532636][T14004] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.532654][T14004] ? __lock_acquire+0x49f/0x1a40 [ 284.532668][T14004] ? get_pid_task+0x106/0x250 [ 284.532701][T14004] __sys_sendmsg+0x160/0x210 [ 284.532716][T14004] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.532738][T14004] do_syscall_64+0x115/0x870 [ 284.532751][T14004] ? clear_bhb_loop+0x40/0x90 [ 284.532766][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.532778][T14004] RIP: 0033:0x7fb9d439de99 [ 284.532789][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.532800][T14004] RSP: 002b:00007fb9d51e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.532812][T14004] RAX: ffffffffffffffda RBX: 00007fb9d4626090 RCX: 00007fb9d439de99 [ 284.532819][T14004] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 284.532826][T14004] RBP: 00007fb9d51e3090 R08: 0000000000000000 R09: 0000000000000000 [ 284.532833][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.532839][T14004] R13: 00007fb9d4626128 R14: 00007fb9d4626090 R15: 00007ffcb06b6838 [ 284.532853][T14004] [ 284.549912][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2497'. [ 284.578411][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 284.693809][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 284.841426][T14027] netlink: 'syz.9.2501': attribute type 1 has an invalid length. [ 284.894052][T14027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.900536][T14027] bond1: (slave bond2): making interface the new active one [ 284.919347][T14027] bond1: (slave bond2): Enslaving as an active interface with an up link [ 285.020701][ T42] audit: type=1400 audit(2000000068.279:1024): avc: denied { append } for pid=14048 comm="syz.5.2509" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 285.136629][T14058] FAULT_INJECTION: forcing a failure. [ 285.136629][T14058] name failslab, interval 1, probability 0, space 0, times 0 [ 285.143213][T14058] CPU: 3 UID: 0 PID: 14058 Comm: syz.5.2510 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.143234][T14058] Tainted: [L]=SOFTLOCKUP [ 285.143238][T14058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.143246][T14058] Call Trace: [ 285.143251][T14058] [ 285.143256][T14058] dump_stack_lvl+0x100/0x190 [ 285.143277][T14058] should_fail_ex.cold+0x5/0xa [ 285.143293][T14058] should_failslab+0xc2/0x120 [ 285.143309][T14058] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 285.143325][T14058] ? __alloc_skb+0x140/0x710 [ 285.143341][T14058] __alloc_skb+0x140/0x710 [ 285.143353][T14058] ? __alloc_skb+0x5b7/0x710 [ 285.143366][T14058] ? __pfx___alloc_skb+0x10/0x10 [ 285.143379][T14058] ? if_nlmsg_size+0x4b/0xd80 [ 285.143398][T14058] rtmsg_ifinfo_build_skb+0x81/0x260 [ 285.143418][T14058] rtmsg_ifinfo+0xa4/0x1b0 [ 285.143437][T14058] netif_state_change+0x17f/0x380 [ 285.143455][T14058] ? __pfx_netif_state_change+0x10/0x10 [ 285.143474][T14058] ? netif_change_flags+0x10d/0x160 [ 285.143489][T14058] do_setlink.isra.0+0x31ce/0x3e60 [ 285.143506][T14058] ? stack_trace_save+0x8e/0xc0 [ 285.143521][T14058] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 285.143553][T14058] ? __lock_acquire+0x49f/0x1a40 [ 285.143575][T14058] ? lock_acquire+0x1b9/0x370 [ 285.143591][T14058] ? rcu_is_watching+0x12/0xc0 [ 285.143611][T14058] ? trace_contention_end+0x126/0x160 [ 285.143626][T14058] ? __mutex_lock+0x26d/0x1bd0 [ 285.143642][T14058] ? rtnl_newlink+0x8bb/0x2380 [ 285.143659][T14058] ? __pfx___mutex_lock+0x10/0x10 [ 285.143672][T14058] ? rcu_is_watching+0x12/0xc0 [ 285.143689][T14058] ? cap_capable+0x107/0x430 [ 285.143713][T14058] rtnl_newlink+0x1b7e/0x2380 [ 285.143733][T14058] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.143747][T14058] ? find_held_lock+0x2b/0x80 [ 285.143765][T14058] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 285.143779][T14058] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 285.143795][T14058] ? avc_has_perm_noaudit+0x145/0x3b0 [ 285.143812][T14058] ? __lock_acquire+0x49f/0x1a40 [ 285.143833][T14058] ? find_held_lock+0x2b/0x80 [ 285.143850][T14058] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 285.143865][T14058] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 285.143881][T14058] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.143896][T14058] rtnetlink_rcv_msg+0x95e/0xe90 [ 285.143913][T14058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.143932][T14058] ? ref_tracker_free+0x37e/0x6c0 [ 285.143951][T14058] netlink_rcv_skb+0x159/0x420 [ 285.143968][T14058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.143985][T14058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.144002][T14058] ? netlink_deliver_tap+0x1ae/0xcc0 [ 285.144023][T14058] netlink_unicast+0x585/0x850 [ 285.144037][T14058] ? __pfx_netlink_unicast+0x10/0x10 [ 285.144052][T14058] netlink_sendmsg+0x8b0/0xda0 [ 285.144066][T14058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.144079][T14058] ? selinux_socket_sendmsg+0x198/0x2f0 [ 285.144104][T14058] ____sys_sendmsg+0xa4d/0xbe0 [ 285.144122][T14058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.144134][T14058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.144158][T14058] ___sys_sendmsg+0x190/0x1e0 [ 285.144178][T14058] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.144195][T14058] ? __lock_acquire+0x49f/0x1a40 [ 285.144209][T14058] ? get_pid_task+0x106/0x250 [ 285.144243][T14058] __sys_sendmsg+0x160/0x210 [ 285.144258][T14058] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.144280][T14058] do_syscall_64+0x115/0x870 [ 285.144293][T14058] ? clear_bhb_loop+0x40/0x90 [ 285.144308][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.144320][T14058] RIP: 0033:0x7f1d6059de99 [ 285.144331][T14058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.144343][T14058] RSP: 002b:00007f1d61473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.144354][T14058] RAX: ffffffffffffffda RBX: 00007f1d60826090 RCX: 00007f1d6059de99 [ 285.144362][T14058] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 285.144368][T14058] RBP: 00007f1d61473090 R08: 0000000000000000 R09: 0000000000000000 [ 285.144375][T14058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.144382][T14058] R13: 00007f1d60826128 R14: 00007f1d60826090 R15: 00007fff1cadd8d8 [ 285.144396][T14058] [ 285.471875][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2512'. [ 285.570670][T14065] syzkaller1: entered promiscuous mode [ 285.572501][T14065] syzkaller1: entered allmulticast mode [ 285.923894][ T42] audit: type=1400 audit(2000000069.189:1025): avc: denied { mounton } for pid=14069 comm="syz.8.2515" path="/syzcgroup/unified/syz8" dev="pstore" ino=5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 285.924080][T14072] CIFS: VFS: UNC: path must begin with // or \\ [ 285.933326][T14072] Malformed UNC in devname [ 285.933326][T14072] [ 285.936206][T14072] CIFS: VFS: Malformed UNC in devname [ 287.303669][ T1368] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 287.453898][ T1368] usb 10-1: Using ep0 maxpacket: 16 [ 287.458709][ T1368] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.463190][ T1368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.468114][ T1368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.472205][ T1368] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.476541][ T1368] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.484876][ T1368] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.489001][ T1368] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 287.492588][ T1368] usb 10-1: Manufacturer: syz [ 287.498748][ T1368] usb 10-1: config 0 descriptor?? [ 287.743670][ T1368] rc_core: IR keymap rc-hauppauge not found [ 287.746339][ T1368] Registered IR keymap rc-empty [ 287.748414][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.763773][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.785012][ T1368] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 287.790240][ T1368] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input15 [ 287.797519][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.813983][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.834702][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.853735][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.873746][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.886632][T14034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.895906][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.923948][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.944171][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.963810][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 287.983817][ T1368] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 288.016003][ T1368] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 288.022447][ T1368] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 288.040432][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2524'. [ 288.043969][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2524'. [ 288.111918][ T42] audit: type=1400 audit(2000000071.369:1026): avc: denied { write } for pid=14098 comm="syz.6.2524" name="/" dev="9p" ino=78395331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.124647][T14103] IPv6: addrconf: prefix option has invalid lifetime [ 288.128915][ T42] audit: type=1400 audit(2000000071.369:1027): avc: denied { remove_name } for pid=14098 comm="syz.6.2524" name="file0" dev="9p" ino=78395405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.144701][ T42] audit: type=1400 audit(2000000071.369:1028): avc: denied { unlink } for pid=14098 comm="syz.6.2524" name="file0" dev="9p" ino=78395405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.163254][ T42] audit: type=1400 audit(2000000071.369:1029): avc: denied { write } for pid=14098 comm="syz.6.2524" name="/" dev="9p" ino=78395331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.209856][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2528'. [ 288.377890][T14111] FAULT_INJECTION: forcing a failure. [ 288.377890][T14111] name failslab, interval 1, probability 0, space 0, times 0 [ 288.381912][T14111] CPU: 2 UID: 0 PID: 14111 Comm: syz.6.2529 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.381930][T14111] Tainted: [L]=SOFTLOCKUP [ 288.381935][T14111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.381942][T14111] Call Trace: [ 288.381946][T14111] [ 288.381951][T14111] dump_stack_lvl+0x100/0x190 [ 288.381972][T14111] should_fail_ex.cold+0x5/0xa [ 288.381988][T14111] should_failslab+0xc2/0x120 [ 288.382004][T14111] __kmalloc_noprof+0xfc/0x820 [ 288.382018][T14111] ? fib6_info_alloc+0x40/0x160 [ 288.382046][T14111] fib6_info_alloc+0x40/0x160 [ 288.382058][T14111] ip6_route_info_create+0x14c/0xad0 [ 288.382071][T14111] ? addrconf_add_mroute+0x102/0x350 [ 288.382090][T14111] ip6_route_add+0x4b/0x1d0 [ 288.382107][T14111] addrconf_add_mroute+0x1de/0x350 [ 288.382125][T14111] ? __pfx_addrconf_add_mroute+0x10/0x10 [ 288.382155][T14111] addrconf_add_dev+0x14e/0x1a0 [ 288.382167][T14111] addrconf_init_auto_addrs+0x10e/0x780 [ 288.382180][T14111] addrconf_notify+0x10af/0x1ba0 [ 288.382198][T14111] ? __pfx_addrconf_notify+0x10/0x10 [ 288.382214][T14111] ? ip6mr_device_event+0x1c4/0x230 [ 288.382237][T14111] notifier_call_chain+0x99/0x3f0 [ 288.382252][T14111] call_netdevice_notifiers_info+0xbe/0x110 [ 288.382272][T14111] __dev_notify_flags+0x12c/0x2e0 [ 288.382286][T14111] ? __pfx___dev_notify_flags+0x10/0x10 [ 288.382302][T14111] ? __pfx___dev_change_flags+0x10/0x10 [ 288.382315][T14111] ? validate_linkmsg+0x57c/0xba0 [ 288.382333][T14111] netif_change_flags+0x108/0x160 [ 288.382348][T14111] do_setlink.isra.0+0x1ac4/0x3e60 [ 288.382365][T14111] ? stack_trace_save+0x8e/0xc0 [ 288.382380][T14111] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 288.382398][T14111] ? __lock_acquire+0x49f/0x1a40 [ 288.382418][T14111] ? lock_acquire+0x1b9/0x370 [ 288.382435][T14111] ? rcu_is_watching+0x12/0xc0 [ 288.382452][T14111] ? trace_contention_end+0x126/0x160 [ 288.382468][T14111] ? __mutex_lock+0x26d/0x1bd0 [ 288.382483][T14111] ? rtnl_newlink+0x8bb/0x2380 [ 288.382500][T14111] ? __pfx___mutex_lock+0x10/0x10 [ 288.382514][T14111] ? rcu_is_watching+0x12/0xc0 [ 288.382531][T14111] ? cap_capable+0x107/0x430 [ 288.382555][T14111] rtnl_newlink+0x1b7e/0x2380 [ 288.382575][T14111] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.382589][T14111] ? find_held_lock+0x2b/0x80 [ 288.382611][T14111] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 288.382625][T14111] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 288.382641][T14111] ? avc_has_perm_noaudit+0x145/0x3b0 [ 288.382658][T14111] ? __lock_acquire+0x49f/0x1a40 [ 288.382679][T14111] ? find_held_lock+0x2b/0x80 [ 288.382696][T14111] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 288.382712][T14111] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 288.382728][T14111] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.382744][T14111] rtnetlink_rcv_msg+0x95e/0xe90 [ 288.382760][T14111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.382780][T14111] ? ref_tracker_free+0x37e/0x6c0 [ 288.382799][T14111] netlink_rcv_skb+0x159/0x420 [ 288.382812][T14111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.382829][T14111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.382845][T14111] ? netlink_deliver_tap+0x1ae/0xcc0 [ 288.382866][T14111] netlink_unicast+0x585/0x850 [ 288.382880][T14111] ? __pfx_netlink_unicast+0x10/0x10 [ 288.382895][T14111] netlink_sendmsg+0x8b0/0xda0 [ 288.382909][T14111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.382922][T14111] ? selinux_socket_sendmsg+0x198/0x2f0 [ 288.382942][T14111] ____sys_sendmsg+0xa4d/0xbe0 [ 288.382960][T14111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.382973][T14111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.382996][T14111] ___sys_sendmsg+0x190/0x1e0 [ 288.383016][T14111] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.383034][T14111] ? __lock_acquire+0x49f/0x1a40 [ 288.383048][T14111] ? get_pid_task+0x106/0x250 [ 288.383081][T14111] __sys_sendmsg+0x160/0x210 [ 288.383097][T14111] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.383118][T14111] do_syscall_64+0x115/0x870 [ 288.383132][T14111] ? clear_bhb_loop+0x40/0x90 [ 288.383146][T14111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.383159][T14111] RIP: 0033:0x7fc21d79de99 [ 288.383169][T14111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.383180][T14111] RSP: 002b:00007fc21b9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.383191][T14111] RAX: ffffffffffffffda RBX: 00007fc21da26090 RCX: 00007fc21d79de99 [ 288.383199][T14111] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 288.383206][T14111] RBP: 00007fc21b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 288.383212][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.383219][T14111] R13: 00007fc21da26128 R14: 00007fc21da26090 R15: 00007fff3413fba8 [ 288.383233][T14111] [ 288.613631][T11094] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 288.676068][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2532'. [ 288.685541][T14116] netlink: 'syz.6.2532': attribute type 1 has an invalid length. [ 288.694678][T14116] bond0: option mode: unable to set because the bond device has slaves [ 288.763694][T11094] usb 14-1: Using ep0 maxpacket: 32 [ 288.768360][T11094] usb 14-1: unable to get BOS descriptor or descriptor too short [ 288.776789][T11094] usb 14-1: string descriptor 0 read error: -22 [ 288.780982][T11094] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 288.785203][T11094] usb 14-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 288.800399][T11094] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 288.804052][T11094] dw2102: su3000_power_ctrl: 1, initialized 0 [ 288.806819][T11094] dvb-usb: bulk message failed: -22 (2/0) [ 288.811742][T11094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.818762][T11094] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 288.822445][T11094] usb 14-1: media controller created [ 288.824861][T11094] dvb-usb: bulk message failed: -22 (6/0) [ 288.827352][T11094] dw2102: i2c transfer failed. [ 288.829457][T11094] dvb-usb: bulk message failed: -22 (6/0) [ 288.831953][T11094] dw2102: i2c transfer failed. [ 288.834831][T11094] dvb-usb: bulk message failed: -22 (6/0) [ 288.837320][T11094] dw2102: i2c transfer failed. [ 288.839382][T11094] dvb-usb: bulk message failed: -22 (6/0) [ 288.841908][T11094] dw2102: i2c transfer failed. [ 288.844927][T11094] dvb-usb: bulk message failed: -22 (6/0) [ 288.847409][T11094] dw2102: i2c transfer failed. [ 288.849464][T11094] dvb-usb: bulk message failed: -22 (6/0) [ 288.851872][T11094] dw2102: i2c transfer failed. [ 288.858198][T11094] dvb-usb: MAC address: 02:02:02:02:02:02 [ 288.872272][T11094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.893549][T11094] dvb-usb: bulk message failed: -22 (3/0) [ 288.896088][T11094] dw2102: command 0x0e transfer failed. [ 288.898388][T11094] dvb-usb: bulk message failed: -22 (3/0) [ 288.900788][T11094] dw2102: command 0x0e transfer failed. [ 289.113406][T14125] netlink: 'syz.9.2528': attribute type 58 has an invalid length. [ 289.203699][T11094] dvb-usb: bulk message failed: -22 (3/0) [ 289.206782][T11094] dw2102: command 0x0e transfer failed. [ 289.209105][T11094] dvb-usb: bulk message failed: -22 (3/0) [ 289.211448][T11094] dw2102: command 0x0e transfer failed. [ 289.213872][T11094] dvb-usb: bulk message failed: -22 (1/0) [ 289.216383][T11094] dw2102: command 0x51 transfer failed. [ 289.223279][T14106] dvb-usb: bulk message failed: -22 (22/0) [ 289.226650][T14106] dw2102: i2c transfer failed. [ 289.238743][T11094] DVB: Unable to find symbol ds3000_attach() [ 289.242319][T11094] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 289.304606][T11094] rc_core: IR keymap rc-su3000 not found [ 289.307141][T11094] Registered IR keymap rc-empty [ 289.317402][T11094] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc1 [ 289.323340][T11094] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc1/input16 [ 289.331656][T11094] dvb-usb: schedule remote query interval to 150 msecs. [ 289.336180][T11094] dw2102: su3000_power_ctrl: 0, initialized 1 [ 289.338777][T11094] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 289.343858][T11094] usb 14-1: USB disconnect, device number 2 [ 289.386472][T11094] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 289.612306][ T42] audit: type=1400 audit(2000000072.869:1030): avc: denied { write } for pid=14129 comm="syz.6.2533" path="socket:[64415]" dev="sockfs" ino=64415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.665594][T14131] bond1 (unregistering): Released all slaves [ 289.879331][ T42] audit: type=1400 audit(2000000073.139:1031): avc: denied { write } for pid=14135 comm="syz.9.2534" name="/" dev="9p" ino=78395331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.083164][ T1044] usb 10-1: USB disconnect, device number 10 [ 290.130309][ T42] audit: type=1400 audit(2000000073.389:1032): avc: denied { setattr } for pid=14141 comm="syz.5.2536" path="socket:[63304]" dev="sockfs" ino=63304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.202026][T14146] ubi0: attaching mtd0 [ 290.210074][T14146] ubi0 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 290.261885][T14149] netlink: 'syz.9.2539': attribute type 1 has an invalid length. [ 290.630261][ T7666] wlan1: Trigger new scan to find an IBSS to join [ 290.652874][T14154] FAULT_INJECTION: forcing a failure. [ 290.652874][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 290.657927][T14154] CPU: 0 UID: 0 PID: 14154 Comm: syz.5.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.657945][T14154] Tainted: [L]=SOFTLOCKUP [ 290.657949][T14154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.657967][T14154] Call Trace: [ 290.657974][T14154] [ 290.657980][T14154] dump_stack_lvl+0x100/0x190 [ 290.658000][T14154] should_fail_ex.cold+0x5/0xa [ 290.658015][T14154] should_failslab+0xc2/0x120 [ 290.658031][T14154] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 290.658047][T14154] ? __alloc_skb+0x140/0x710 [ 290.658071][T14154] __alloc_skb+0x140/0x710 [ 290.658083][T14154] ? __alloc_skb+0x5b7/0x710 [ 290.658096][T14154] ? __pfx___alloc_skb+0x10/0x10 [ 290.658109][T14154] ? if_nlmsg_size+0x4b/0xd80 [ 290.658127][T14154] rtmsg_ifinfo_build_skb+0x81/0x260 [ 290.658147][T14154] rtmsg_ifinfo+0xa4/0x1b0 [ 290.658167][T14154] netif_state_change+0x17f/0x380 [ 290.658184][T14154] ? __pfx_netif_state_change+0x10/0x10 [ 290.658204][T14154] ? netif_change_flags+0x10d/0x160 [ 290.658219][T14154] do_setlink.isra.0+0x31ce/0x3e60 [ 290.658236][T14154] ? rcu_is_watching+0x12/0xc0 [ 290.658256][T14154] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 290.658273][T14154] ? __lock_acquire+0x49f/0x1a40 [ 290.658290][T14154] ? do_raw_spin_lock+0x128/0x260 [ 290.658307][T14154] ? find_held_lock+0x2b/0x80 [ 290.658324][T14154] ? debug_mutex_remove_waiter+0xa0/0x320 [ 290.658342][T14154] ? debug_mutex_remove_waiter+0xa0/0x320 [ 290.658363][T14154] ? mark_held_locks+0x40/0x70 [ 290.658376][T14154] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.658389][T14154] ? __mutex_lock+0x82c/0x1bd0 [ 290.658402][T14154] ? lockdep_hardirqs_on+0x78/0x100 [ 290.658415][T14154] ? __mutex_lock+0x82c/0x1bd0 [ 290.658427][T14154] ? __mutex_lock+0x26d/0x1bd0 [ 290.658440][T14154] ? rtnl_newlink+0x8bb/0x2380 [ 290.658457][T14154] ? __pfx___mutex_lock+0x10/0x10 [ 290.658470][T14154] ? rcu_is_watching+0x12/0xc0 [ 290.658487][T14154] ? cap_capable+0x107/0x430 [ 290.658511][T14154] rtnl_newlink+0x1b7e/0x2380 [ 290.658531][T14154] ? __pfx_rtnl_newlink+0x10/0x10 [ 290.658545][T14154] ? find_held_lock+0x2b/0x80 [ 290.658563][T14154] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 290.658579][T14154] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 290.658594][T14154] ? avc_has_perm_noaudit+0x145/0x3b0 [ 290.658612][T14154] ? __lock_acquire+0x49f/0x1a40 [ 290.658639][T14154] ? find_held_lock+0x2b/0x80 [ 290.658664][T14154] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 290.658685][T14154] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 290.658706][T14154] ? __pfx_rtnl_newlink+0x10/0x10 [ 290.658727][T14154] rtnetlink_rcv_msg+0x95e/0xe90 [ 290.658751][T14154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.658780][T14154] ? ref_tracker_free+0x37e/0x6c0 [ 290.658806][T14154] netlink_rcv_skb+0x159/0x420 [ 290.658822][T14154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.658846][T14154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.658872][T14154] ? netlink_deliver_tap+0x1ae/0xcc0 [ 290.658900][T14154] netlink_unicast+0x585/0x850 [ 290.658918][T14154] ? __pfx_netlink_unicast+0x10/0x10 [ 290.658941][T14154] netlink_sendmsg+0x8b0/0xda0 [ 290.658963][T14154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.658982][T14154] ? selinux_socket_sendmsg+0x198/0x2f0 [ 290.659006][T14154] ____sys_sendmsg+0xa4d/0xbe0 [ 290.659030][T14154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.659049][T14154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.659089][T14154] ___sys_sendmsg+0x190/0x1e0 [ 290.659112][T14154] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.659136][T14154] ? __lock_acquire+0x49f/0x1a40 [ 290.659156][T14154] ? get_pid_task+0x106/0x250 [ 290.659200][T14154] __sys_sendmsg+0x160/0x210 [ 290.659222][T14154] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.659256][T14154] do_syscall_64+0x115/0x870 [ 290.659274][T14154] ? clear_bhb_loop+0x40/0x90 [ 290.659293][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.659308][T14154] RIP: 0033:0x7f1d6059de99 [ 290.659323][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.659339][T14154] RSP: 002b:00007f1d61473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.659356][T14154] RAX: ffffffffffffffda RBX: 00007f1d60826090 RCX: 00007f1d6059de99 [ 290.659367][T14154] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 290.659378][T14154] RBP: 00007f1d61473090 R08: 0000000000000000 R09: 0000000000000000 [ 290.659388][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.659395][T14154] R13: 00007f1d60826128 R14: 00007f1d60826090 R15: 00007fff1cadd8d8 [ 290.659416][T14154] [ 291.657519][T14117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.879686][T14163] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2544'. [ 292.958239][ T42] audit: type=1400 audit(2000000076.219:1033): avc: denied { write } for pid=14170 comm="syz.6.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.144706][ T42] audit: type=1400 audit(2000000076.399:1034): avc: denied { write } for pid=14183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.256005][ T42] audit: type=1400 audit(2000000076.519:1035): avc: denied { write } for pid=14196 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.451617][T14207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.656000][ T8176] wlan1: Trigger new scan to find an IBSS to join [ 293.707534][T14221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4294 sclass=netlink_route_socket pid=14221 comm=syz.9.2556 [ 293.729512][T14224] loop5: detected capacity change from 0 to 7 [ 293.735520][T14224] Dev loop5: unable to read RDB block 7 [ 293.737402][T14224] loop5: unable to read partition table [ 293.741049][T14224] loop5: partition table beyond EOD, truncated [ 293.743232][T14224] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.846027][T14237] erspan0: entered promiscuous mode [ 294.033781][ T1044] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 294.183659][T14244] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 294.189558][ T42] audit: type=1400 audit(2000000077.449:1036): avc: denied { relabelto } for pid=14243 comm="syz.8.2562" name="58" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 294.199902][ T42] audit: type=1400 audit(2000000077.449:1037): avc: denied { associate } for pid=14243 comm="syz.8.2562" name="58" dev="tmpfs" ino=321 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 294.209903][ T42] audit: type=1400 audit(2000000077.459:1038): avc: denied { write } for pid=14243 comm="syz.8.2562" name="58" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 294.216058][ T1044] usb 14-1: not running at top speed; connect to a high speed hub [ 294.218658][ T42] audit: type=1400 audit(2000000077.459:1039): avc: denied { add_name } for pid=14243 comm="syz.8.2562" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 294.221356][ T1044] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 294.228352][ T42] audit: type=1400 audit(2000000077.459:1040): avc: denied { create } for pid=14243 comm="syz.8.2562" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.233362][ T1044] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.239524][ T42] audit: type=1400 audit(2000000077.459:1041): avc: denied { associate } for pid=14243 comm="syz.8.2562" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 294.241533][ T1044] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.251010][ T1044] usb 14-1: Product: ⢙臈鹛é±é¡›ëŽ‰á–­ê–¼ï¾ì¶„㗄䢦ïµì»’椋გ䂮쓎裏枌欆혾윦ꑭ▣䰜㔶ꆸâ‚䶤阱怽ᅭ⪥확첷誠翫魛䀞á•ã„ç«®äŸç°¿î°‚璂ﲄ脂ꆬ䉑赵泻ᥙ೚꘾ì’겟哂âŠë´µä«é‚šç­—댛ᢅ謑ꄆ漱㛇궫犔᳭唈䴵뤂䓉혦㩩íƒï…¶ç¨‰é·»ïŠ³îª‘ã‹æˆŸè­¹ï¿âº—貚å‚掱⸵뉫⩟ [ 294.260836][ T1044] usb 14-1: Manufacturer: à “ [ 294.262325][ T1044] usb 14-1: SerialNumber: syz [ 294.470374][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.473407][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.478192][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.481213][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.486430][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.491205][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.495464][T14227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.498433][T14227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.506448][ T1044] cdc_ncm 14-1:1.0: bind() failure [ 294.511514][ T1044] cdc_ncm 14-1:1.1: CDC Union missing and no IAD found [ 294.514660][ T1044] cdc_ncm 14-1:1.1: bind() failure [ 294.520860][ T1044] usb 14-1: USB disconnect, device number 3 [ 294.711292][ T42] audit: type=1400 audit(2000000077.969:1042): avc: denied { write } for pid=13165 comm="syz-executor" name="58" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 294.720060][ T42] audit: type=1400 audit(2000000077.969:1043): avc: denied { remove_name } for pid=13165 comm="syz-executor" name="file1" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 295.070447][T14259] netlink: 'syz.9.2567': attribute type 1 has an invalid length. [ 295.208066][T14262] netlink: 'syz.9.2568': attribute type 7 has an invalid length. [ 295.586278][T14270] MTD: Couldn't look up './bus': -15 [ 295.589142][T14270] netlink: 'syz.8.2571': attribute type 10 has an invalid length. [ 295.595220][T14270] ipvlan0: entered allmulticast mode [ 295.596967][T14270] veth0_vlan: entered allmulticast mode [ 295.610227][T14270] team0: Device ipvlan0 failed to register rx_handler [ 295.748522][T14272] SELinux: policydb version 266255773 does not match my version range 15-35 [ 295.751442][T14272] SELinux: failed to load policy [ 296.050094][T14285] fuse: Unknown parameter 'gZoup_id' [ 296.125613][T14285] kvm: pic: non byte write [ 296.329282][T14201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.438314][T14291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.457548][T14291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.505199][T14297] FAULT_INJECTION: forcing a failure. [ 296.505199][T14297] name failslab, interval 1, probability 0, space 0, times 0 [ 296.509319][T14297] CPU: 2 UID: 0 PID: 14297 Comm: syz.5.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.509338][T14297] Tainted: [L]=SOFTLOCKUP [ 296.509343][T14297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.509349][T14297] Call Trace: [ 296.509354][T14297] [ 296.509359][T14297] dump_stack_lvl+0x100/0x190 [ 296.509379][T14297] should_fail_ex.cold+0x5/0xa [ 296.509394][T14297] should_failslab+0xc2/0x120 [ 296.509411][T14297] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 296.509426][T14297] ? __alloc_skb+0x140/0x710 [ 296.509444][T14297] __alloc_skb+0x140/0x710 [ 296.509456][T14297] ? __alloc_skb+0x5b7/0x710 [ 296.509468][T14297] ? __pfx___alloc_skb+0x10/0x10 [ 296.509482][T14297] ? if_nlmsg_size+0x4b/0xd80 [ 296.509500][T14297] rtmsg_ifinfo_build_skb+0x81/0x260 [ 296.509520][T14297] rtmsg_ifinfo+0xa4/0x1b0 [ 296.509540][T14297] netif_state_change+0x17f/0x380 [ 296.509557][T14297] ? __pfx_netif_state_change+0x10/0x10 [ 296.509576][T14297] ? netif_change_flags+0x10d/0x160 [ 296.509592][T14297] do_setlink.isra.0+0x31ce/0x3e60 [ 296.509609][T14297] ? stack_trace_save+0x8e/0xc0 [ 296.509624][T14297] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 296.509641][T14297] ? __lock_acquire+0x49f/0x1a40 [ 296.509661][T14297] ? lock_acquire+0x1b9/0x370 [ 296.509677][T14297] ? rcu_is_watching+0x12/0xc0 [ 296.509694][T14297] ? trace_contention_end+0x126/0x160 [ 296.509728][T14297] ? __mutex_lock+0x26d/0x1bd0 [ 296.509745][T14297] ? rtnl_newlink+0x8bb/0x2380 [ 296.509763][T14297] ? __pfx___mutex_lock+0x10/0x10 [ 296.509776][T14297] ? rcu_is_watching+0x12/0xc0 [ 296.509793][T14297] ? cap_capable+0x107/0x430 [ 296.509816][T14297] rtnl_newlink+0x1b7e/0x2380 [ 296.509836][T14297] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.509850][T14297] ? find_held_lock+0x2b/0x80 [ 296.509867][T14297] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 296.509886][T14297] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 296.509901][T14297] ? avc_has_perm_noaudit+0x145/0x3b0 [ 296.509919][T14297] ? __lock_acquire+0x49f/0x1a40 [ 296.509939][T14297] ? find_held_lock+0x2b/0x80 [ 296.509960][T14297] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 296.509981][T14297] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 296.510003][T14297] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.510025][T14297] rtnetlink_rcv_msg+0x95e/0xe90 [ 296.510048][T14297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.510072][T14297] ? ref_tracker_free+0x37e/0x6c0 [ 296.510092][T14297] netlink_rcv_skb+0x159/0x420 [ 296.510104][T14297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.510121][T14297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.510137][T14297] ? netlink_deliver_tap+0x1ae/0xcc0 [ 296.510159][T14297] netlink_unicast+0x585/0x850 [ 296.510172][T14297] ? __pfx_netlink_unicast+0x10/0x10 [ 296.510188][T14297] netlink_sendmsg+0x8b0/0xda0 [ 296.510201][T14297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.510214][T14297] ? selinux_socket_sendmsg+0x198/0x2f0 [ 296.510234][T14297] ____sys_sendmsg+0xa4d/0xbe0 [ 296.510251][T14297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.510264][T14297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.510288][T14297] ___sys_sendmsg+0x190/0x1e0 [ 296.510307][T14297] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.510325][T14297] ? __lock_acquire+0x49f/0x1a40 [ 296.510339][T14297] ? get_pid_task+0x106/0x250 [ 296.510372][T14297] __sys_sendmsg+0x160/0x210 [ 296.510387][T14297] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.510409][T14297] do_syscall_64+0x115/0x870 [ 296.510422][T14297] ? clear_bhb_loop+0x40/0x90 [ 296.510437][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.510449][T14297] RIP: 0033:0x7f1d6059de99 [ 296.510460][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.510471][T14297] RSP: 002b:00007f1d61473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.510483][T14297] RAX: ffffffffffffffda RBX: 00007f1d60826090 RCX: 00007f1d6059de99 [ 296.510490][T14297] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 296.510497][T14297] RBP: 00007f1d61473090 R08: 0000000000000000 R09: 0000000000000000 [ 296.510504][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.510510][T14297] R13: 00007f1d60826128 R14: 00007f1d60826090 R15: 00007fff1cadd8d8 [ 296.510524][T14297] [ 296.775173][ T7665] wlan1: Trigger new scan to find an IBSS to join [ 296.873087][T14318] fuse: Unknown parameter 'ÕÈ ´ln}”;ñºÀHgroup_id' [ 296.977256][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2586'. [ 297.143190][T14342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 297.303881][ T5813] usb 13-1: new low-speed USB device number 7 using dummy_hcd [ 297.455443][ T5813] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.458695][ T5813] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.461591][ T5813] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 297.465427][ T5813] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 297.468358][ T5813] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.474398][T14339] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 297.481229][ T5813] hub 13-1:1.0: bad descriptor, ignoring hub [ 297.488985][ T5813] hub 13-1:1.0: probe with driver hub failed with error -5 [ 297.494782][ T5813] cdc_wdm 13-1:1.0: skipping garbage [ 297.496516][ T5813] cdc_wdm 13-1:1.0: skipping garbage [ 297.510414][ T5813] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 297.512417][ T5813] cdc_wdm 13-1:1.0: Unknown control protocol [ 297.538620][ T1044] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 297.687099][ T1044] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.695707][ T7665] wlan1: Creating new IBSS network, BSSID 3e:eb:c0:3a:91:b2 [ 297.701543][ T1044] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.708551][ T1044] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.712471][ T1044] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.721820][ T1044] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.726195][ T1044] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.729728][ T1044] usb 10-1: Product: syz [ 297.731725][ T1044] usb 10-1: Manufacturer: syz [ 297.749072][ T1044] cdc_wdm 10-1:1.0: skipping garbage [ 297.751890][ T1044] cdc_wdm 10-1:1.0: skipping garbage [ 298.007737][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2595'. [ 298.024144][T14350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.211458][T14353] bond3: (slave veth5): Enslaving as an active interface with an up link [ 298.235387][T14352] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 298.260142][T14339] usb 13-1: reset low-speed USB device number 7 using dummy_hcd [ 298.291739][T14353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=14353 comm=syz.9.2595 [ 298.534304][T14339] usb 13-1: device descriptor read/64, error -71 [ 298.613898][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 298.913818][T14339] usb 13-1: reset low-speed USB device number 7 using dummy_hcd [ 299.072372][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 299.072386][ T42] audit: type=1400 audit(2000000082.329:1062): avc: denied { write } for pid=14364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.146335][ T42] audit: type=1400 audit(2000000082.409:1063): avc: denied { write } for pid=14367 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.172435][T14362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.176483][T14362] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 299.206456][T14339] usb 13-1: device descriptor read/64, error -71 [ 299.244049][ T42] audit: type=1400 audit(2000000082.509:1064): avc: denied { write } for pid=14369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.301732][ T42] audit: type=1400 audit(2000000082.559:1065): avc: denied { write } for pid=14372 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.341654][T14362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.345953][T14362] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 299.392884][T14362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.395652][T14362] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 299.405882][ T42] audit: type=1400 audit(2000000082.669:1066): avc: denied { write } for pid=14374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.433085][T14362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.436979][T14362] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 299.476313][ T42] audit: type=1400 audit(2000000082.739:1067): avc: denied { write } for pid=14377 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.546149][ T42] audit: type=1400 audit(2000000082.809:1068): avc: denied { write } for pid=14379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.583716][T14339] usb 13-1: reset low-speed USB device number 7 using dummy_hcd [ 299.605083][T14339] usb 13-1: device descriptor read/8, error -71 [ 299.609829][ T42] audit: type=1400 audit(2000000082.869:1069): avc: denied { write } for pid=14382 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.688937][ T42] audit: type=1400 audit(2000000082.949:1070): avc: denied { write } for pid=14384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.752833][ T42] audit: type=1400 audit(2000000083.009:1071): avc: denied { write } for pid=14387 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.976385][T14328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.984963][T14339] usb 13-1: reset low-speed USB device number 7 using dummy_hcd [ 300.035360][T14339] usb 13-1: device descriptor read/8, error -71 [ 300.147652][T14406] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.153497][T14339] cdc_wdm 13-1:1.0: Error autopm - -16 [ 300.153667][T10721] usb 13-1: USB disconnect, device number 7 [ 300.165256][ T1044] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 300.181233][ T1044] cdc_wdm 10-1:1.0: Unknown control protocol [ 300.192915][ T1044] usb 10-1: USB disconnect, device number 11 [ 300.394079][T14412] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.547910][T14427] ata1.00: invalid cdb length 6 [ 300.621264][T14427] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 300.626425][T14427] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 300.635969][T14427] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 300.708838][T14438] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2607'. [ 300.721002][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2607'. [ 300.771964][ T5813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 300.780277][ T5813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 300.786116][T14444] qnx6: unable to set blocksize [ 300.830993][ T5813] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 301.017462][ T1368] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 301.169991][T14477] loop8: detected capacity change from 0 to 7 [ 301.173808][ T1368] usb 11-1: Using ep0 maxpacket: 16 [ 301.181911][ T1368] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 301.189236][ T1368] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 301.189949][ C3] blk_print_req_error: 15 callbacks suppressed [ 301.189967][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.197498][ C3] buffer_io_error: 15 callbacks suppressed [ 301.197508][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.201832][ T1368] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.219607][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.222703][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.226374][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.229677][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.233811][ T1368] usb 11-1: config 0 descriptor?? [ 301.236014][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.239881][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.249174][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.252919][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.267268][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.270774][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.276482][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.279538][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.304806][T14477] ldm_validate_partition_table(): Disk read failed. [ 301.332517][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.335678][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.363589][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.366705][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.372769][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.375937][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 301.378891][T14477] Dev loop8: unable to read RDB block 0 [ 301.398783][T14477] loop8: unable to read partition table [ 301.401209][T14477] loop8: partition table beyond EOD, truncated [ 301.421183][T14498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.426882][T14477] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 301.512315][T14502] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.040901][T14539] netlink: 'syz.9.2623': attribute type 30 has an invalid length. [ 302.108392][T14542] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.230731][T14546] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.365756][ T5813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 302.371765][ T5813] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 302.393824][ T5813] hid-generic 0000:0000:0000.0006: hidraw2: HID v0.00 Device [syz0] on syz0 [ 302.417738][T14556] ceph: Path missing in source [ 302.459045][T14554] fido_id[14554]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 302.533514][T14563] can: request_module (can-proto-0) failed. [ 302.557366][T14566] tipc: Started in network mode [ 302.559062][T14566] tipc: Node identity , cluster identity 4711 [ 302.561046][T14566] tipc: Failed to set node id, please configure manually [ 302.566619][T14566] tipc: Enabling of bearer rejected, failed to enable media [ 302.885378][T14593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.057629][T14598] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.121643][T14601] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.129970][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2642'. [ 303.380331][T14607] bond0: entered promiscuous mode [ 303.382230][T14607] bond_slave_0: entered promiscuous mode [ 303.384788][T14607] bond_slave_1: entered promiscuous mode [ 303.551868][ T1368] usb 11-1: string descriptor 0 read error: -71 [ 303.562625][ T1368] usb 11-1: USB disconnect, device number 3 [ 303.693666][T10721] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 303.747708][T14625] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2648'. [ 303.779358][T14631] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.844847][T10721] usb 13-1: config 0 has no interfaces? [ 303.848650][T10721] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 303.851627][T10721] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 303.859171][T10721] usb 13-1: Product: syz [ 303.860650][T10721] usb 13-1: Manufacturer: syz [ 303.862238][T10721] usb 13-1: SerialNumber: syz [ 303.869203][T10721] usb 13-1: config 0 descriptor?? [ 303.938624][T14633] netlink: 'syz.5.2652': attribute type 10 has an invalid length. [ 304.056248][T14639] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.079385][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 304.079397][ T42] audit: type=1400 audit(2000000087.339:1079): avc: denied { create } for pid=14613 comm="syz.8.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.095237][ T42] audit: type=1400 audit(2000000087.349:1080): avc: denied { bind } for pid=14613 comm="syz.8.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.101641][ T42] audit: type=1400 audit(2000000087.349:1081): avc: denied { write } for pid=14613 comm="syz.8.2646" path="socket:[68784]" dev="sockfs" ino=68784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.102122][T14614] overlayfs: missing 'workdir' [ 304.109621][ T42] audit: type=1400 audit(2000000087.359:1082): avc: denied { mounton } for pid=14613 comm="syz.8.2646" path="/86/file0" dev="ramfs" ino=68785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 304.120393][T10721] usb 13-1: USB disconnect, device number 9 [ 304.150069][T14641] ata1.00: invalid cdb length 6 [ 304.580283][ T42] audit: type=1326 audit(2000000087.839:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.6.2664" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc21d79de99 code=0x0 [ 304.638391][ T42] audit: type=1400 audit(2000000087.899:1084): avc: denied { unmount } for pid=13165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.831099][T14691] usbcore.quirks: string doesn't fit in 127 chars. [ 304.838535][T14691] tmpfs: Unknown parameter 'mdol6default:' [ 305.050061][ T42] audit: type=1400 audit(2000000088.309:1085): avc: denied { mount } for pid=14703 comm="syz.8.2674" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 305.245248][T14720] netlink: 'syz.9.2677': attribute type 2 has an invalid length. [ 305.252378][T14720] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2677'. [ 305.293248][T14720] : entered promiscuous mode [ 305.723771][T10785] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 305.877397][T10785] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.884712][T10785] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.890062][T10785] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.894629][T10785] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.897571][T10785] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.906479][T10785] usb 11-1: config 0 descriptor?? [ 305.985561][T14730] FAULT_INJECTION: forcing a failure. [ 305.985561][T14730] name failslab, interval 1, probability 0, space 0, times 0 [ 305.999992][T14730] CPU: 0 UID: 0 PID: 14730 Comm: syz.5.2680 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.000013][T14730] Tainted: [L]=SOFTLOCKUP [ 306.000017][T14730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.000036][T14730] Call Trace: [ 306.000041][T14730] [ 306.000046][T14730] dump_stack_lvl+0x100/0x190 [ 306.000150][T14730] should_fail_ex.cold+0x5/0xa [ 306.000176][T14730] should_failslab+0xc2/0x120 [ 306.000203][T14730] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 306.000219][T14730] ? __alloc_skb+0x140/0x710 [ 306.000261][T14730] __alloc_skb+0x140/0x710 [ 306.000273][T14730] ? __alloc_skb+0x5b7/0x710 [ 306.000286][T14730] ? __pfx___alloc_skb+0x10/0x10 [ 306.000299][T14730] ? if_nlmsg_size+0x4b/0xd80 [ 306.000319][T14730] rtmsg_ifinfo_build_skb+0x81/0x260 [ 306.000340][T14730] rtmsg_ifinfo+0xa4/0x1b0 [ 306.000359][T14730] netif_state_change+0x17f/0x380 [ 306.000377][T14730] ? __pfx_netif_state_change+0x10/0x10 [ 306.000397][T14730] ? netif_change_flags+0x10d/0x160 [ 306.000412][T14730] do_setlink.isra.0+0x31ce/0x3e60 [ 306.000429][T14730] ? stack_trace_save+0x8e/0xc0 [ 306.000453][T14730] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 306.000471][T14730] ? __lock_acquire+0x49f/0x1a40 [ 306.000493][T14730] ? lock_acquire+0x1b9/0x370 [ 306.000509][T14730] ? rcu_is_watching+0x12/0xc0 [ 306.000527][T14730] ? trace_contention_end+0x126/0x160 [ 306.000543][T14730] ? __mutex_lock+0x26d/0x1bd0 [ 306.000591][T14730] ? rtnl_newlink+0x8bb/0x2380 [ 306.000609][T14730] ? __pfx___mutex_lock+0x10/0x10 [ 306.000622][T14730] ? rcu_is_watching+0x12/0xc0 [ 306.000639][T14730] ? cap_capable+0x107/0x430 [ 306.000680][T14730] rtnl_newlink+0x1b7e/0x2380 [ 306.000700][T14730] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.000714][T14730] ? find_held_lock+0x2b/0x80 [ 306.000732][T14730] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 306.000752][T14730] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 306.000768][T14730] ? avc_has_perm_noaudit+0x145/0x3b0 [ 306.000786][T14730] ? __lock_acquire+0x49f/0x1a40 [ 306.000806][T14730] ? find_held_lock+0x2b/0x80 [ 306.000824][T14730] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 306.000843][T14730] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 306.000859][T14730] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.000875][T14730] rtnetlink_rcv_msg+0x95e/0xe90 [ 306.000892][T14730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.000911][T14730] ? ref_tracker_free+0x37e/0x6c0 [ 306.000937][T14730] netlink_rcv_skb+0x159/0x420 [ 306.000965][T14730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.000981][T14730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.000998][T14730] ? netlink_deliver_tap+0x1ae/0xcc0 [ 306.001019][T14730] netlink_unicast+0x585/0x850 [ 306.001032][T14730] ? __pfx_netlink_unicast+0x10/0x10 [ 306.001048][T14730] netlink_sendmsg+0x8b0/0xda0 [ 306.001061][T14730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.001074][T14730] ? selinux_socket_sendmsg+0x198/0x2f0 [ 306.001094][T14730] ____sys_sendmsg+0xa4d/0xbe0 [ 306.001116][T14730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.001128][T14730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.001152][T14730] ___sys_sendmsg+0x190/0x1e0 [ 306.001172][T14730] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.001189][T14730] ? __lock_acquire+0x49f/0x1a40 [ 306.001203][T14730] ? get_pid_task+0x106/0x250 [ 306.001237][T14730] __sys_sendmsg+0x160/0x210 [ 306.001253][T14730] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.001275][T14730] do_syscall_64+0x115/0x870 [ 306.001292][T14730] ? clear_bhb_loop+0x40/0x90 [ 306.001307][T14730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.001319][T14730] RIP: 0033:0x7f1d6059de99 [ 306.001329][T14730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.001341][T14730] RSP: 002b:00007f1d61473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.001352][T14730] RAX: ffffffffffffffda RBX: 00007f1d60826090 RCX: 00007f1d6059de99 [ 306.001359][T14730] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 306.001366][T14730] RBP: 00007f1d61473090 R08: 0000000000000000 R09: 0000000000000000 [ 306.001373][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.001379][T14730] R13: 00007f1d60826128 R14: 00007f1d60826090 R15: 00007fff1cadd8d8 [ 306.001394][T14730] [ 306.163381][T14730] net_ratelimit: 2 callbacks suppressed [ 306.163394][T14730] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 306.230958][ T42] audit: type=1400 audit(2000000089.489:1086): avc: denied { write } for pid=14731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.295845][ T42] audit: type=1400 audit(2000000089.559:1087): avc: denied { write } for pid=14734 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.374539][T10785] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 306.428942][T14739] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2681'. [ 306.431848][T14739] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2681'. [ 306.445635][T14739] syzkaller0: entered promiscuous mode [ 306.448935][T14739] syzkaller0: entered allmulticast mode [ 306.570435][T14741] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 306.663000][ T42] audit: type=1400 audit(2000000089.919:1088): avc: denied { unmount } for pid=13165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 306.799593][T14752] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 306.841948][T14759] netlink: 'syz.5.2687': attribute type 1 has an invalid length. [ 306.858433][T14759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.104768][T14773] FAULT_INJECTION: forcing a failure. [ 307.104768][T14773] name failslab, interval 1, probability 0, space 0, times 0 [ 307.121352][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.5.2690 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.121373][T14773] Tainted: [L]=SOFTLOCKUP [ 307.121377][T14773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.121384][T14773] Call Trace: [ 307.121390][T14773] [ 307.121395][T14773] dump_stack_lvl+0x100/0x190 [ 307.121415][T14773] should_fail_ex.cold+0x5/0xa [ 307.121431][T14773] should_failslab+0xc2/0x120 [ 307.121447][T14773] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 307.121475][T14773] ? __alloc_skb+0x140/0x710 [ 307.121493][T14773] __alloc_skb+0x140/0x710 [ 307.121505][T14773] ? __alloc_skb+0x5b7/0x710 [ 307.121518][T14773] ? __pfx___alloc_skb+0x10/0x10 [ 307.121531][T14773] ? if_nlmsg_size+0x4b/0xd80 [ 307.121550][T14773] rtmsg_ifinfo_build_skb+0x81/0x260 [ 307.121570][T14773] rtmsg_ifinfo+0xa4/0x1b0 [ 307.121589][T14773] netif_state_change+0x17f/0x380 [ 307.121607][T14773] ? __pfx_netif_state_change+0x10/0x10 [ 307.121626][T14773] ? netif_change_flags+0x10d/0x160 [ 307.121641][T14773] do_setlink.isra.0+0x31ce/0x3e60 [ 307.121658][T14773] ? stack_trace_save+0x8e/0xc0 [ 307.121694][T14773] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 307.121712][T14773] ? __lock_acquire+0x49f/0x1a40 [ 307.121732][T14773] ? lock_acquire+0x1b9/0x370 [ 307.121749][T14773] ? rcu_is_watching+0x12/0xc0 [ 307.121766][T14773] ? trace_contention_end+0x126/0x160 [ 307.121783][T14773] ? __mutex_lock+0x26d/0x1bd0 [ 307.121798][T14773] ? rtnl_newlink+0x8bb/0x2380 [ 307.121815][T14773] ? __pfx___mutex_lock+0x10/0x10 [ 307.121828][T14773] ? rcu_is_watching+0x12/0xc0 [ 307.121845][T14773] ? cap_capable+0x107/0x430 [ 307.121874][T14773] rtnl_newlink+0x1b7e/0x2380 [ 307.121894][T14773] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.121908][T14773] ? find_held_lock+0x2b/0x80 [ 307.121925][T14773] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 307.121939][T14773] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 307.121955][T14773] ? avc_has_perm_noaudit+0x145/0x3b0 [ 307.121973][T14773] ? __lock_acquire+0x49f/0x1a40 [ 307.121993][T14773] ? find_held_lock+0x2b/0x80 [ 307.122011][T14773] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.122025][T14773] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.122042][T14773] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.122057][T14773] rtnetlink_rcv_msg+0x95e/0xe90 [ 307.122074][T14773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.122093][T14773] ? ref_tracker_free+0x37e/0x6c0 [ 307.122113][T14773] netlink_rcv_skb+0x159/0x420 [ 307.122126][T14773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.122142][T14773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.122158][T14773] ? netlink_deliver_tap+0x1ae/0xcc0 [ 307.122180][T14773] netlink_unicast+0x585/0x850 [ 307.122193][T14773] ? __pfx_netlink_unicast+0x10/0x10 [ 307.122208][T14773] netlink_sendmsg+0x8b0/0xda0 [ 307.122222][T14773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.122235][T14773] ? selinux_socket_sendmsg+0x198/0x2f0 [ 307.122254][T14773] ____sys_sendmsg+0xa4d/0xbe0 [ 307.122272][T14773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.122285][T14773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.122308][T14773] ___sys_sendmsg+0x190/0x1e0 [ 307.122328][T14773] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.122345][T14773] ? __lock_acquire+0x49f/0x1a40 [ 307.122359][T14773] ? get_pid_task+0x106/0x250 [ 307.122393][T14773] __sys_sendmsg+0x160/0x210 [ 307.122408][T14773] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.122430][T14773] do_syscall_64+0x115/0x870 [ 307.122443][T14773] ? clear_bhb_loop+0x40/0x90 [ 307.122457][T14773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.122472][T14773] RIP: 0033:0x7f1d6059de99 [ 307.122483][T14773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.122494][T14773] RSP: 002b:00007f1d61473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.122506][T14773] RAX: ffffffffffffffda RBX: 00007f1d60826090 RCX: 00007f1d6059de99 [ 307.122513][T14773] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 307.122520][T14773] RBP: 00007f1d61473090 R08: 0000000000000000 R09: 0000000000000000 [ 307.122527][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.122533][T14773] R13: 00007f1d60826128 R14: 00007f1d60826090 R15: 00007fff1cadd8d8 [ 307.122547][T14773] [ 307.231676][T14773] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 307.540652][ T1044] usb 5-1: USB disconnect, device number 4 [ 307.545311][ T1044] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 307.724924][ T5881] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 307.863694][ T5881] usb 11-1: device descriptor read/64, error -32 [ 308.114153][ T5881] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 308.220774][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.228387][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.232081][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.241044][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.255448][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.332400][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.335740][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.338390][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.347403][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.362906][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.478649][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2706'. [ 308.514481][ T5813] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 308.526594][T10401] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.532393][T10401] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.539235][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2706'. [ 308.544008][T10401] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.547533][T14841] netlink: 'syz.6.2705': attribute type 5 has an invalid length. [ 308.557534][T10401] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.620664][T14846] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2707'. [ 308.668744][ T5813] usb 14-1: Using ep0 maxpacket: 32 [ 308.671750][T14846] openvswitch: netlink: Flow key attribute not present in set flow. [ 308.678310][ T5813] usb 14-1: unable to get BOS descriptor or descriptor too short [ 308.685953][ T5813] usb 14-1: string descriptor 0 read error: -22 [ 308.688055][ T5813] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 308.698297][ T5813] usb 14-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 308.753020][ T5813] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 308.763077][ T5813] dw2102: su3000_power_ctrl: 1, initialized 0 [ 308.780134][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 308.792323][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.800205][ T5813] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 308.804642][ T5813] usb 14-1: media controller created [ 308.807135][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 308.809218][ T5813] dw2102: i2c transfer failed. [ 308.810861][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 308.816049][ T5813] dw2102: i2c transfer failed. [ 308.817958][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 308.819999][ T5813] dw2102: i2c transfer failed. [ 308.822658][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 308.825528][ T5813] dw2102: i2c transfer failed. [ 308.835757][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 308.845073][ T5813] dw2102: i2c transfer failed. [ 308.860298][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 308.869808][ T5813] dw2102: i2c transfer failed. [ 308.875518][ T5813] dvb-usb: MAC address: 02:02:02:02:02:02 [ 308.894370][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.924123][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 308.932214][ T5813] dw2102: command 0x0e transfer failed. [ 308.937182][ T61] usb 11-1: USB disconnect, device number 4 [ 308.941316][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 308.943320][ T5813] dw2102: command 0x0e transfer failed. [ 309.047193][T14817] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.051903][T14817] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.056804][T14817] bridge_slave_0: entered allmulticast mode [ 309.063630][T14817] bridge_slave_0: entered promiscuous mode [ 309.079205][T14817] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.081638][T14817] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.093771][T14817] bridge_slave_1: entered allmulticast mode [ 309.096841][T14817] bridge_slave_1: entered promiscuous mode [ 309.144053][T14817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.158266][T14817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.179681][T14817] team0: Port device team_slave_0 added [ 309.183047][T14817] team0: Port device team_slave_1 added [ 309.187490][ T42] kauditd_printk_skb: 125 callbacks suppressed [ 309.187501][ T42] audit: type=1400 audit(2000000348.448:1214): avc: denied { write } for pid=14869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.206931][T14817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.209328][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.218501][T14817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.223065][T14817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.225687][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.236530][T14817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.240271][ T42] audit: type=1400 audit(2000000348.498:1215): avc: denied { write } for pid=14872 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.266701][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 309.274941][ T5813] dw2102: command 0x0e transfer failed. [ 309.280843][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 309.282033][T14817] hsr_slave_0: entered promiscuous mode [ 309.284721][ T5813] dw2102: command 0x0e transfer failed. [ 309.285524][T14817] hsr_slave_1: entered promiscuous mode [ 309.287845][ T5813] dvb-usb: bulk message failed: -22 (1/0) [ 309.288816][T14817] debugfs: 'hsr0' already exists in 'hsr' [ 309.292341][T14817] Cannot create hsr debugfs directory [ 309.295461][ T5813] dw2102: command 0x51 transfer failed. [ 309.300728][T14822] dvb-usb: bulk message failed: -22 (5/0) [ 309.300803][T14875] netlink: 'syz.5.2708': attribute type 7 has an invalid length. [ 309.315369][T14822] dw2102: i2c transfer failed. [ 309.332158][ T42] audit: type=1400 audit(2000000348.588:1216): avc: denied { write } for pid=14874 comm="syz.5.2708" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 309.332245][ T5813] DVB: Unable to find symbol ds3000_attach() [ 309.349379][ T42] audit: type=1400 audit(2000000348.608:1217): avc: denied { write } for pid=14876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.360164][ T5813] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 309.401809][ T42] audit: type=1400 audit(2000000348.658:1218): avc: denied { write } for pid=14883 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.455867][ T5813] rc_core: IR keymap rc-su3000 not found [ 309.458465][ T5813] Registered IR keymap rc-empty [ 309.463248][ T5813] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 309.473387][ T5813] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input18 [ 309.489915][ T5813] dvb-usb: schedule remote query interval to 150 msecs. [ 309.501332][ T5813] dw2102: su3000_power_ctrl: 0, initialized 1 [ 309.503323][ T5813] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 309.516128][ T5813] usb 14-1: USB disconnect, device number 4 [ 309.543108][ T42] audit: type=1400 audit(2000000348.798:1219): avc: denied { write } for pid=14890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.564895][T14900] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 309.649956][ T5813] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 309.656241][ T42] audit: type=1400 audit(2000000348.898:1220): avc: denied { write } for pid=14907 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.751993][ T42] audit: type=1400 audit(2000000349.008:1221): avc: denied { write } for pid=14917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.804774][ T42] audit: type=1400 audit(2000000349.068:1222): avc: denied { write } for pid=14920 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.888756][T14926] netlink: 15294 bytes leftover after parsing attributes in process `syz.6.2717'. [ 309.911186][ T42] audit: type=1400 audit(2000000349.168:1223): avc: denied { write } for pid=14928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.001303][T14927] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 310.038673][T14939] netlink: 196 bytes leftover after parsing attributes in process `syz.9.2722'. [ 310.041792][T14939] openvswitch: netlink: Flow key attr not present in new flow. [ 310.075469][T14942] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 310.089640][T14942] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2724'. [ 310.188877][T14950] ALSA: seq fatal error: cannot create timer (-19) [ 310.328423][T14817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.340912][T14817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.343490][ T5813] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 310.350485][T14817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.359641][T14817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.371188][T14960] ip6erspan0: entered allmulticast mode [ 310.375786][T14817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.382551][T14817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.397292][T14817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.403730][T14817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.453522][ T5749] Bluetooth: hci0: command tx timeout [ 310.486849][T14817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.501547][T14817] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.503415][ T5813] usb 10-1: Invalid ep0 maxpacket: 16 [ 310.526513][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.528873][ T8175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.550452][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.552819][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.633966][ T5813] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 310.783353][ T5813] usb 10-1: Invalid ep0 maxpacket: 16 [ 310.790486][ T5813] usb usb10-port1: attempt power cycle [ 310.842949][T14817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.904518][T14817] veth0_vlan: entered promiscuous mode [ 310.912331][T14817] veth1_vlan: entered promiscuous mode [ 310.943049][T14817] veth0_macvtap: entered promiscuous mode [ 310.957083][T14817] veth1_macvtap: entered promiscuous mode [ 310.969270][T14817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.980103][T14817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.993720][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.001998][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.007896][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.012524][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.144933][ T5813] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 311.159750][ T8163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.170717][ T8163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.174017][ T5813] usb 10-1: Invalid ep0 maxpacket: 16 [ 311.192885][ T7665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.198534][ T7665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.305262][ T5813] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 311.333862][ T5813] usb 10-1: Invalid ep0 maxpacket: 16 [ 311.337785][ T5813] usb usb10-port1: unable to enumerate USB device [ 311.358164][T15007] FAULT_INJECTION: forcing a failure. [ 311.358164][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 311.366216][T15007] CPU: 3 UID: 0 PID: 15007 Comm: syz.1.2701 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.366247][T15007] Tainted: [L]=SOFTLOCKUP [ 311.366254][T15007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.366265][T15007] Call Trace: [ 311.366271][T15007] [ 311.366280][T15007] dump_stack_lvl+0x100/0x190 [ 311.366372][T15007] should_fail_ex.cold+0x5/0xa [ 311.366414][T15007] should_failslab+0xc2/0x120 [ 311.366453][T15007] __kvmalloc_node_noprof+0x116/0x970 [ 311.366478][T15007] ? __local_bh_enable_ip+0x9e/0x120 [ 311.366511][T15007] ? pfifo_fast_change_tx_queue_len+0x206/0xb80 [ 311.366595][T15007] pfifo_fast_change_tx_queue_len+0x206/0xb80 [ 311.366622][T15007] ? __pfx_dev_deactivate_many+0x10/0x10 [ 311.366649][T15007] ? ib_device_get_by_netdev+0x1b2/0x530 [ 311.366691][T15007] ? vxlan_netdevice_event+0x11f/0x370 [ 311.366739][T15007] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 311.366774][T15007] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 311.366799][T15007] dev_qdisc_change_tx_queue_len+0x16a/0x390 [ 311.366830][T15007] netif_change_tx_queue_len+0x153/0x190 [ 311.366865][T15007] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 311.366890][T15007] ? netif_change_flags+0x10d/0x160 [ 311.366914][T15007] do_setlink.isra.0+0xc54/0x3e60 [ 311.366941][T15007] ? stack_trace_save+0x8e/0xc0 [ 311.366971][T15007] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 311.366999][T15007] ? __lock_acquire+0x49f/0x1a40 [ 311.367031][T15007] ? lock_acquire+0x1b9/0x370 [ 311.367059][T15007] ? rcu_is_watching+0x12/0xc0 [ 311.367088][T15007] ? trace_contention_end+0x126/0x160 [ 311.367113][T15007] ? __mutex_lock+0x26d/0x1bd0 [ 311.367179][T15007] ? rtnl_newlink+0x8bb/0x2380 [ 311.367206][T15007] ? __pfx___mutex_lock+0x10/0x10 [ 311.367227][T15007] ? rcu_is_watching+0x12/0xc0 [ 311.367252][T15007] ? cap_capable+0x107/0x430 [ 311.367316][T15007] rtnl_newlink+0x1b7e/0x2380 [ 311.367349][T15007] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.367370][T15007] ? find_held_lock+0x2b/0x80 [ 311.367396][T15007] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 311.367426][T15007] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 311.367451][T15007] ? avc_has_perm_noaudit+0x145/0x3b0 [ 311.367478][T15007] ? __lock_acquire+0x49f/0x1a40 [ 311.367513][T15007] ? find_held_lock+0x2b/0x80 [ 311.367540][T15007] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 311.367563][T15007] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 311.367589][T15007] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.367612][T15007] rtnetlink_rcv_msg+0x95e/0xe90 [ 311.367639][T15007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.367671][T15007] ? ref_tracker_free+0x37e/0x6c0 [ 311.367712][T15007] netlink_rcv_skb+0x159/0x420 [ 311.367753][T15007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.367778][T15007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.367807][T15007] ? netlink_deliver_tap+0x1ae/0xcc0 [ 311.367839][T15007] netlink_unicast+0x585/0x850 [ 311.367862][T15007] ? __pfx_netlink_unicast+0x10/0x10 [ 311.367887][T15007] netlink_sendmsg+0x8b0/0xda0 [ 311.367909][T15007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.367930][T15007] ? selinux_socket_sendmsg+0x198/0x2f0 [ 311.367961][T15007] ____sys_sendmsg+0xa4d/0xbe0 [ 311.367996][T15007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.368017][T15007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.368056][T15007] ___sys_sendmsg+0x190/0x1e0 [ 311.368086][T15007] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.368113][T15007] ? __lock_acquire+0x49f/0x1a40 [ 311.368135][T15007] ? get_pid_task+0x106/0x250 [ 311.368193][T15007] __sys_sendmsg+0x160/0x210 [ 311.368216][T15007] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.368252][T15007] do_syscall_64+0x115/0x870 [ 311.368279][T15007] ? clear_bhb_loop+0x40/0x90 [ 311.368303][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.368326][T15007] RIP: 0033:0x7f1c28f9de99 [ 311.368344][T15007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.368361][T15007] RSP: 002b:00007f1c29e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.368379][T15007] RAX: ffffffffffffffda RBX: 00007f1c29226090 RCX: 00007f1c28f9de99 [ 311.368392][T15007] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 311.368404][T15007] RBP: 00007f1c29e16090 R08: 0000000000000000 R09: 0000000000000000 [ 311.368415][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.368425][T15007] R13: 00007f1c29226128 R14: 00007f1c29226090 R15: 00007ffcd6b8d3f8 [ 311.368451][T15007] [ 311.368663][T15007] ip6gretap0: refused to change device tx_queue_len [ 311.383466][T15010] xt_hashlimit: size too large, truncated to 1048576 [ 311.385465][T15007] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 311.539155][T15009] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 311.742181][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2741'. [ 311.790387][T15025] netlink: 'syz.9.2742': attribute type 1 has an invalid length. [ 311.810528][T15025] bond4: entered promiscuous mode [ 311.812518][T15025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.821629][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2742'. [ 311.825266][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2742'. [ 311.850208][T15025] bond4: (slave bridge1): making interface the new active one [ 311.852684][T15025] bridge1: entered promiscuous mode [ 311.855758][T15025] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 311.883667][ T5973] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 312.037302][ T5973] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.040694][ T5973] usb 11-1: config 0 has no interfaces? [ 312.043029][ T5973] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.046531][ T5973] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.050453][ T5973] usb 11-1: config 0 descriptor?? [ 312.533538][ T5749] Bluetooth: hci0: command tx timeout [ 312.639561][T15064] overlayfs: maximum fs stacking depth exceeded [ 312.788255][T15077] Mass Storage Function, version: 2009/09/11 [ 312.791497][T15077] LUN: removable file: (no medium) [ 312.794374][ T5881] usb 11-1: USB disconnect, device number 5 [ 312.799668][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2757'. [ 312.955868][T15097] FAULT_INJECTION: forcing a failure. [ 312.955868][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 312.959857][T15097] CPU: 0 UID: 0 PID: 15097 Comm: syz.9.2760 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.959875][T15097] Tainted: [L]=SOFTLOCKUP [ 312.959880][T15097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.959886][T15097] Call Trace: [ 312.959891][T15097] [ 312.959896][T15097] dump_stack_lvl+0x100/0x190 [ 312.959915][T15097] should_fail_ex.cold+0x5/0xa [ 312.959930][T15097] should_failslab+0xc2/0x120 [ 312.959947][T15097] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 312.959961][T15097] ? __alloc_skb+0x140/0x710 [ 312.959978][T15097] __alloc_skb+0x140/0x710 [ 312.959990][T15097] ? __alloc_skb+0x5b7/0x710 [ 312.960003][T15097] ? __pfx___alloc_skb+0x10/0x10 [ 312.960016][T15097] ? if_nlmsg_size+0x4b/0xd80 [ 312.960035][T15097] rtmsg_ifinfo_build_skb+0x81/0x260 [ 312.960055][T15097] rtmsg_ifinfo+0xa4/0x1b0 [ 312.960074][T15097] netif_state_change+0x17f/0x380 [ 312.960092][T15097] ? __pfx_netif_state_change+0x10/0x10 [ 312.960111][T15097] ? netif_change_flags+0x10d/0x160 [ 312.960126][T15097] do_setlink.isra.0+0x31ce/0x3e60 [ 312.960143][T15097] ? stack_trace_save+0x8e/0xc0 [ 312.960157][T15097] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 312.960174][T15097] ? __lock_acquire+0x49f/0x1a40 [ 312.960195][T15097] ? lock_acquire+0x1b9/0x370 [ 312.960211][T15097] ? rcu_is_watching+0x12/0xc0 [ 312.960229][T15097] ? trace_contention_end+0x126/0x160 [ 312.960248][T15097] ? __mutex_lock+0x26d/0x1bd0 [ 312.960268][T15097] ? rtnl_newlink+0x8bb/0x2380 [ 312.960292][T15097] ? __pfx___mutex_lock+0x10/0x10 [ 312.960318][T15097] ? rcu_is_watching+0x12/0xc0 [ 312.960344][T15097] ? cap_capable+0x107/0x430 [ 312.960376][T15097] rtnl_newlink+0x1b7e/0x2380 [ 312.960396][T15097] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.960410][T15097] ? find_held_lock+0x2b/0x80 [ 312.960428][T15097] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 312.960443][T15097] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 312.960458][T15097] ? avc_has_perm_noaudit+0x145/0x3b0 [ 312.960476][T15097] ? __lock_acquire+0x49f/0x1a40 [ 312.960496][T15097] ? find_held_lock+0x2b/0x80 [ 312.960513][T15097] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 312.960528][T15097] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 312.960545][T15097] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.960560][T15097] rtnetlink_rcv_msg+0x95e/0xe90 [ 312.960576][T15097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.960596][T15097] ? ref_tracker_free+0x37e/0x6c0 [ 312.960616][T15097] netlink_rcv_skb+0x159/0x420 [ 312.960629][T15097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.960645][T15097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.960662][T15097] ? netlink_deliver_tap+0x1ae/0xcc0 [ 312.960683][T15097] netlink_unicast+0x585/0x850 [ 312.960696][T15097] ? __pfx_netlink_unicast+0x10/0x10 [ 312.960711][T15097] netlink_sendmsg+0x8b0/0xda0 [ 312.960724][T15097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.960737][T15097] ? selinux_socket_sendmsg+0x198/0x2f0 [ 312.960757][T15097] ____sys_sendmsg+0xa4d/0xbe0 [ 312.960774][T15097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.960787][T15097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.960810][T15097] ___sys_sendmsg+0x190/0x1e0 [ 312.960830][T15097] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.960847][T15097] ? __lock_acquire+0x49f/0x1a40 [ 312.960861][T15097] ? get_pid_task+0x106/0x250 [ 312.960894][T15097] __sys_sendmsg+0x160/0x210 [ 312.960909][T15097] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.960931][T15097] do_syscall_64+0x115/0x870 [ 312.960944][T15097] ? clear_bhb_loop+0x40/0x90 [ 312.960958][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.960970][T15097] RIP: 0033:0x7fc94959de99 [ 312.961007][T15097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.961019][T15097] RSP: 002b:00007fc94a384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.961030][T15097] RAX: ffffffffffffffda RBX: 00007fc949826090 RCX: 00007fc94959de99 [ 312.961037][T15097] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 312.961044][T15097] RBP: 00007fc94a384090 R08: 0000000000000000 R09: 0000000000000000 [ 312.961051][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.961069][T15097] R13: 00007fc949826128 R14: 00007fc949826090 R15: 00007ffd845e2268 [ 312.961084][T15097] [ 313.248713][T10720] openvswitch: cpu_id mismatch with handler threads [ 313.306753][T15118] fuse: Unknown parameter 'f¸0x0000000000000004' [ 313.313773][T15118] fuse: Unknown parameter 'uid' [ 313.364850][ T12] openvswitch: cpu_id mismatch with handler threads [ 313.429867][T15130] netlink: 'syz.1.2773': attribute type 1 has an invalid length. [ 313.654049][ T5889] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 313.753532][T10720] openvswitch: cpu_id mismatch with handler threads [ 313.805216][ T5889] usb 14-1: config 0 has no interfaces? [ 313.812504][ T5889] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.819183][ T5889] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.824242][ T5889] usb 14-1: Product: syz [ 313.826978][ T5889] usb 14-1: Manufacturer: syz [ 313.834184][ T5889] usb 14-1: config 0 descriptor?? [ 314.046131][T15127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.049908][T15127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.076384][T15127] bond5: option downdelay: invalid value (18446744073709551615) [ 314.078819][T15127] bond5: option downdelay: allowed values 0 - 2147483647 [ 314.082126][T15127] bond5 (unregistering): Released all slaves [ 314.311719][T15127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.314783][T15127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.318040][ T5973] usb 14-1: USB disconnect, device number 5 [ 314.353470][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 314.353482][ T42] audit: type=1400 audit(2000000353.609:1231): avc: denied { relabelfrom } for pid=15165 comm="syz.1.2783" name="" dev="pipefs" ino=72798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 314.366407][T15166] SELinux: Context is not valid (left unmapped). [ 314.374306][ T42] audit: type=1400 audit(2000000353.629:1232): avc: denied { relabelto } for pid=15165 comm="syz.1.2783" name="" dev="pipefs" ino=72798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=20 [ 314.455153][T15176] SELinux: policydb string does not match my string SE Linux [ 314.458275][T15176] SELinux: failed to load policy [ 314.492813][T15176] SELinux: policydb magic number 0x6e6f6c63 does not match expected magic number 0xf97cff8c [ 314.498142][T15176] SELinux: failed to load policy [ 314.536819][ T42] audit: type=1400 audit(2000000353.799:1233): avc: denied { bind } for pid=15183 comm="syz.5.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.557409][ T42] audit: type=1400 audit(2000000353.809:1234): avc: denied { write } for pid=15183 comm="syz.5.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.573146][T15184] dlm: no local IP address has been set [ 314.576613][T15184] dlm: cannot start dlm midcomms -107 [ 314.580486][T15184] binder: BINDER_SET_CONTEXT_MGR already set [ 314.585072][T15184] binder: 15183:15184 ioctl 4018620d 200000000100 returned -16 [ 314.587448][T15189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2789'. [ 314.613116][ T64] Bluetooth: hci0: command tx timeout [ 314.647795][ T42] audit: type=1400 audit(2000000353.909:1235): avc: denied { read } for pid=15193 comm="syz.1.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.658400][T15195] FAULT_INJECTION: forcing a failure. [ 314.658400][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 314.668846][T15195] CPU: 3 UID: 0 PID: 15195 Comm: syz.6.2790 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.668872][T15195] Tainted: [L]=SOFTLOCKUP [ 314.668878][T15195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.668888][T15195] Call Trace: [ 314.668894][T15195] [ 314.668901][T15195] dump_stack_lvl+0x100/0x190 [ 314.668982][T15195] should_fail_ex.cold+0x5/0xa [ 314.669020][T15195] should_failslab+0xc2/0x120 [ 314.669058][T15195] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 314.669081][T15195] ? __alloc_skb+0x140/0x710 [ 314.669139][T15195] __alloc_skb+0x140/0x710 [ 314.669157][T15195] ? __alloc_skb+0x5b7/0x710 [ 314.669175][T15195] ? __pfx___alloc_skb+0x10/0x10 [ 314.669194][T15195] ? if_nlmsg_size+0x4b/0xd80 [ 314.669222][T15195] rtmsg_ifinfo_build_skb+0x81/0x260 [ 314.669252][T15195] rtmsg_ifinfo+0xa4/0x1b0 [ 314.669279][T15195] netif_state_change+0x17f/0x380 [ 314.669304][T15195] ? __pfx_netif_state_change+0x10/0x10 [ 314.669330][T15195] ? netif_change_flags+0x10d/0x160 [ 314.669353][T15195] do_setlink.isra.0+0x31ce/0x3e60 [ 314.669376][T15195] ? stack_trace_save+0x8e/0xc0 [ 314.669410][T15195] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 314.669435][T15195] ? __lock_acquire+0x49f/0x1a40 [ 314.669465][T15195] ? lock_acquire+0x1b9/0x370 [ 314.669489][T15195] ? rcu_is_watching+0x12/0xc0 [ 314.669514][T15195] ? trace_contention_end+0x126/0x160 [ 314.669536][T15195] ? __mutex_lock+0x26d/0x1bd0 [ 314.669599][T15195] ? rtnl_newlink+0x8bb/0x2380 [ 314.669623][T15195] ? __pfx___mutex_lock+0x10/0x10 [ 314.669768][T15195] ? rcu_is_watching+0x12/0xc0 [ 314.669790][T15195] ? cap_capable+0x107/0x430 [ 314.669836][T15195] rtnl_newlink+0x1b7e/0x2380 [ 314.669858][T15195] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.669872][T15195] ? find_held_lock+0x2b/0x80 [ 314.669890][T15195] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 314.669910][T15195] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 314.669929][T15195] ? avc_has_perm_noaudit+0x145/0x3b0 [ 314.669953][T15195] ? __lock_acquire+0x49f/0x1a40 [ 314.669979][T15195] ? find_held_lock+0x2b/0x80 [ 314.670002][T15195] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 314.670017][T15195] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 314.670033][T15195] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.670049][T15195] rtnetlink_rcv_msg+0x95e/0xe90 [ 314.670066][T15195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.670085][T15195] ? ref_tracker_free+0x37e/0x6c0 [ 314.670110][T15195] netlink_rcv_skb+0x159/0x420 [ 314.670140][T15195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.670156][T15195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.670173][T15195] ? netlink_deliver_tap+0x1ae/0xcc0 [ 314.670194][T15195] netlink_unicast+0x585/0x850 [ 314.670208][T15195] ? __pfx_netlink_unicast+0x10/0x10 [ 314.670223][T15195] netlink_sendmsg+0x8b0/0xda0 [ 314.670236][T15195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.670249][T15195] ? selinux_socket_sendmsg+0x198/0x2f0 [ 314.670269][T15195] ____sys_sendmsg+0xa4d/0xbe0 [ 314.670291][T15195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.670304][T15195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.670327][T15195] ___sys_sendmsg+0x190/0x1e0 [ 314.670347][T15195] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.670365][T15195] ? __lock_acquire+0x49f/0x1a40 [ 314.670379][T15195] ? get_pid_task+0x106/0x250 [ 314.670412][T15195] __sys_sendmsg+0x160/0x210 [ 314.670427][T15195] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.670449][T15195] do_syscall_64+0x115/0x870 [ 314.670469][T15195] ? clear_bhb_loop+0x40/0x90 [ 314.670485][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.670499][T15195] RIP: 0033:0x7fc21d79de99 [ 314.670510][T15195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.670522][T15195] RSP: 002b:00007fc21b9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.670534][T15195] RAX: ffffffffffffffda RBX: 00007fc21da26090 RCX: 00007fc21d79de99 [ 314.670541][T15195] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 314.670548][T15195] RBP: 00007fc21b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 314.670554][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.670561][T15195] R13: 00007fc21da26128 R14: 00007fc21da26090 R15: 00007fff3413fba8 [ 314.670575][T15195] [ 314.727347][ T42] audit: type=1400 audit(2000000353.989:1236): avc: denied { write } for pid=15193 comm="syz.1.2792" name="cluster" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.090232][T15220] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2797'. [ 315.108531][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2800'. [ 315.167416][ T42] audit: type=1400 audit(2000000354.429:1237): avc: denied { write } for pid=15226 comm="syz.9.2800" name="node" dev="configfs" ino=72960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.199260][ T42] audit: type=1800 audit(2000000354.459:1238): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2800" name="ipv4_address" dev="configfs" ino=73097 res=0 errno=0 [ 315.414914][ T42] audit: type=1400 audit(2000000354.679:1239): avc: denied { name_bind } for pid=15240 comm="syz.6.2805" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 315.554674][T15266] netlink: 'syz.5.2809': attribute type 1 has an invalid length. [ 315.570689][T15266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.596548][T15266] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 315.664745][T15275] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2811'. [ 315.710196][T15275] XFS (nbd5): SB validate failed with error -5. [ 315.741672][T15284] netlink: 'syz.5.2811': attribute type 1 has an invalid length. [ 316.006132][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 316.022066][ T42] audit: type=1400 audit(2000000355.279:1240): avc: denied { read } for pid=15295 comm="syz.9.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.056876][T15299] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.2814'. [ 316.239487][T15320] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.462822][ T5889] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 316.540472][T15339] FAT-fs (nbd1): unable to read boot sector [ 316.628073][ T5889] usb 14-1: not running at top speed; connect to a high speed hub [ 316.633611][ T5889] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 316.642686][ T5889] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 316.657918][ T5889] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.680054][ T5889] garmin_gps 14-1:1.0: Garmin GPS usb/tty converter detected [ 316.694955][ T64] Bluetooth: hci0: command tx timeout [ 316.705828][ T5889] usb 14-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 316.832484][T15362] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 316.928057][T10720] usb 14-1: USB disconnect, device number 6 [ 316.958659][T10720] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 316.968444][T10720] garmin_gps 14-1:1.0: device disconnected [ 317.016487][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.440924][T15388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.561092][T15408] e1000e 0000:00:02.0 eth1: removed PHC [ 317.643372][ T61] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 317.731450][T15408] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 317.813118][ T61] usb 10-1: Using ep0 maxpacket: 8 [ 317.822276][ T61] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 317.826580][ T61] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.830814][ T61] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.836721][ T61] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.840490][ T61] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.845562][ T61] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.850616][T15422] tun0: tun_chr_ioctl cmd 1074025675 [ 317.850822][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.856967][T15422] tun0: persist disabled [ 317.859071][T15419] tun0: tun_chr_ioctl cmd 1074025675 [ 317.868182][T15419] tun0: persist enabled [ 317.872379][T15419] tun0: tun_chr_ioctl cmd 1074025675 [ 317.878833][T15419] tun0: persist enabled [ 318.070711][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 318.082189][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.086229][ T61] usb 10-1: usb_control_msg returned -32 [ 318.096322][ T61] usbtmc 10-1:16.0: can't read capabilities [ 318.104978][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.109089][T15438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.128607][ T5813] usb 10-1: USB disconnect, device number 16 [ 318.175453][ T5973] IPVS: starting estimator thread 0... [ 318.241588][T15412] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 318.260671][T15412] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator [ 318.284363][T15444] IPVS: using max 44 ests per chain, 105600 per kthread [ 318.306072][T15412] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator [ 318.321845][T15412] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host [ 318.326930][T15412] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0x52540012 [ 318.473793][T15456] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2851'. [ 318.779682][T15491] netlink: 'syz.9.2858': attribute type 49 has an invalid length. [ 318.800045][T15491] bond0: (slave bond_slave_0): Releasing backup interface [ 318.871928][T15491] bond_slave_0: entered promiscuous mode [ 318.878599][T15491] bond_slave_0: entered allmulticast mode [ 319.259029][T15528] pim6reg9: entered allmulticast mode [ 319.367374][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 319.367397][ T42] audit: type=1400 audit(2000000358.630:1361): avc: denied { write } for pid=15536 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.387330][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2866'. [ 319.451092][ T42] audit: type=1400 audit(2000000358.710:1362): avc: denied { write } for pid=15541 comm="syz.1.2869" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.472210][ T42] audit: type=1400 audit(2000000358.710:1363): avc: denied { setopt } for pid=15541 comm="syz.1.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 319.565141][ T42] audit: type=1400 audit(2000000358.830:1364): avc: denied { write } for pid=15554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.598781][ T42] audit: type=1400 audit(2000000358.860:1365): avc: denied { watch watch_reads } for pid=15558 comm="syz.9.2871" path="/126/file1" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 319.626695][ T42] audit: type=1400 audit(2000000358.890:1366): avc: denied { write } for pid=15560 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.664668][ T42] audit: type=1400 audit(2000000358.920:1367): avc: denied { read write } for pid=15558 comm="syz.9.2871" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 319.687877][ T42] audit: type=1400 audit(2000000358.920:1368): avc: denied { open } for pid=15558 comm="syz.9.2871" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 319.699406][ T42] audit: type=1400 audit(2000000358.930:1369): avc: denied { mounton } for pid=15558 comm="syz.9.2871" path="/126/file0" dev="tmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 319.712112][ T42] audit: type=1400 audit(2000000358.930:1370): avc: denied { mount } for pid=15558 comm="syz.9.2871" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 319.900146][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2875'. [ 319.908195][T15578] openvswitch: netlink: Missing key (keys=40, expected=80) [ 319.950035][T15582] FAULT_INJECTION: forcing a failure. [ 319.950035][T15582] name failslab, interval 1, probability 0, space 0, times 0 [ 319.956858][T15582] CPU: 3 UID: 0 PID: 15582 Comm: syz.1.2874 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.956888][T15582] Tainted: [L]=SOFTLOCKUP [ 319.956896][T15582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.956908][T15582] Call Trace: [ 319.956915][T15582] [ 319.956923][T15582] dump_stack_lvl+0x100/0x190 [ 319.957011][T15582] should_fail_ex.cold+0x5/0xa [ 319.957053][T15582] should_failslab+0xc2/0x120 [ 319.957092][T15582] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 319.957117][T15582] ? __alloc_skb+0x140/0x710 [ 319.957180][T15582] __alloc_skb+0x140/0x710 [ 319.957199][T15582] ? __alloc_skb+0x5b7/0x710 [ 319.957220][T15582] ? __pfx___alloc_skb+0x10/0x10 [ 319.957241][T15582] ? if_nlmsg_size+0x4b/0xd80 [ 319.957274][T15582] rtmsg_ifinfo_build_skb+0x81/0x260 [ 319.957308][T15582] rtmsg_ifinfo+0xa4/0x1b0 [ 319.957346][T15582] netif_state_change+0x17f/0x380 [ 319.957375][T15582] ? __pfx_netif_state_change+0x10/0x10 [ 319.957406][T15582] ? netif_change_flags+0x10d/0x160 [ 319.957431][T15582] do_setlink.isra.0+0x31ce/0x3e60 [ 319.957457][T15582] ? stack_trace_save+0x8e/0xc0 [ 319.957521][T15582] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 319.957550][T15582] ? __lock_acquire+0x49f/0x1a40 [ 319.957585][T15582] ? lock_acquire+0x1b9/0x370 [ 319.957637][T15582] ? rcu_is_watching+0x12/0xc0 [ 319.957666][T15582] ? trace_contention_end+0x126/0x160 [ 319.957691][T15582] ? __mutex_lock+0x26d/0x1bd0 [ 319.957764][T15582] ? rtnl_newlink+0x8bb/0x2380 [ 319.957793][T15582] ? __pfx___mutex_lock+0x10/0x10 [ 319.957814][T15582] ? rcu_is_watching+0x12/0xc0 [ 319.957840][T15582] ? cap_capable+0x107/0x430 [ 319.957905][T15582] rtnl_newlink+0x1b7e/0x2380 [ 319.957939][T15582] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.957961][T15582] ? find_held_lock+0x2b/0x80 [ 319.957988][T15582] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 319.958017][T15582] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 319.958043][T15582] ? avc_has_perm_noaudit+0x145/0x3b0 [ 319.958072][T15582] ? __lock_acquire+0x49f/0x1a40 [ 319.958107][T15582] ? find_held_lock+0x2b/0x80 [ 319.958134][T15582] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 319.958158][T15582] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 319.958184][T15582] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.958209][T15582] rtnetlink_rcv_msg+0x95e/0xe90 [ 319.958235][T15582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.958267][T15582] ? ref_tracker_free+0x37e/0x6c0 [ 319.958306][T15582] netlink_rcv_skb+0x159/0x420 [ 319.958351][T15582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.958377][T15582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.958405][T15582] ? netlink_deliver_tap+0x1ae/0xcc0 [ 319.958438][T15582] netlink_unicast+0x585/0x850 [ 319.958460][T15582] ? __pfx_netlink_unicast+0x10/0x10 [ 319.958486][T15582] netlink_sendmsg+0x8b0/0xda0 [ 319.958508][T15582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.958531][T15582] ? selinux_socket_sendmsg+0x198/0x2f0 [ 319.958562][T15582] ____sys_sendmsg+0xa4d/0xbe0 [ 319.958597][T15582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.958619][T15582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.958660][T15582] ___sys_sendmsg+0x190/0x1e0 [ 319.958690][T15582] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.958716][T15582] ? __lock_acquire+0x49f/0x1a40 [ 319.958739][T15582] ? get_pid_task+0x106/0x250 [ 319.958796][T15582] __sys_sendmsg+0x160/0x210 [ 319.958820][T15582] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.958856][T15582] do_syscall_64+0x115/0x870 [ 319.958884][T15582] ? clear_bhb_loop+0x40/0x90 [ 319.958907][T15582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.958926][T15582] RIP: 0033:0x7f1c28f9de99 [ 319.958942][T15582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.958960][T15582] RSP: 002b:00007f1c29e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.958977][T15582] RAX: ffffffffffffffda RBX: 00007f1c29226090 RCX: 00007f1c28f9de99 [ 319.958989][T15582] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 319.959000][T15582] RBP: 00007f1c29e16090 R08: 0000000000000000 R09: 0000000000000000 [ 319.959010][T15582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.959020][T15582] R13: 00007f1c29226128 R14: 00007f1c29226090 R15: 00007ffcd6b8d3f8 [ 319.959043][T15582] [ 319.998474][T15579] kernel profiling enabled (shift: 5) [ 320.185669][T15583] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.222949][T15588] file system registered [ 320.243665][T15588] read descriptors [ 320.268684][T12722] ffs_data_put(): freeing [ 320.449697][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2880'. [ 320.469470][T15606] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 320.549912][ T5446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.665835][T15616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2882'. [ 320.704658][ T61] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 320.865387][ T61] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 320.871225][ T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.879422][ T61] usb 10-1: Product: syz [ 320.881280][ T61] usb 10-1: Manufacturer: syz [ 320.890969][ T61] usb 10-1: SerialNumber: syz [ 320.924400][T10721] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.971332][T15628] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 321.053266][T11094] openvswitch: cpu_id mismatch with handler threads [ 321.131819][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.139498][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.143988][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'. [ 321.147827][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2880'. [ 321.153247][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.158963][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.165896][T11094] usb 10-1: USB disconnect, device number 17 [ 321.441541][T15655] kAFS: unable to lookup cell '1' [ 321.693063][ T5973] openvswitch: cpu_id mismatch with handler threads [ 321.847010][T15679] FAULT_INJECTION: forcing a failure. [ 321.847010][T15679] name failslab, interval 1, probability 0, space 0, times 0 [ 321.867197][T15679] CPU: 0 UID: 0 PID: 15679 Comm: syz.6.2900 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.867217][T15679] Tainted: [L]=SOFTLOCKUP [ 321.867222][T15679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.867229][T15679] Call Trace: [ 321.867234][T15679] [ 321.867238][T15679] dump_stack_lvl+0x100/0x190 [ 321.867298][T15679] should_fail_ex.cold+0x5/0xa [ 321.867324][T15679] should_failslab+0xc2/0x120 [ 321.867350][T15679] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 321.867366][T15679] ? __alloc_skb+0x140/0x710 [ 321.867407][T15679] __alloc_skb+0x140/0x710 [ 321.867420][T15679] ? __alloc_skb+0x5b7/0x710 [ 321.867432][T15679] ? __pfx___alloc_skb+0x10/0x10 [ 321.867445][T15679] ? if_nlmsg_size+0x4b/0xd80 [ 321.867465][T15679] rtmsg_ifinfo_build_skb+0x81/0x260 [ 321.867486][T15679] rtmsg_ifinfo+0xa4/0x1b0 [ 321.867505][T15679] netif_state_change+0x17f/0x380 [ 321.867523][T15679] ? __pfx_netif_state_change+0x10/0x10 [ 321.867542][T15679] ? netif_change_flags+0x10d/0x160 [ 321.867557][T15679] do_setlink.isra.0+0x31ce/0x3e60 [ 321.867574][T15679] ? rcu_is_watching+0x12/0xc0 [ 321.867599][T15679] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 321.867616][T15679] ? __lock_acquire+0x49f/0x1a40 [ 321.867633][T15679] ? do_raw_spin_lock+0x128/0x260 [ 321.867651][T15679] ? find_held_lock+0x2b/0x80 [ 321.867668][T15679] ? debug_mutex_remove_waiter+0xa0/0x320 [ 321.867687][T15679] ? debug_mutex_remove_waiter+0xa0/0x320 [ 321.867707][T15679] ? mark_held_locks+0x40/0x70 [ 321.867721][T15679] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.867766][T15679] ? __mutex_lock+0x82c/0x1bd0 [ 321.867779][T15679] ? lockdep_hardirqs_on+0x78/0x100 [ 321.867797][T15679] ? __mutex_lock+0x82c/0x1bd0 [ 321.867810][T15679] ? __mutex_lock+0x26d/0x1bd0 [ 321.867823][T15679] ? rtnl_newlink+0x8bb/0x2380 [ 321.867840][T15679] ? __pfx___mutex_lock+0x10/0x10 [ 321.867853][T15679] ? rcu_is_watching+0x12/0xc0 [ 321.867871][T15679] ? cap_capable+0x107/0x430 [ 321.867914][T15679] rtnl_newlink+0x1b7e/0x2380 [ 321.867934][T15679] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.867948][T15679] ? find_held_lock+0x2b/0x80 [ 321.867965][T15679] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 321.867986][T15679] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 321.868001][T15679] ? avc_has_perm_noaudit+0x145/0x3b0 [ 321.868019][T15679] ? __lock_acquire+0x49f/0x1a40 [ 321.868039][T15679] ? find_held_lock+0x2b/0x80 [ 321.868057][T15679] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 321.868071][T15679] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 321.868088][T15679] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.868103][T15679] rtnetlink_rcv_msg+0x95e/0xe90 [ 321.868120][T15679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.868139][T15679] ? ref_tracker_free+0x37e/0x6c0 [ 321.868179][T15679] netlink_rcv_skb+0x159/0x420 [ 321.868207][T15679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.868223][T15679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.868240][T15679] ? netlink_deliver_tap+0x1ae/0xcc0 [ 321.868261][T15679] netlink_unicast+0x585/0x850 [ 321.868274][T15679] ? __pfx_netlink_unicast+0x10/0x10 [ 321.868290][T15679] netlink_sendmsg+0x8b0/0xda0 [ 321.868303][T15679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.868317][T15679] ? selinux_socket_sendmsg+0x198/0x2f0 [ 321.868336][T15679] ____sys_sendmsg+0xa4d/0xbe0 [ 321.868358][T15679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.868371][T15679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.868395][T15679] ___sys_sendmsg+0x190/0x1e0 [ 321.868415][T15679] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.868432][T15679] ? __lock_acquire+0x49f/0x1a40 [ 321.868446][T15679] ? get_pid_task+0x106/0x250 [ 321.868480][T15679] __sys_sendmsg+0x160/0x210 [ 321.868495][T15679] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.868517][T15679] do_syscall_64+0x115/0x870 [ 321.868530][T15679] ? clear_bhb_loop+0x40/0x90 [ 321.868544][T15679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.868556][T15679] RIP: 0033:0x7fc21d79de99 [ 321.868566][T15679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.868578][T15679] RSP: 002b:00007fc21b9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.868589][T15679] RAX: ffffffffffffffda RBX: 00007fc21da26090 RCX: 00007fc21d79de99 [ 321.868597][T15679] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000a [ 321.868604][T15679] RBP: 00007fc21b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 321.868610][T15679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.868617][T15679] R13: 00007fc21da26128 R14: 00007fc21da26090 R15: 00007fff3413fba8 [ 321.868631][T15679] [ 321.974701][T10721] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 322.082108][T10721] ath9k_htc: Failed to initialize the device [ 322.088112][T11094] usb 10-1: ath9k_htc: USB layer deinitialized [ 322.170862][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2907'. [ 322.174742][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2907'. [ 322.179329][T15697] netlink: 'syz.6.2907': attribute type 11 has an invalid length. [ 322.186169][T15697] netlink: 'syz.6.2907': attribute type 7 has an invalid length. [ 322.421191][T15719] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2913'. [ 322.430296][T15720] program syz.9.2909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.474107][T15716] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2912'. [ 322.546125][T15725] kernel read not supported for file /policy (pid: 15725 comm: syz.6.2914) [ 322.556198][T15711] ================================================================== [ 322.558813][T15711] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 322.561293][T15711] Read of size 8 at addr ffff88802eeaf438 by task syz.9.2909/15711 [ 322.564724][T15711] [ 322.565851][T15711] CPU: 3 UID: 0 PID: 15711 Comm: syz.9.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.565870][T15711] Tainted: [L]=SOFTLOCKUP [ 322.565875][T15711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.565882][T15711] Call Trace: [ 322.565888][T15711] [ 322.565893][T15711] dump_stack_lvl+0x100/0x190 [ 322.565910][T15711] print_report+0x13d/0x4b0 [ 322.565928][T15711] ? __virt_addr_valid+0x239/0x430 [ 322.566276][T15711] ? __release_resource+0x276/0x2c0 [ 322.566295][T15711] kasan_report+0xdf/0x1c0 [ 322.566311][T15711] ? __release_resource+0x276/0x2c0 [ 322.566330][T15711] __release_resource+0x276/0x2c0 [ 322.566351][T15711] release_resource+0x26/0x40 [ 322.566367][T15711] pci_remove_bus_device+0x2d3/0x3b0 [ 322.566382][T15711] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 322.566398][T15711] remove_store+0x123/0x140 [ 322.566414][T15711] ? __pfx_remove_store+0x10/0x10 [ 322.566427][T15711] ? find_held_lock+0x2b/0x80 [ 322.566444][T15711] ? sysfs_file_kobj+0xe4/0x290 [ 322.566463][T15711] ? sysfs_file_kobj+0xe4/0x290 [ 322.566482][T15711] ? __pfx_remove_store+0x10/0x10 [ 322.566496][T15711] dev_attr_store+0x58/0x80 [ 322.566532][T15711] ? __pfx_dev_attr_store+0x10/0x10 [ 322.566548][T15711] sysfs_kf_write+0xf2/0x150 [ 322.566566][T15711] kernfs_fop_write_iter+0x3e0/0x5f0 [ 322.566581][T15711] ? __pfx_sysfs_kf_write+0x10/0x10 [ 322.566599][T15711] vfs_write+0x6ac/0x1050 [ 322.566619][T15711] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 322.566634][T15711] ? __pfx_vfs_write+0x10/0x10 [ 322.566654][T15711] ksys_write+0x12a/0x250 [ 322.566671][T15711] ? __pfx_ksys_write+0x10/0x10 [ 322.566690][T15711] do_syscall_64+0x115/0x870 [ 322.566703][T15711] ? clear_bhb_loop+0x40/0x90 [ 322.566716][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.566727][T15711] RIP: 0033:0x7fc94959de99 [ 322.566738][T15711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.566750][T15711] RSP: 002b:00007fc94a3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.566761][T15711] RAX: ffffffffffffffda RBX: 00007fc949825fa0 RCX: 00007fc94959de99 [ 322.566769][T15711] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 322.566777][T15711] RBP: 00007fc949633eaf R08: 0000000000000000 R09: 0000000000000000 [ 322.566784][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.566791][T15711] R13: 00007fc949826038 R14: 00007fc949825fa0 R15: 00007ffd845e2268 [ 322.566802][T15711] [ 322.566807][T15711] [ 322.645428][T15711] Allocated by task 15412: [ 322.646835][T15711] kasan_save_stack+0x30/0x50 [ 322.648317][T15711] kasan_save_track+0x14/0x30 [ 322.649824][T15711] __kasan_kmalloc+0xaa/0xb0 [ 322.651290][T15711] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 322.653303][T15711] kmemdup_noprof+0x29/0x60 [ 322.654775][T15711] platform_device_add_resources+0x37/0x100 [ 322.656626][T15711] dwc2_pci_probe+0x1d3/0x360 [ 322.658188][T15711] local_pci_probe+0xdd/0x1b0 [ 322.659674][T15711] pci_call_probe+0x176/0x800 [ 322.661164][T15711] pci_device_probe+0x1cd/0x370 [ 322.662709][T15711] really_probe+0x241/0xa60 [ 322.664132][T15711] __driver_probe_device+0x20e/0x450 [ 322.665847][T15711] device_driver_attach+0xd1/0x220 [ 322.667630][T15711] bind_store+0xf4/0x190 [ 322.669259][T15711] drv_attr_store+0x74/0xb0 [ 322.671019][T15711] sysfs_kf_write+0xf2/0x150 [ 322.672511][T15711] kernfs_fop_write_iter+0x3e0/0x5f0 [ 322.674168][T15711] vfs_write+0x6ac/0x1050 [ 322.675546][T15711] ksys_write+0x12a/0x250 [ 322.676927][T15711] do_syscall_64+0x115/0x870 [ 322.678407][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.680257][T15711] [ 322.681017][T15711] Freed by task 15711: [ 322.682341][T15711] kasan_save_stack+0x30/0x50 [ 322.683810][T15711] kasan_save_track+0x14/0x30 [ 322.685295][T15711] kasan_save_free_info+0x3b/0x70 [ 322.686899][T15711] __kasan_slab_free+0x5f/0x80 [ 322.688428][T15711] kfree+0x22b/0x6c0 [ 322.689675][T15711] platform_device_release+0x8a/0xb0 [ 322.691345][T15711] device_release+0xd2/0x270 [ 322.692796][T15711] kobject_put+0x1f7/0x640 [ 322.694221][T15711] put_device+0x1f/0x30 [ 322.695523][T15711] platform_device_unregister+0x45/0x50 [ 322.697247][T15711] dwc2_pci_remove+0x55/0xd0 [ 322.698746][T15711] pci_device_remove+0xb2/0x1d0 [ 322.700264][T15711] device_remove+0xcb/0x180 [ 322.701690][T15711] device_release_driver_internal+0x44e/0x620 [ 322.703569][T15711] pci_stop_bus_device+0x120/0x160 [ 322.705155][T15711] pci_stop_and_remove_bus_device+0x58/0xa0 [ 322.707003][T15711] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 322.709035][T15711] remove_store+0x123/0x140 [ 322.710474][T15711] dev_attr_store+0x58/0x80 [ 322.711915][T15711] sysfs_kf_write+0xf2/0x150 [ 322.713356][T15711] kernfs_fop_write_iter+0x3e0/0x5f0 [ 322.715018][T15711] vfs_write+0x6ac/0x1050 [ 322.716370][T15711] ksys_write+0x12a/0x250 [ 322.717740][T15711] do_syscall_64+0x115/0x870 [ 322.719222][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.721072][T15711] [ 322.721847][T15711] The buggy address belongs to the object at ffff88802eeaf400 [ 322.721847][T15711] which belongs to the cache kmalloc-128 of size 128 [ 322.726125][T15711] The buggy address is located 56 bytes inside of [ 322.726125][T15711] freed 128-byte region [ffff88802eeaf400, ffff88802eeaf480) [ 322.730294][T15711] [ 322.731054][T15711] The buggy address belongs to the physical page: [ 322.733041][T15711] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802eeaf600 pfn:0x2eeaf [ 322.736060][T15711] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 322.738250][T15711] page_type: f5(slab) [ 322.739518][T15711] raw: 00fff00000000200 ffff88801bc42a00 ffffea00008907d0 ffffea0000d10010 [ 322.742249][T15711] raw: ffff88802eeaf600 0000000800100004 00000000f5000000 0000000000000000 [ 322.744879][T15711] page dumped because: kasan: bad access detected [ 322.746888][T15711] page_owner tracks the page as allocated [ 322.748697][T15711] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11276, tgid 11274 (syz.0.1851), ts 177235102101, free_ts 174491255784 [ 322.755375][T15711] post_alloc_hook+0xfd/0x120 [ 322.756870][T15711] get_page_from_freelist+0xf48/0x3530 [ 322.758585][T15711] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 322.760445][T15711] new_slab+0xa2/0x640 [ 322.761740][T15711] refill_objects+0xe3/0x410 [ 322.763202][T15711] __pcs_replace_empty_main+0x376/0x680 [ 322.765028][T15711] __kmalloc_noprof+0x66d/0x820 [ 322.766573][T15711] hash_ipportnet6_resize+0xe2a/0x1eb0 [ 322.768221][T15711] call_ad.isra.0+0x36d/0x940 [ 322.769765][T15711] ip_set_ad.isra.0+0x3eb/0x8a0 [ 322.771325][T15711] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 322.773062][T15711] netlink_rcv_skb+0x159/0x420 [ 322.774641][T15711] nfnetlink_rcv+0x1b3/0x440 [ 322.776148][T15711] netlink_unicast+0x585/0x850 [ 322.777666][T15711] netlink_sendmsg+0x8b0/0xda0 [ 322.779187][T15711] ____sys_sendmsg+0xa4d/0xbe0 [ 322.780713][T15711] page last free pid 5733 tgid 5733 stack trace: [ 322.782681][T15711] free_unref_folios+0xa44/0x1710 [ 322.784279][T15711] folios_put_refs+0x585/0xaa0 [ 322.785811][T15711] shmem_undo_range+0x5e5/0x1570 [ 322.787390][T15711] shmem_evict_inode+0x3a5/0xbe0 [ 322.788932][T15711] evict+0x3c2/0xad0 [ 322.790194][T15711] iput.part.0+0x989/0x1050 [ 322.791642][T15711] iput+0x35/0x40 [ 322.792813][T15711] filename_unlinkat+0x466/0x730 [ 322.794402][T15711] __x64_sys_unlink+0x46/0x70 [ 322.795883][T15711] do_syscall_64+0x115/0x870 [ 322.797359][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.799222][T15711] [ 322.800008][T15711] Memory state around the buggy address: [ 322.801789][T15711] ffff88802eeaf300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.804272][T15711] ffff88802eeaf380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.806765][T15711] >ffff88802eeaf400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.809241][T15711] ^ [ 322.811106][T15711] ffff88802eeaf480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.813616][T15711] ffff88802eeaf500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.816117][T15711] ================================================================== [ 322.819612][T15711] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 322.821912][T15711] CPU: 3 UID: 0 PID: 15711 Comm: syz.9.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.825255][T15711] Tainted: [L]=SOFTLOCKUP [ 322.826621][T15711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.829799][T15711] Call Trace: [ 322.830855][T15711] [ 322.831791][T15711] dump_stack_lvl+0x100/0x190 [ 322.833261][T15711] vpanic+0x552/0x970 [ 322.834540][T15711] ? __pfx_vpanic+0x10/0x10 [ 322.835953][T15711] ? mark_held_locks+0x40/0x70 [ 322.837456][T15711] ? irqentry_exit+0x24d/0xa00 [ 322.838969][T15711] ? __release_resource+0x276/0x2c0 [ 322.840646][T15711] panic+0xd1/0xe0 [ 322.841841][T15711] ? __pfx_panic+0x10/0x10 [ 322.843259][T15711] check_panic_on_warn.cold+0x19/0x34 [ 322.844956][T15711] end_report.part.0+0x3a/0x90 [ 322.846503][T15711] kasan_report.cold+0xe/0x18 [ 322.848026][T15711] ? __release_resource+0x276/0x2c0 [ 322.849700][T15711] __release_resource+0x276/0x2c0 [ 322.851319][T15711] release_resource+0x26/0x40 [ 322.852818][T15711] pci_remove_bus_device+0x2d3/0x3b0 [ 322.854513][T15711] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 322.856543][T15711] remove_store+0x123/0x140 [ 322.857983][T15711] ? __pfx_remove_store+0x10/0x10 [ 322.859597][T15711] ? find_held_lock+0x2b/0x80 [ 322.861080][T15711] ? sysfs_file_kobj+0xe4/0x290 [ 322.862626][T15711] ? sysfs_file_kobj+0xe4/0x290 [ 322.864155][T15711] ? __pfx_remove_store+0x10/0x10 [ 322.865753][T15711] dev_attr_store+0x58/0x80 [ 322.867184][T15711] ? __pfx_dev_attr_store+0x10/0x10 [ 322.868825][T15711] sysfs_kf_write+0xf2/0x150 [ 322.870300][T15711] kernfs_fop_write_iter+0x3e0/0x5f0 [ 322.871958][T15711] ? __pfx_sysfs_kf_write+0x10/0x10 [ 322.873605][T15711] vfs_write+0x6ac/0x1050 [ 322.874969][T15711] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 322.876812][T15711] ? __pfx_vfs_write+0x10/0x10 [ 322.878336][T15711] ksys_write+0x12a/0x250 [ 322.879714][T15711] ? __pfx_ksys_write+0x10/0x10 [ 322.881248][T15711] do_syscall_64+0x115/0x870 [ 322.882711][T15711] ? clear_bhb_loop+0x40/0x90 [ 322.884216][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.886071][T15711] RIP: 0033:0x7fc94959de99 [ 322.887474][T15711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.893487][T15711] RSP: 002b:00007fc94a3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.896069][T15711] RAX: ffffffffffffffda RBX: 00007fc949825fa0 RCX: 00007fc94959de99 [ 322.898552][T15711] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 322.900996][T15711] RBP: 00007fc949633eaf R08: 0000000000000000 R09: 0000000000000000 [ 322.903482][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.905941][T15711] R13: 00007fc949826038 R14: 00007fc949825fa0 R15: 00007ffd845e2268 [ 322.908403][T15711] [ 322.909997][T15711] Kernel Offset: disabled [ 322.911366][T15711] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:18:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fde946 RDX=ffff88801eae8000 RSI=ffffffff81fde931 RDI=ffff88801eae8000 RBP=ffffc900001077a8 RSP=ffffc90000107640 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=ffff88806a73c540 R15=0000000000000000 RIP=ffffffff81fde933 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc21b9b4d58 CR3=00000000387e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c29d5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd6b8d8e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd6b8d8e6 00007ffcd6b8d8ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c29034492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c290344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c29034636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c290344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c291f0600 00007f1c291f05e0 00007f1c291f05e8 00007f1c291f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c291f05f8 00007f1c291f05c8 00007f1c291f0600 00007f1c291f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540 RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000060c000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe74140ec6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe74140ec6 00007ffe74140ecc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f903f834492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f903f8344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f903f834636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f903f8344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 746e6576652f7475 706e692f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 574d4655460c5756 534d4a0c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f903f9f05f8 00007f903f9f05c8 00007f903f9f0600 00007f903f9f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=00007f4905d59017 RDX=00007fff73d9abf0 RSI=0000000000000000 RDI=0000000000000000 RBP=00007fff73d9b0d0 RSP=00007fff73d9abb8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000202 R12=0000000000000004 R13=00007fff73d9ac2c R14=00007fff73d9acc0 R15=0000000000000000 RIP=00007f4905d59018 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555574326540 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc21d7eb580 CR3=000000002c72c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4905ff0e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4905ff0e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574341ae8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030803a0080503 800418828392e408 0001000004080606 0113f60008000398 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030580041880a392 e808000100000408 0606011480000200 0700000008080605 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10ae060003000401 800301800438a003 0008003890030fff ffffffffff043880 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0038e00300100038 d00300100038c003 02100038b0036010 0001900301000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100038800401 000000080606016c 8820a2080038e003 00100038d0030010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0038c00302100038 b003601000019003 0100000410ae0600 0300040180030180 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0438a00300080038 90030fffffffffff ff04388003058004 1880a392e8080001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040806060114 8000020007000000 0808060580030803 a008050380041882 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e206c6c61637379 7320746820737320 3265737320657373 207273786620786d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373745f746e6174 736e6f63206d6c20 7063737464722062 6731657064702078 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f74736e6f6e20 79676f6c6f706f74 78206c706f6e2064 6f6f675f70657220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6973796870207374 6962203634203a09 73657a6973207373 65726464610a3436 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67616e616d207265 776f700a6c617574 7269762073746962 203834202c6c6163 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000060000006f 666e697570632f63 6f72702f0000000d 0a0a3a746e656d65 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000ffffffb0 0000000400000018 0000002c00000040 0000005400000070 info registers vcpu 3 CPU#3 RAX=0000000000048958 RBX=000000000000000c RCX=ffffc90007a84000 RDX=0000000000080000 RSI=ffffffff81fe37ba RDI=ffff888031fc0000 RBP=ffffffff8d594435 RSP=ffffc900034b6e50 R8 =0000000000000001 R9 =0000000000000000 R10=000000000000000c R11=000000000000249e R12=0000000000000060 R13=000000000000007a R14=dffffc0000000000 R15=ffffc900034b6f30 RIP=ffffffff820a6094 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc94a3a56c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1d61472ff8 CR3=000000005d6c7000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=0000000003010037 Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa10125360 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa1011ac10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d96360cf23 737326da91c9e6c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3ab07dd1696980 000055af4ab1d232 00000000000000d1 0000000000327075 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3ab07dd1696980 000055af4ab030ac 00000000000000f1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3ae5d7de840e10 ffffaa50b54fcf50 00007f3b7b2bfd9b 00007ffde5974408 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3aefd7ffbf4ff3 fffffffff5cffffc 00007fbbfbbfffbb ffffffffe5dffffc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aa101223c0 0000000000000041 00004e4f10121552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000051012014c 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000