last executing test programs: 22m39.939868863s ago: executing program 32 (id=142): syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x1, 0xfffffffffffffffc, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x10003, 0x6, 0x40004, 0x7ffffffffffffd, 0x6a6}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='10 1 1\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1\x00', 0x2) close(r5) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4}, 0x14) syz_usb_control_io$uac2(r2, 0x0, 0x0) 10m55.921248499s ago: executing program 33 (id=2390): getitimer(0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./mnt\x00', &(0x7f0000001600)='sysfs\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./mnt\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='hfs\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4004662b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x8) prlimit64(r2, 0x4, &(0x7f0000000380)={0xffff, 0x54a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000dc0), r4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) listen(r5, 0x0) 9m8.454642038s ago: executing program 34 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x1b, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000002c0)={0x82, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x54, 0x2, r2, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989056, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x22410, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x6, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008940)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="cd06662d36a6e21ac989fa40fe2c0be7218608b6a14767102f6d48976ed48fa8de32b73eac26864ba9af66a816bcadfb06faf29744", 0x35}, {&(0x7f0000000640)="052e47d4b40222166e0f4e9c6c2e137b411f2f781054f5e40398345da3294a122f29ad33ff6251799e3b4b89a5d3ea61fe54c49a4d53834f16642b14218a59d2cf445836319eeb2ee21b42c21c16124edd85fabeffbe76732ede5700adcb53d8092bc7d44d6066e41c087a8609af3982fb2e1eacf783a0fd1d76b70a08166f8744fb7b17db7911756b404b77da4864d6a1e6c161f85f0c5af25287aba4d2183299bfe36ef0a57f5b5bb4244c01cafff4aef592e25efd14e8932f12235e9f35cd09317de66fb513b0657f0d726cb97563efb445d383d4897dd56ed6c89874c27dc543f68cd96a06fe18c285991cac63090285f361cc8e04803354da334059b7f87639bf8c4d8499a5de082b142dff3ad992", 0x111}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRESDEC=r4, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000e770c644d997c7558aaca7337f2dfa83e84c0443d6c52135159bac0feedf76dfd50c30105344297063be357ff044cec1e1448ee5d4c8eba41d609942693cb98e4e151575eaaf6be14c912bb9a858eb42072821a8ca2a", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r7, @ANYRES64=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRESHEX=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32, @ANYRESHEX=r5, @ANYRES32=r0, @ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES16=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000f700"/20, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x8000}}, {{&(0x7f0000004200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000088c0)=[{&(0x7f00000083c0)="1bb59e90d05f7a99dd85a18c57c91139b5d0d961a728df348c9a92b2b56ec5a3c5f2d6be3ce65135681df66ee59c7d9b09ffa40d34869fda86fb8741a3da6894595559fb205e513f622fb2f42f079a20218047af0e590a7d79be372d7d196d5d5d1808732493baa325c56a6d71c74edc6f2d1d00ab5779a133eee7f7d66d2b27266c00cb23408d6ff22c87593401afd608027ebc9402e3c05dc51868eddd9a2d7dc3dca1e5c7c4dd26b9913f7aa7ea3c076b24cf2ead4587407d394b9bf94097584a240406a0191e2aeb43f85c423f0188ef05c9ea4ac6d4d33ac7a1c420943457ea8b5ad0f45176727f915835e547255782c2310fa78871", 0xf8}, {&(0x7f00000084c0)="a7b667607b0c6d6178585eb43d9a13", 0xf}, {&(0x7f0000008500)="1310d76bdd90f5e720a5abdff45a0bd32e602b08b624eac34d5ec1f08f961218adb5f74728581c1ae505d194c76e0fea75b737c83be99baba303f86a45b6cb274c517d56db92f8a7a33dac90b4a74d522d09e37baacfb0fe5729ce65e2c59a0d057081c637bee64eb0345c3745cd73d2f84901f05fa49b0722caa9039c6ee6146b2bb2778658006d59f58defc93db279fa611f3bffafdbc63a39b6447887c840640e1235ef669ba07d1dbda595ddc86bc665d08a3d008c079c2844236f99", 0xbe}, {&(0x7f00000085c0)="72ec10009463d6eef42a22548fe5d32fc9ad2d749b3da2130c86a66126586a3cca53c6c931f4567d5798455755ea27c94da592699ae68b36ae55c71c4bcc3f94eee31c0afc5dad4d94fb02bbc7a142b4ce335b9b20b473b080b1a82fca1c3c75c04c966e832d98d084cca17585b20f693876268b254b4a9556e2c8e1ea6d7661386ecae458e4f810cb71b66132bf8ead446c32f56b6357223c1b313241ff166367bfb4550c77d9de8bb668f7957b09d2a836739df5facd9fe59d7a2eb4b2", 0xbe}, {&(0x7f00000007c0)="5200956dd922a7fc51a58bde11c07cff8507d082795ebf9858bda1bd6cba141b839f82afbe34d1b8b3747ba505e2aec16b2b3d628a2e5b2042830f034e90baa3d5fea73dace4803d5b320b676fd04de6985911ccb7a3635de657a9aec4e68205d2afab312f4086d4694bbfc91336046a4816a36b16bb1b5b7e51d696d09212065410b738c993d0bdeed20168e6c5802c472e410e", 0x94}, {&(0x7f0000008740)="6cbee645b324e381b5562260640aff398554ec70d18e3cd1aa183621c95421e947f74c33cdbb98568f8ff9e9bd35f2d207c9abd788a0d5d7dc44db2c5cb142ac4e658467dcf0d29e85b04ac2ea5284fdce1c0f8b3d142d778f7075d83fcfc4379f7c45ff0aae28bfcaef5eccba10dfd2717964e83e9e28c8875c8eea30187c25a067965b56065e11fa55609ac8291c9b6b280c64ee0f9ac3f8962d6f33ad155e9f1d963a16b20a532f88a3e924b13a63b758875083d646d9bb9434a24345ceaf2a41f8a1f17b", 0xc6}, {&(0x7f0000008840)}, {&(0x7f0000008880)}], 0x8, 0x0, 0x0, 0x20000140}}], 0x2, 0x1) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2(r3, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)={0x800, 0x0, 0x14}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 9m0.448885714s ago: executing program 35 (id=2893): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) pwritev(r2, &(0x7f0000002dc0)=[{&(0x7f0000000340)="530ec78045d1fb1fbb476e5e3ef6fd6df273019da872e090685099d452b178f921bdd95dffa5b5d5045a000f723a9d721e7255d2885d2a8d27eca1fb735c502a1ac6f4ebe231fad90dfa2a8f734ee3e709ebee58409fd8fbd840290d6af6f21b352307d85e51b6eb7a7bb71c857434a1ebabbb4d9b6d6eafd206c2d5d3b73f85881aef2da9ed500f40cb2d470eaa9af34887250f7ef0bca632261551afec39", 0x9f}, {&(0x7f0000000400)="d462bccf61f322317b53cfd8de1033976f983c", 0x13}, {&(0x7f0000000d00)="1ca8b63a7f375b4ea44aa0cb551d5be2b0d0d6222035266a888498f0bfd8fa75afd5499e4c23ee194716fcf7f9e6a3ab4390187a4b31646cfb9be91a1c18bb2f836aba0552000777a70abcf2d9b68ba3eff77175f671d8bca848b36b432f964b96ce27dd9589ab63c83c69cb2f84f7d5d07249f937e7bd9329c23683074a86e8f227248da4467cabdc7a963ee7d826e42de25a16e2fd2681c1fef04c2ab221631dc9c123c6ce98436790b9273c9e8292a6b44a9e7829f769a8cf9c46291fb6047596cfa1ed51", 0xc6}, {&(0x7f0000000e00)="e66b9b6da5a743ff66d72e8f2037bd1cfa602fb6dddd7dcf00b4e8f597329bc74dd27c9fae990bce576446855c3f7d4a8a16c397446a05ddad724036f34cd5523d04edb96dcedc168e25a736c0168b0e69570bba3aa66f9367d80bdb60ba47abc8df3c7a6ba507c0629041a4c7ee25de44949390e2f3cdac3ecd688df934e9d27cf91b965d092ca54b0166344b609f6774", 0x91}, {&(0x7f0000001dc0)="b2aa60d52531a6716e4a55809f61093fd2cc18a937ff10e03c2be224f66df298c4e0325b21b969650252e69013b92a87cb5c8595b9be553867f2311daae0812ff5cba7abacb5529f659d7a90897e351d25d1dcaa8b27001ac33c8bb6682d619a1c2eebe340889d4ff1221926822c9becdef4bb5e76a541dc8bc3ad08e6b8f4f99733cf30a0624a8adf4b518410e54361b1b6eb78fa8f2836d97e3c86b6a5121b78a9724cf764cf3c787774a0526374144e30e48194c9f7b46b9438810d8a9f5a271ca0e2d863f85f75469ea5fd9701f90b4ae73ac0afe7b5765402cfd1d75e2d3711d72ed5b33f2edd3bfa38b3a65063f1d616ff27929c416b0967804114359fea2425d55c85819d8f9a04e9073fb6288b955b31ab4851dc98d8d3da189020e13a487cedf3d54b33cf5573f920ed67d93b6f24c3739c059bca6e4d82792ed54342fadfef4fbf105540df9a3bda9cba37bb99bb9e1d22acc3772145c344f5c165b47168abd168bd89c52705c820335de691f2ff5d2d39c0850d844cdc5c0533e673c7e7e282034a8858369f279e259fcc1f7c61b28ab74448b1610c4f745c0ff58215d3b43a1e56f7cf1de5cc3fdde1b19e0b50269796ddf833e11f433c998d93cb52a67b5135b7484300261eeda9f845026b1b07ba07f21996336298062d4edfd78819e7efa8a47ee8111c4fa14d770cc743e02f921c399b6d5b85854f763e95cdf7b3c47167c88f8e415ca5842fcea26dc63bb4fa03bb41b41aa86e4113faf0cefa28c209b624b296e0839bb9550a8b874109de7e34791222f434b78db47d49cd091b6290dc2affcfb340ca7b94c4334c6fa02bf1b5f35cb5df460e9ce4cc6de21b6ee0cfc4931a0ecda2e5244d349432cc1a9faae149f9b5a84cfb3513cc21c7c44d2117969fc2d7f4146095878cff42f95ca1a1d73bb27a8a544a081f549597c6280d68dd56aae52cf296ceaa7a35c75fbf5fdc3a381a345ad44ef9a177fedf89ee90af34e5ce1b4d07a16fd8866c8886b01c219211430cf0080cd6e1a29079d29cbc690491d264e8b7737e498f0095c201137618de7efd2498d2f5b469f0b6398fd8946258b113e1fbd8e9c38b8cc5b278478e691c3323c6c36a2f248af6bf0ea91418f262318852c0a605420c053ab535e971f06c9a0799af54731883429d5f70df92be63574d1c2de85ede176f1fe40943f52d1d9508373482dfb134ae577244fdb0725383f6b9c84e4d520c58023d4c1a2920a12bf3e2a8ba75442e6eddaeba0e74f615184f28a16de99cec0890eb87c1be1d31693025768e8e6acacffa22e8ab60b22c7c9114c52ee6c3570f2f5264452f15a1cecc2aef368c8f0f2ea62f0a90c79ac3fd413922f482568809f0dfe71bca6fbaf353672964a7a3bffa336f6933206b1b6a79ac18a73276aec20cda842773ae4d433471372ccf8d3f111569773b32cc0fae9be3f1d8afd66507fb0660266e715a8c9233253871775756de6b2dca7c46b25f3449e4b013286a8d61db15631c0a0cf964eaebc7d45321e38e549d2592166e54ac23e950a2ea244a857e8e02fbcb59d0b2d3a27c5e9c73e466d3a87babbdbdacd765dcb9b1ad54a17593263e006cb4079e9f2809624843db532b0056d04dd3380b767d620f80d0b6b0e68d3942ee09370d84e02e2167e6ba12ac4e189de81c001d71f0f223529d173f9b4eda61540ee25bd7236212b330392b9d333309c22faf9c6e101383c02441fbc1cfb572119379a58d3557074e7750cd3e00ffb26a3292e768c7beeb33a302f38f110a0a5c1d96f4cdf621c7860c458834e7ed04ca58326f260806d649c20771d4c854756ae743086f31ea7a27d44591e9970f5b544075d99ad59411f8e3dfdd8f884f5c8e89be503d56bb92b6b8e35ffe977f68addd71e11b5d69106353b7a68f68133d71956b7944f6de040bdada8415562265547d6db2aeac8b40ea293997df1a36e4c7f1e1729bcf0cdd3ca313af1fa83e31639d3c5a5f462d4c6e4d7d91891471463de8dad1bacbf07a92c36e1520c620f7a54557543b6c3f0d38d7069e1bef4445ba7e253751f3cfa35701f5898398fe4db4d8059c232671b41f0c337778b85c54abee229145288558b22f02f0b6cf44ab8829e2a147fa1ff4f457083b55ffbe1ce3d462b85ef65529b6029d25dc3b72bc37d8afaabafbdce41e963b98ed7a1602a599255d5e5c9496e57869377c6590ee3967287c2b64b3410230c5247905627f154794dd03fe7c37d0f2174f46c2a8ba77f8026a68e489314078c4bde4250b2db5f111e219482df7507568211ecb9ae04c1f304e6a1ca5b46a12d6e1e53cc494bfe00fa1d7e61e02974007a4c4a9977d9727252b574ce33448c905eec582c4493e5c012745261a816e52dbd22eaea688b59194feba0b6edb9fdd49eda323c1ec5176f72af6b8cadb801d3ed947969b010266558a140aa57df7f87788b0c2996a01bc77a5c42d88b9f7fa5f5e77ce89aa27e3f9990fa738062968e0e87def1132b4c0376682761c86daae69b58a6d9ca738e4f1d4a85019a8c7cd413973b69cc6cb193387ce1c0e901458c1d8cc2184d9315535946d72df55ba26742a0631d7a182b20db6b2826c02b952fe042578b7ccb1a82ffca4c2eab0dbd3e5a76151cd05d80decd0608aac103e8501f9a5d129d586e76038eb1f1e77ba57e63de9724004c79027a0805596cd89afa4c079f49819d435baa9766cf816e6771e972c130625065578628112de9aec2b29038644eb7227af3d1d85ae377dd525f96b3a41eb171d210bd9f4980f79b57a615e43c6881569be29a6d682f8b504b9b41df47d7b63f2e3d9f15a20e8e2200aa89631eff4fc073e16d6ebf27af706758be873e915c69202b4b4650022cac9987d00af9ee6b7780b1472d3c183555ee04d84a5ceb357255d1c43c778f470a9bc57c5d17103519ed1b657ad3fd02e9c48d0399129752fc754e77abdf3ca9284bd172af94adc60cb645454b1d1776059c28e5304e4959ba113608df3faeba0b278f8c1e2d30e04dd87b8a6cc3d6ecaa6791eee73bbd3cf6eab45bf947fb503ef238e62a27a617a6cf00d5205339699fd4fd31ec5db74ae606812bea8f3a4c908fec7645ad5ce7e1e08c0e1470b441e13b1e90d289171a06338925765b2a587f33e461736d42238364e7076f69a4d7a8c8c5b469b085a48f6785f018df48590f60c5e79c78bfb128b180e303d3e5530ab25f96d18f538325909655bfc0673e84ae247b9961972ca5826006fbfd3dbc1a812852124708a372e70360b2b9d9d04729cba941b40d0b5be7be8304d6df5eb69204507886bdb050d15777a8535f8c829fba648081ad39d12c1eef722f5f9f3fa65a594190b7d912003cbd6cacd58510fc27719c0a18bce7f92e808de0ca2b26ef4b26b787f99d91e110e86c2dbcd83236852eb0ff7950525a43fb23174d4702a634e94947a1ce32c79a6bfd5713550ecfc53f9967da825569065b68092a37f9ceea528b627daa78c0bd9216bf31b82a414ab8edf5266f888c4717d76842a5fdfd97b308a77d9eac85eeff0cb8d67d729314cd53b33212f7db122d66d850b6c0814a48b8dceb10167037a90431bd8425cd5297fb1036760e29727eb0a3483480e434e82fb82318fec6300f507cf4d913c0971c8e7ac86f3f558160d8e2353a2be27baae1296a3c399976c4251364f15f611b776f77c67e34324ec626cff2dff3db4e41a311de0659fc77554f745c0c38b77655432ffc3f59d34759e984e22b6325c471ce873f8b12c9bd5af80d27d4b6fc5ba83dc7bd138abd469bcc693096acbf4a2e31485275c5a0c1ffca5fc06592d418e47df70dae84881ce57914cd18f127a4f57dd2c184939b61d58b06c3256f894af88fcc42cb82f45b2a55ed9bec1fbc3031e4ab322d5a4cd8305fd2c881a836d3c1eabebf145dad5b1f42462266526fd4f11b0b0e182988f6fcaca124f136ad079fe605c4cd00a28e4c29b8839ecf346e3521023a4ca9975ee8d9eafbc7686545b85571eba68de5cd9f68f5549da1d98500cd142f57c6c5559a30213b449af1ca181390da82edba8c8a980a666fb3bef7fd06b30afc0eda97fe968dfe877e2856e7b34a3e8388ca0363428d20768d610988ac5bc37f265d340a03c35529552edf0635cb929b72c14cc231d75bde66cb4cd42efb880de4e224feff2be5c3265723caafde822391d480341f29fef00bfd3d6a7535c02fbeb14579925e99ee15189940ff969fa98dc21bffc65531fa14aaa002808969e4bca3dcc75802c5de1294dae1316e0b84779e480b57ad29cb27dd102d098c7ce1ebf8195876659b212617af6e68f59d53712fe46f05d6d91eb0210f92f253b03d9dbe34950b5b60ade009ed5c2a4771b2d8e0af26411c80f9b500285e5fc300983c7cd4da583f62c720b696d8c40f272722d8e2cc7290d80bd5d53a72e50eb0e103256390cc559e8c3d0646f30d4d390925715948a1dec28f6ba31076afd6633d59c8c953e037563437248d980374bb02d4a7be0cec48fd811bd0c9b02f9007cc34e98571d596d8bb4f8232bc4bf569cc4033b85bbee1fbe9ae74a8c6dc8dd4ec200939cfb87b2627b78252809a716519f2f60b3f0e747a0d13d99a67c83f11a2633b1d13fcee29e8e66042edda3d9cf492034fa9209899629d6cc31c3983d3c125498e025b1812ccaf40c19e24173af17a08dd926d438e8c58db0d2d412a8a20fee3056f75c90c48980b299f5f352f4321e8d88a82a737806a104bd2075c64cbffa1210f09199e292098d2030d1ee76e35878c27107a95c536f5a7b1d3c21750b019d59f6d97821eb8dd652088b9dbb18381718d594ff45dc09b3b67f54789e290745a23239da63af4a15b65e89b8ce1132758325934c4f80dbc354abc32cc81c83a31fe2e279d9872d5e8ed50fa22e586b1742d7c3c068c7a377f397f46e178a6d8224ee9bd696a11f55c5c111b016da6337c7c5cd8e1b398c11afedc6df09b7727001f0263addf2bf2efc0235ada8463b00d5eeb58cc90b4334471d9624b81e6c6f23ec5165bcfc9b12762eabba775a5b57dad3c5a182eb9dcbb46c3e446e9a2bf826fe0f72193a4f21c0cb3d0d407e30ad2cbb4a7b310f3480daa28b929dbf70ea0309d48755a2545017d4002d0ec6a37ac78ac22d4c60640b5eb9f7a00d3565edff28cbbabcbdcd66400a7712598709488db6646b6423fb860678448e7697fc8267ce8c9fdd467bde765bf76fa52c33faaab4fa4975b4b1d0fbb38f923b96df7f1a061bc0bf5ae9484f959d359ef5abaf6b48f0623636dbd58ddfc11eb260afa5230731ab83392b13a8c76a85006f9f010c42dbc4cc51d227c0c2274485b267f875cb3a30d18d816692e639760c5332533ec67ffe4b9aff5a30f602b270f7df921d2e5c4140c22f6ef9067433e8bb59f12b120b0fffa34628803e0cf97d77eef7526186281cfa10c6d55b8390e39efbdee80e45af4456d4f59e44bd5734743001edfb9ee90a9814625e7e7b5adbbdf46a7c0c926bb02b6e8513af113d40625f84a0790beef8416c7deea02ca7b7adc33e13d360b47f4a6d9f3a52b2192148b75f3fe94628f4e4d5957cfaca39c19425842a914104a67f4a38ffeb22442fa03f43ea3b4edcdc7e42d100cda20576930ea1f122b077132fb564668cb61241a09304a544c0114dc40d2ede187c7c37eb77c87ab70676888dede293fc4008ae07b54234461c3e73176688864a7bf556b728ea1d09188ab1ad50d611551201938ff751352040598679f98e30", 0x1000}], 0x5, 0x10, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d44, 0x800, 0xfffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x4000003, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x80000003, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1e6, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000f80)={&(0x7f0000000f40)={&(0x7f0000000ec0)="cc5b7ff4a23478482d1857ce714e674c3de5b4bf6a88989bba3957651a8dd9950d20e92de49b41e2a5ea3c234679efcf6c2e6b7760f39851f5e41b896578372865b038088c68f8327e288dff18", 0x4d, 0x0, 0x401}}, 0x1) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @pic={0x0, 0x1, 0x0, 0x8c, 0x2, 0xf6, 0x4, 0x80, 0x25, 0x4, 0x6, 0x7, 0x5d, 0x8, 0x7, 0x8}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000001380)={0x384, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x370, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "4d52579e5ccf1faf54e913e6bee8a9ef8dc4f1ec464d1bcbb90b552c9ff13f903a3acf01031965283a9b38c38a0453602f8bee24b02fccb2bc0d291d09957057825ad2e69302017fb590103c35e095f56fdd9e109a4ae820bb0a260c66d61c74661e2dd67464640ac707f8a2b70cde188a159c1588dc309c1b79bc4fccde2aa277fcc512a7138216da39fc328496edf8483b0d3b00"/158}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "63149e0c76f31e50cba6041264d7c97c0983ed165168a2ef96dc9a485d799cf171a51dcc6ad08a93365f81ea1a53f54848cb2ff201e72dc4be6ee3df315a5b628164e0d7cd9145b0527d77b478422eef4d7d887e726256c64243a8ea30679b82602bb7b77c91"}, @ETHTOOL_A_BITSET_BITS={0x24c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':$$&}!@\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x4}, {0x198, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x99, 0x2, '\x00\xdf\x96\x06W\xe4\xbd\x03lc=\x8ak\xe55\xe1\x01`\xf6.\x90\x91\xf3$\xe7b<\x15\xdc\xb6\x8c57C\xf09\xc9\xd8\xe5\x9b\xf6\xa0k\xaf\x8b\xb1\xf7>>b\x99%\x83v\x8fbN\x86m\xf1^K\x92\xba\x812)\x9b\x8cr\x93\xfe4\xf7\xe2\xeapsu\xfb\\WK\xc0\xbb\x8b\xb6\xf2\x83F\xb9\xce\x10\xd6u\xd4<\xd9$\x81\xf7Q\xc2.\xe3\x0f\x9e\xa5\xed\x12G\xe0z\xa9M\xc3N\r\x95\xbd\xa2^\xb5\xc7\xfa\x87b]}\x02\x913M\xe4\xc9)#\xbc\xc5a\xf3\'\x8a\xef\xd29Xt\xbd'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb8, 0x2, '\x004 j\xc9\xc2\x16\x80\x00\x00\x1em\x9flr\"\x12\xed\xaecF\xc2I\x06,-\xfd\'\xf7-\x9a\x82\xeb\xba'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}\x06}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\xe8\x00'}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7302}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':$$&}!@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x58}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%::{:]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc75f002}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x81}, 0x400c000) 8m19.732518364s ago: executing program 36 (id=3029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x1, 0x2794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x7, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, 0x0, 0x0, 0x24008001) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000) setresuid(0x0, 0x0, 0xee01) getgid() setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "a2290000c650f776", "43bcecdd21f55be0266a460d84605c030802ac0b38baa9d317c79977994ab3fe", "2b710100"}, 0x38) 8m18.446399426s ago: executing program 37 (id=3038): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x8, 0x0, 0x0}}, 0x33) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 8m16.613557463s ago: executing program 38 (id=3046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r8 = dup2(r7, r6) getsockname$unix(r8, 0x0, &(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x12, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 4m14.601219694s ago: executing program 39 (id=3917): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000030a01030000000000000000010000073c00048008000140000000001400030065727370616e3000000000000000000008000240148a4539140003007663616e30000000000000000000000008000540fffffffc0400088064000000050a050000000000000000000000000008000b40000000030c00024000000000000000050c00024000000000000000040900010073797a3100000000080007006e61740008000a4000000001080900006e6174000c000480080002407e246993280000000e0a01020000000000000000010000000900010073797a3100000000080004400000000224010000090a05020000000000000000000000000c000b40000000000000000308000440000000020800044000000003c00012806400018011000100666c6f775f6f66666c6f6164000000004c0002800900010073797a32000000000900010073797a31000000000900010073797a31000000000900010073797a31000000000900010073797a30000000000900010073797a320000000038000180080001006f7366002c00028008000340000000010800034000000001050002000700000008000340000000010500020002000000100001800b0001006e756d67656e0000100001800b00010074756e6e656c0000340011800c0001007061796c6f616400240002800800064000000002080004400000008308000340000000e9080006400000000044010000080a01010000000000000000020000050c000340000000000000000408000940000000d3072fa2350ccb01000800094000000000aa000740a7840945ac4309cc49c7f7320b7f9261fd4ef2ecbfc724f54689de1bdacfa14db0e4fe99dfd1ec9af6ef1a52eba1fc3542bed249467277ea15d0c14329d621278fea443c1c53d52834a2730ef21d51c757060e767488eb42aae27d742cbcadb875e2bbf3c0fa6c853fc1bdb610a4d76fbc260ffc36b8df8ef1ab56e313e329cdf1be1fddb467e4f2b8f2a8ac1bb5e799543b812380a01614c4525d87402c530cecdf5a9a5aff00005d000740f1a362b9712fb84cc066ddc49e75b6f37e2e0e185a06ecb609d3e48f9a3d6632dfd9fc31e61278246ce8042083ea09859ac4738ad8478f3ffaea3b7c766a58d6ca5daac1d0f5d04edc61eeae75ab7fa91d6ee8804cc4e47fb400000024000000050a0102000000000000000004000004040008800900030073797a310000000014000000050a0500000000000000000000000002140000001100010000000000000000000200000a"], 0x3b0}}, 0x20000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x4, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8b, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x20008, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x443, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x182ff324, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xc) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1m16.659832294s ago: executing program 9 (id=4560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0x1fc, 0x4c) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x123481, 0x127) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x206a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1m16.490968968s ago: executing program 9 (id=4562): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) dup(r9) dup(r8) ioctl$VHOST_NET_SET_BACKEND(r7, 0xaf02, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$nl_netfilter(0x10, 0x3, 0xc) 1m15.194728347s ago: executing program 9 (id=4567): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, r4}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 1m14.975694053s ago: executing program 9 (id=4568): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f00000002c0)={0x317e00, 0xf8, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000000)='./proc_mnt\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000defadbdf2502000800080017f3f1798cd4938365769803406d1a1ebe3dda2819ad7bd9c037fae40ca305d982ab77d40cc609c20610fa24b771804426258a3cf17637466b8892", @ANYRES32, @ANYBLOB="08002600431700000800270001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 1m14.09925365s ago: executing program 9 (id=4574): dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) tkill(r3, 0x14) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1m12.748070882s ago: executing program 9 (id=4579): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000280)=@framed={{}, [@jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0x4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x10, 0xc4, &(0x7f0000000380)=""/196, 0x41000, 0x6e, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x7, 0x3}, 0x10, 0x273ef, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x5, 0x4, 0x2, 0x71bcbb5c8f35765f}], 0x10, 0x101}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000000c0), &(0x7f0000000a00)=r1}, 0x20) r2 = memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r2, 0x3, 0x200000, 0xfffffffa) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={0x0, @generic={0x26, "ecd52f4457f1cba68e04cf83eb35"}, @qipcrtr={0x2a, 0x2, 0x3fff}, @in={0x2, 0x4e21, @empty}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='syzkaller0\x00', 0x7, 0x6, 0x7}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, 0x0) 1m12.141621647s ago: executing program 40 (id=4579): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000280)=@framed={{}, [@jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0x4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x10, 0xc4, &(0x7f0000000380)=""/196, 0x41000, 0x6e, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x7, 0x3}, 0x10, 0x273ef, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x5, 0x4, 0x2, 0x71bcbb5c8f35765f}], 0x10, 0x101}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000000c0), &(0x7f0000000a00)=r1}, 0x20) r2 = memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r2, 0x3, 0x200000, 0xfffffffa) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={0x0, @generic={0x26, "ecd52f4457f1cba68e04cf83eb35"}, @qipcrtr={0x2a, 0x2, 0x3fff}, @in={0x2, 0x4e21, @empty}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='syzkaller0\x00', 0x7, 0x6, 0x7}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, 0x0) 1m6.219598101s ago: executing program 5 (id=4593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="020000000028bd7000fbdbdf25044017804974adb94d1a1f5745a420dbc37215e3399f4b956df6fdfec059bf9a05752027486b19d5aab0fc6dddb9012bc0eb002fd4b0dc640b41ca1efa9029bc274ffdfd777a14b184bf"], 0x14}], 0x1, 0x0, 0x0, 0x20000042}, 0x20000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f007068795901000000050020"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af25, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "a7c1ed36"}]}}, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0xad, "0ef136719789e22b62dea53cfc47c7f4d7dcefc26a844dbb4f0d951a8083ecf712faff570717f1834c1656bbffcb1e465a722bf0f0c5cf02d634ce11f2f335ae4f535b6509819ca416da225aa5d5823875ed1fbe6a159f5c732ea4dc420bb48ff72eba75aed17bb576b1d6516dd567b5f3f918411e733d026f653df7ec919e2d5533b94f55f0e7a623c5adc719494a45c8febc01349fbcc341f659d9908089352590cf4d7a5083d438768232d6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff040000ea8000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r10, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000040000"], 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2cffe900130005002cbd70322a4f7d0000000000", @ANYRES32=r7, @ANYBLOB="12030000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x270140, 0x0) 1m2.829974712s ago: executing program 3 (id=4604): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="020000000028bd7000fbdbdf25044017804974adb94d1a1f5745a420dbc37215e3399f4b956df6fdfec059bf9a05752027486b19d5aab0fc6dddb9012bc0eb002fd4b0dc640b41ca1efa9029bc274ffdfd777a14b184bf"], 0x14}], 0x1, 0x0, 0x0, 0x20000042}, 0x20000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f007068795901000000050020"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af25, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "a7c1ed36"}]}}, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0xad, "0ef136719789e22b62dea53cfc47c7f4d7dcefc26a844dbb4f0d951a8083ecf712faff570717f1834c1656bbffcb1e465a722bf0f0c5cf02d634ce11f2f335ae4f535b6509819ca416da225aa5d5823875ed1fbe6a159f5c732ea4dc420bb48ff72eba75aed17bb576b1d6516dd567b5f3f918411e733d026f653df7ec919e2d5533b94f55f0e7a623c5adc719494a45c8febc01349fbcc341f659d9908089352590cf4d7a5083d438768232d6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x40, 0xd, 0x90, {0x90, 0x14, "b952843045b833e95f3eb5a238673575b6be051c3643b9497293c8a839335c9e81dd0934ad50d78724ddd198dea3275cadbd97ca942d48e289879f29b64671b0606cafb3d88a00ec97ace3b338f49d59c120d00bac06edee8a069a88dabff8eb2749fe9784f30bd8ee0f159676b7ef623397e99ad0f3378fab862bae39f6c3400e4b5f00a4265caa61abaeb56e2a"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="00031700000017035a9c51f6f11b6eb3ae9c2513483b13886a63b527864ccf91778fb3332c100ec698a56c18c593367d48fc4986922bb4e642c6648f669835b8b799613ed18c9157e8cd17d938a35bf831d5dd50fa49ebe581c3540990a79d24632fbb1a248a33b9"]}, &(0x7f0000000880)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="4009cd00000099d0158bfc590100000075d2c8925b0abc23a7a7a5fdd5aea7672523c81aefdb11ef2cb94b026ab747d774ddebef461053d920d210d948bd623b9567bb5d060f2409bb4756d240dbe3bff05bc3ef59b588fc1fab08e94d6b725129ceb1b10879c88f001c4ef9bf7872a117deefc4f7edf3c3f3feb34b2081f053d414020d5682829013376b3d1136f87e68849c166defc2720f666ec31689fb0b0090e4d5384efa6ad64121ac61e869721bff89d51f6be9d90370a4cd11c336d0f0a3a059aa22d82a7a9e5f5821cfa27f38c484"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0xcb}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0xc0, 0xa1, 0x4}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000840)={0xc0, 0xa2, 0x2f, "d34feef68cf8652ad6082fe2bf22d48ea6046ae8aa4270838da925a32123a94e6e59f96d4dfd24a1a9f7d4cc829be7"}}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff040000ea8000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000040000"], 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2cffe900130005002cbd70322a4f7d0000000000", @ANYRES32=r7, @ANYBLOB="12030000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x270140, 0x0) 1m2.600142799s ago: executing program 5 (id=4605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0xc1) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000040)={0x1000000}) fallocate(r3, 0x1, 0x0, 0x1000000) fallocate(r3, 0x3, 0x0, 0x1000000) fallocate(r3, 0x3, 0x0, 0x1000000) fallocate(r3, 0x1, 0x0, 0x1000000) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000080)}) r4 = gettid() rt_sigqueueinfo(r4, 0x23, &(0x7f0000001340)={0x3, 0x0, 0x7}) fallocate(r3, 0x1, 0x0, 0x1000000) 1m0.151525619s ago: executing program 5 (id=4610): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x128}}, 0x0) 1m0.033622397s ago: executing program 5 (id=4611): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f00000002c0)={0x317e00, 0xf8, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000000)='./proc_mnt\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000defadbdf2502000800080017f3f1798cd4938365769803406d1a1ebe3dda2819ad7bd9c037fae40ca305d982ab77d40cc609c20610fa24b771804426258a3cf17637466b8892", @ANYRES32, @ANYBLOB="08002600431700000800270001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 1m0.013463026s ago: executing program 3 (id=4612): r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x2}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b32, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81e8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000001300)={{r7}, r8, 0x4, @inherit={0x78, &(0x7f0000000280)=ANY=[]}, @subvolid=0x1ff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"cc0098e937b5c6443eae3c264907379d", 0x0, 0x0, {0x6, 0x4}, {0x27d}, 0x8000, [0x0, 0x6, 0x10, 0x100000000, 0x87, 0x5, 0x9, 0x80000001, 0x800, 0x80000000, 0x7, 0x8b, 0x2, 0x8, 0x0, 0x200]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000480)={"ee1cbb983186383693fbf40784133222", r8, r9, {0x5, 0xfffffff8}, {0x4, 0x1ff}, 0x4, [0x8, 0x9, 0xff, 0x8001, 0x8, 0xe7, 0x9, 0x4, 0x0, 0x7, 0x1, 0x50000000000000, 0x80000000, 0x8, 0x100000001, 0x2]}) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74a0, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 59.037433582s ago: executing program 5 (id=4613): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4e000000f440f358b8898f821f07039828c18b6b1254095874871a0ba4d20c505401df87565b6a7aaf6e7c01a8014d", @ANYRES16=r8, @ANYBLOB="17092dbd70000000000001000000050004008000000008000900feffffff08000a00000000000800180064010102050005000100000008001700", @ANYRES32=r3, @ANYBLOB="0500210001000000"], 0x4c}}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003) 58.895772901s ago: executing program 3 (id=4614): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e00060000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x5, 0x10000, &(0x7f00000005c0)=""/131, &(0x7f0000000680)=0x83) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x26) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='#', 0x1}, {&(0x7f0000000240)="659fcb93f755c4f98d42a02f", 0xc}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 56.099386209s ago: executing program 5 (id=4618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0x28) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x10000, 0x37, 0x8}, 0x18) execveat(r7, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), &(0x7f0000000500)={[&(0x7f00000004c0)='{}-\x00']}, 0x800) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 55.795242645s ago: executing program 41 (id=4618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0x28) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x10000, 0x37, 0x8}, 0x18) execveat(r7, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), &(0x7f0000000500)={[&(0x7f00000004c0)='{}-\x00']}, 0x800) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 55.069026505s ago: executing program 3 (id=4622): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f00000002c0)={0x317e00, 0xf8, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000000)='./proc_mnt\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000defadbdf2502000800080017f3f1798cd4938365769803406d1a1ebe3dda2819ad7bd9c037fae40ca305d982ab77d40cc609c20610fa24b771804426258a3cf17637466b8892", @ANYRES32, @ANYBLOB="08002600431700000800270001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 53.374252061s ago: executing program 3 (id=4625): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0xb00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote, {[@timestamp={0x44, 0x1c, 0x80, 0x0, 0x0, [0x2, 0xf2b4, 0x10001, 0x7, 0xc8, 0xcd03]}, @rr={0x7, 0xf, 0xd4, [@empty, @multicast2, @rand_addr=0x64010102]}]}}}}}}}, 0x0) 52.387032671s ago: executing program 4 (id=4626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x7c2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x751000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r9, 0x5}}, 0x48) writev(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r10, r8}}, 0x18) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x40}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 50.69239147s ago: executing program 3 (id=4627): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) gettid() setns(0xc9, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 49.729662809s ago: executing program 4 (id=4629): dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) tkill(0x0, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) tkill(0x0, 0x14) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 49.581156237s ago: executing program 42 (id=4627): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) gettid() setns(0xc9, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 48.369079653s ago: executing program 4 (id=4632): syz_open_dev$mtd(&(0x7f0000000300), 0x80, 0x2080) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x2, 0x5fe, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0x44}}}, &(0x7f00000004c0)) ioctl$UBLK_U_CMD_GET_DEV_INFO(r1, 0x80207502, &(0x7f0000000540)={0x0, 0xffff, 0x40, &(0x7f0000000500)=@ublk_ctrl_dev_info_new=@any_dev}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000b44000/0x4000)=nil, 0x4000, 0x8) 47.897611089s ago: executing program 4 (id=4633): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f00000002c0)={0x317e00, 0xf8, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000000)='./proc_mnt\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000defadbdf2502000800080017f3f1798cd4938365769803406d1a1ebe3dda2819ad7bd9c037fae40ca305d982ab77d40cc609c20610fa24b771804426258a3cf17637466b8892", @ANYRES32, @ANYBLOB="08002600431700000800270001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 47.540596705s ago: executing program 4 (id=4635): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000101c0)={&(0x7f0000010000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000010180)={&(0x7f0000010040)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0xfc, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "58302f1069751ffc8b3462edab9a44804400e2fa1becdba495f94bc7df679e62a996b6b53bd263e3b5a8f7fbf42ce55577a31ba696905d83ba0c454f59e0cc31bf2873ac838d8b8bfd896be1850ceb8fb570d490074be6f6201dc42e7a25131c16245f554e46d60fb04f95becb1f199308737da2c5d36dd88dd4875f3d1511be816bf59e5e6eca5e80cbb5c6170203625d8092c2ecaf376b3bda81e3bc0805ef68ae2daf7693440c1a32ffcbf27d3c7899634b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "a9069ccb4109432460"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$mtd(&(0x7f0000000500), 0x0, 0x2100) openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000010200)={0x0, 0x3}, &(0x7f0000010240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000010280)={0x9, 0x401, 0x800a, 0x501b, 0x8eea, 0x9, 0x9, 0xb, r1}, &(0x7f00000102c0)=0x20) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 46.016733437s ago: executing program 4 (id=4637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x7c2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x751000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r9, 0x5}}, 0x48) writev(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r10, r8}}, 0x18) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x40}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 45.78111635s ago: executing program 43 (id=4637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x7c2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x751000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r9, 0x5}}, 0x48) writev(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r10, r8}}, 0x18) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x40}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 37.227574166s ago: executing program 8 (id=4655): read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) madvise(&(0x7f00001ce000/0x1000)=nil, 0x1000, 0x66) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="020303220a0000002bbd7000fddbdf2504000006002b00000000000000000000000100fe8800000000000001000000000000000000000000000000000000000000000000000000000000000000000000430991100cf961f5de97be13a0f48272943cb68c847283b06eeae7e9dbf4e4ec0c201999e166208d4f271c6a141850"], 0x50}}, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0x80, 0x6, 0xffff, 0x8], 0x4, &(0x7f0000000100)=[{}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000f06010400000000000000000300010006000b000000000005000100070000009696deef02000000050001000700000006000b0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r4 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'ip_vti0\x00'}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f00040006700000306907864010100ac1414aa0000000000000000000000000000000100004e2100004e220000ed0000000000000000030000000000000001"], 0x0) 36.991456217s ago: executing program 8 (id=4656): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, r1) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) socket$igmp6(0xa, 0x3, 0x2) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x40001, 0x2000004, 0x8, 0x1, 0x0, 0x0, {0x0, 0xfffffffc}, 0x0, 0x1000}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010000000000fcffffff0e000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000029000000360000002b020000000000000502000505020021010a00000000000000000000000000009f41cbf4904fe8659a41752daa0f209da7e63fdc73c2955f83885df9067ab4e01e01a919581c4fbc7fb0722b6295ac9389"], 0x30}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000280)="1182810782284f66f8d75edc4db2311deca4283de9b10710aec2ed10060a9e502fe58b3d82efcf9fb5e0840a402212f89d080c6bc74bf1cdf3ccd0e7fb85196ba6dd7476dad1270693ff526f65090a136b8b434b3462b24738c1bbd9ddd6fa8cb1c9c81bf3692bf5dc6b4f4f", 0x6c}, {&(0x7f0000000980)="b2b8e7e9e7f3cea2985fecbc4190fc895f76c815229b748c522b49a25d40cf05acdccbf9b2b5471f9bcc4009c7cffdea0e8a3ff54d38abf10c0fbf4f80da60e03ed79f8580f9aeec9782161f5151a1ba5f11cc43013afad4798c54f22262d73df8021456497c2f6a12395efc5a62fbe5e8f24fed04ec1e044371bcff627130bbda484bcfc0242061618504e2aa967e514ce99fe75784ceeb2bb395aa5e8399f972a0f49c8df1373527", 0xa9}, {&(0x7f0000000a40)="915afc2e97c8bc6d3455e649f7dcd0cce8ee9ec594173c4f", 0x18}, {&(0x7f0000000a80)="d3da1fccde8d5f6f834426fc427df0c93a6e08e76dd76ce25a22e417a763e3d3659e130ea5edac", 0x27}, {&(0x7f0000000ac0)="be10b40a213fb1446b2e0004a50df42ab4717b32897056a9f302e15e1c98d5cd9367199ee034f3077ecf838dd48752500d7abb155e3be7fbae4a5d3453409fb76f44c34a0501272e09fe01f4b0e93fa2eedeaf43a058167a32ed23f9010f9be18389a2541d34b56150c03555c226d9dd09f5bfbc15506d681de876d36845295ee04e3fdc2a9dacef66fbe11d39744e", 0x8f}, {&(0x7f0000000b80)="4a11f6ca48d9e3d8f4078352269fe423507a3379aea8400a84535510978d52dd66c05af79d18603b467656b1661e9261635c1190204dcd17e2e41d8bf2c7880876b8423c65062bd877eece8d1be4606497303a1b34d4f5a45f3e71e583d85c298cd73cc88d3244e0f25733214f6ba5651f298c32395e7672ebf2", 0x7a}, {&(0x7f0000000c00)="6434e64e9ebb29505f06593e070e435e240f40affd21590f0c8a770c21812f9072d59fd3e1e9d101e7d44eb77e13edf3f82e82f196e685427bfb00b9c23d5d530b43b290f8acb7485fefc4d7dfcbab76f06bb6faa2adcc4ef2e5823c1cc3abc153c96c719523bfcc154e0d01c6524c854fa51e185a31a1a298b1bf45b6a36df10629d901f4244a38783070c3b11b2383d86617", 0x93}], 0x7, &(0x7f0000000d80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x196}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts={{0x40, 0x29, 0x37, {0x29, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0xf877}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8001}, @generic={0x8, 0xd, "62d7477fd6c32a3be81e896863"}]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0xaa95d225392ae9bf, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x9, [0x3, 0x4]}}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0xb, [0x180d, 0x6, 0x10001, 0x7, 0xfffffffffffff001]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x3, [0x3, 0x4]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf3e}}], 0x190}}, {{&(0x7f0000000f40)={0xa, 0x4e22, 0xb9f6, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000f80)="155b68dbd3620945bc2c5adf03451488e1bec17ede8160f1f5b51efdcfec799e1952f4f128978e12e326c5ee76f28ab771c6d57c376c09558ce7abb92e29965f6287032d202062aeb732be3a44294d867fab58350044bdc45e2ba4065350854adf04db084340557c0e659527574c2751c39e04a0820f279a967322d1e295fd64985a5de0ea0b4b05a7c10fbac0b839daf88fedb359c828d338a7765214ddd0e0fbef598c385684eac0985945b1d9b63d2fff7206a2aa99", 0xb7}, {&(0x7f0000001040)="8e45cb1a21f86a9778db88bc020dccf7d7c04be3e56b12e409de220f00b802e96288450c4df48ec3f423cbfe9a989b50adc3419dca16bbf71afbd99498529dd131f64a4d6813dae5d0bd3fac68064e11311f114b3128b2b8083429c6478c81d9f005a0560e81fa77e1804af3cf6df2bb076a831e9298b673849694c1484e5799c933e07c1b64b866ea1fb5af9c7a183e03ce3d", 0x93}, {&(0x7f0000001100)="27e444eb0478b99507879a22cb4369b72bcad3784532041c203520b475fcaa1b2a80bf0a796dada8dab8b329d2c17e10fca32a8143dcbaf10cdb542445c7ad7471fa31a45fc1ce764190e0982323e769ffb4e18a3013a200222e643984825514610d9581807a1e7429368987d9a23af82f40603460255e28cdb9825cba273cc3130e1c7dfbb6ecd64ff99dab98c143431eaa0afe1151e86abd6e7a67fcfd7b6511516e1863d5ccdcbec0b11bd419", 0xae}, {&(0x7f00000011c0)="8f61661e2f1e3940030ae7e45c6961cf8c1d2eb9f33a58cfcafef0f53cae181136ca0cab6abb0e6dda8e897df511f18c4c40f84795d7a108c809ac0716e8f4cc2c0a9d33e6a45742f0900c5941c70888bf5c3797f726cfe08cd95e94afbea50a8fc0174d0dbd76c262669e67dfcb4a75ec48b1f9a623f9d23f32efa1ef9ac36e1f71e8a1087f90cea0a7291b5d79f0d6d12061ed4d3147d9b795824edc260ffb752851c5c17086a9ffcb25c270aa671458e9e2cfedd8012bc734b88909cd34193d15d9c1d6f72dd9bf5ee0d301f4fe9734e1e34388c0f59bef8a64f1b88bd41d70ee078847bc94985eb45d63d19b3bd30c5e63c73a24211234c08f45", 0xfc}, {&(0x7f00000012c0)="556adda76fe8c08d75170562f58b56de9f6f960310b8f892ccce48d5020655d4f84768a6ebbc01064fa78b4ad4daa7c0fd1b14ed1bab23bdf7cf63d495cbea9fb581700cf6e22e73f1b68c4a4ad12da3ece628e332cc38412973e6db5ac254a2ed597d9be300fe74e011aceaaac5d7715d13c4e9de9599", 0x77}, {&(0x7f0000001340)="6707f57660c6c2576d93a4c91416b4d9aab50e33875137f2b505a9ea56d62a98d387a637c13157c1f0d6118ac84a85dd85d28ade8a4ef440612cca7e56780d432196682b27d531e8d12f14d30af9364b7baab43325f7b4d9478f466f7ed1e58ce830a25211f0a1c1b525bffe7accd0ef14d02c9e2cfdcf4f154dc856bdfd2478f7d7814b3b9bf0b4968e77693a464f766d45119be03f84ebeb5e218e5ce9c3fe9fdf043083861e00a4f7296ee0c64b4f2a03", 0xb2}, {&(0x7f0000001400)="68e314c5635cd8925000ec53230b181ec66a0719263e0416e12c72365fd11131fcf1249ad3e1c3beec33a2d26163f8712a334d4d471350057945335acb38c423242f0b88368f1d58ce3fdf02a12658dee9a8281f6f5499a4061ade3be5fc0767ed12034fb4287c6a1cdfbe86b1ccf728537e418fe9ec4d4198c7bba52dc86e3f4af1b3f988ce3859a8d75e3b1a81488495ddb458af3a87f418da73e2897634769dc2799acad638ccdc38683b1c994ff7931626c1e897c5004c718db6048d1b42e8c2c223a372f1455383", 0xca}, {&(0x7f0000001500)="ac52ae2873f7a1da0f39dc66fcef9db9472cb250f4da96657c4f6a660e842ef74fdecffa7c9ac4ad3519bc36a922df72e0f82e1aba00e3e77fe9637cb6d6b41cbc8812e7d9d11c4dab196c2aaeb44ab7f4a754f2d2c86be06162252815ed017b2caf", 0x62}], 0x8, &(0x7f0000001640)=[@hopopts={{0x28, 0x29, 0x36, {0x2c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @pad1, @pad1]}}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x5e, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0x48}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4000}, @generic={0x80, 0x57, "9bd67db2d1b1e7a71d6e820f469756f05cd36c08d082f99a1439a625c2b5248f6b0cae97ffef1c112da46e4fdc88ccad3aba8348e6e059b9e2a8a19e3644d3c744cb417ad7ffd6fa38f42f0d3f94eb4f81b6e21e4a5020"}, @pad1, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x1e8a112e}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x800, [0x6, 0xfffffffffffffff9, 0x101]}}, @generic={0x5, 0x2a, "74d584d3c3290b1cb3eaa1c3925281c5f2e9cfdc7025a3e6f9b5346ccba6e0bbe986e237ee1fe5a46916"}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x1, 0x10, 0x0, [@remote, @private1, @mcast2, @remote]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x1e8}}], 0x4, 0xc8040) 36.417014434s ago: executing program 8 (id=4657): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f00008f5000/0x3000)=nil, 0x3000, 0x100000c, 0x50, 0xffffffffffffffff, 0xa7e80000) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/225, 0xe1}], 0x1, 0x8000007, 0x20000000) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x7f, 0x0, 0x6, 0x9}, 0x6, [0x8, 0xc, 0x10000, 0x9, 0x8, 0x1, 0x8, 0xca4, 0x38, 0xce, 0xffffffff, 0x9, 0x9, 0x300, 0x4, 0x3, 0x781, 0x9, 0x2, 0x2, 0x2, 0xffff, 0x400, 0x0, 0x7, 0x3, 0x34, 0x9, 0x2, 0x3, 0x8, 0x546fdb5d, 0x5, 0xfedb, 0x6, 0x9, 0x4, 0x8ca3, 0x5, 0xf648, 0x9, 0xd, 0xdfc0, 0x0, 0x7, 0xef80, 0x8, 0x1, 0x7f, 0x6180, 0x4, 0x7a09, 0x5, 0x49, 0x9, 0x500, 0x81, 0x7, 0x5, 0x0, 0x1, 0x8, 0x3, 0x8000], [0x43d, 0x0, 0x8000, 0x40, 0x1, 0x0, 0xfffffff9, 0x1, 0x5, 0x10000, 0xe0b, 0x4, 0x7, 0x9, 0x7, 0x6, 0x0, 0x1dd, 0x6, 0x3, 0x7, 0x0, 0x5, 0x7, 0x8001, 0x7b, 0x2, 0x6, 0xfffffe00, 0x10001, 0x8, 0x5, 0x1ff, 0x1000, 0x7, 0xdb, 0x2, 0x4, 0xffffff80, 0x9, 0x4, 0x94, 0x1, 0x6, 0x0, 0x9, 0x200, 0x7, 0x2, 0x9, 0x7f, 0x3, 0x0, 0x80000000, 0x1, 0x3, 0x6ca9, 0x7, 0x100, 0x80, 0x2, 0xfffffffb, 0xffffffff, 0x1], [0x4, 0x7, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7, 0x1, 0x1, 0x9, 0x7, 0xfffffefd, 0x100, 0x1000, 0x9, 0x3, 0xfc, 0x8, 0x81, 0x50b8749f, 0xb, 0x0, 0xffd, 0x8, 0x80000000, 0xfff, 0x5, 0x9, 0x81, 0x3ff, 0x6, 0x5, 0x6, 0xc4, 0x3, 0x8, 0xe90e, 0xd, 0x6, 0x3, 0x9, 0x8, 0x10001, 0x10, 0x7, 0x0, 0x3, 0x3ff, 0x2, 0x3ff, 0x4, 0x80000001, 0x6, 0xfff, 0x80, 0x1, 0x6, 0x7ff, 0xc, 0x6, 0x2, 0x6, 0x3ff], [0x63f, 0x2, 0x2, 0xb, 0x2, 0xe8, 0x3, 0x4, 0x7, 0xb9, 0x7, 0x8, 0x8, 0x8001, 0xa000, 0x9, 0x9, 0x7, 0x1, 0xffff66b2, 0x101, 0x4, 0x8, 0xb603, 0x9, 0x7, 0x310, 0x0, 0x0, 0x9, 0x6, 0xbad, 0x1, 0x3, 0x80, 0x2, 0x8, 0x9, 0x4, 0xa, 0x1, 0x3, 0x75f, 0x9, 0x9, 0x0, 0x7, 0x3, 0x2, 0x1, 0x1000, 0xe, 0x1, 0x3, 0x2, 0x2, 0xfffffffe, 0x6, 0x9, 0x8, 0x6, 0x200, 0x9, 0x3bb]}, 0x45c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100", @ANYRES32=r3, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) 36.227642289s ago: executing program 8 (id=4658): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f00000002c0)={0x317e00, 0xf8, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000000)='./proc_mnt\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000defadbdf2502000800080017f3f1798cd4938365769803406d1a1ebe3dda2819ad7bd9c037fae40ca305d982ab77d40cc609c20610fa24b771804426258a3cf17637466b8892", @ANYRES32, @ANYBLOB="08002600431700000800270001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 35.869122047s ago: executing program 8 (id=4659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtclass={0x38, 0x28, 0x601, 0x9000000, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x71}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 35.088513158s ago: executing program 8 (id=4660): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040011) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x0) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES8=r3, @ANYRES64=r2, @ANYRES64=r1, @ANYRES16, @ANYBLOB="4bd11a63a253ff8b789c54ac1d015d0c70481f99b2d67da125ecb1e6290c832d01d837689b97fff2f6d7546f5e4aab0a904979129e0e68832b1ce6ae052c89a495340a5e08eb0920bf0a4d3ac0aa1ecadec91671bf9bc6804528223c46716edf192cbe15e36bc4e5c53cc4a5b1aec3a69cd954b4c8ad63b8a3286172e3212a8c5c9184df5dc4ed7206ee9a3aa767adea781079536a8164ec4fd2b9108db776be5f94decadcd1307dfa635be322a34f96a44da0c2bb244af43b6d", @ANYRES32=r2, @ANYRES64, @ANYRES8=r2, @ANYRES32=r4], 0x6) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@initdev}}, {{@in=@broadcast}, 0x0, @in=@remote}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) syz_emit_ethernet(0x132, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2e080040000124000000000011907800000000000000004424ec13ffffffff00000005ac1e0101000005947f00000100004f4d000000000000000000891729ac1414bb7f000001ac14142bac1414bbe0000002440c1b50000001000000000244040b438302831753ac141440ac1414bbac1414bb00000000ac14140e4444ef6364010102000003000200000007ac1414bb0000371effffffff00000003ac1414aa00000008ac1414bb000004dcffffffff0000000700000000001b59006490780200000003000000000000000002000000753904030405a024f0dd00000000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a14a1d8c690000000000000000"], 0x0) 34.745625774s ago: executing program 44 (id=4660): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040011) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x0) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES8=r3, @ANYRES64=r2, @ANYRES64=r1, @ANYRES16, @ANYBLOB="4bd11a63a253ff8b789c54ac1d015d0c70481f99b2d67da125ecb1e6290c832d01d837689b97fff2f6d7546f5e4aab0a904979129e0e68832b1ce6ae052c89a495340a5e08eb0920bf0a4d3ac0aa1ecadec91671bf9bc6804528223c46716edf192cbe15e36bc4e5c53cc4a5b1aec3a69cd954b4c8ad63b8a3286172e3212a8c5c9184df5dc4ed7206ee9a3aa767adea781079536a8164ec4fd2b9108db776be5f94decadcd1307dfa635be322a34f96a44da0c2bb244af43b6d", @ANYRES32=r2, @ANYRES64, @ANYRES8=r2, @ANYRES32=r4], 0x6) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@initdev}}, {{@in=@broadcast}, 0x0, @in=@remote}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) syz_emit_ethernet(0x132, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 17.655715487s ago: executing program 2 (id=4742): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x15, 0x3, 'wlc\x00', 0x22, 0x0, 0x6c}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 17.636181529s ago: executing program 2 (id=4743): mkdir(&(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0xb0) write$binfmt_register(r0, &(0x7f0000000540)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3ff, 0x3a, 'fs\x00I\xea\xc8\xb4<\xaa\x99\xef3v~\x1f\n\x81U\x00'/33, 0x3a, ']%\\*:\x04\x8a\xbe\x15^\xdb\xf1\xda5[L\xb2\x91\xda\xb6w\xbe\x8b]\xab\nKaL\xf9Y\x80z\x12,\xd4 `\xc2\x0e\xde\x80\xef\xe8\f\x17\xf4\xdc=\xd5\xdb\x8d\x0e$2z\x91N\xe7\x81\x04\xd3\x8f\xb7Q\xa1\xb6\x844\x8b?\xd1\x7fh\xb7\xce\xbf\x87\x9b\xaa\xddd\xe6M\x13\xe2\x9bl\xfds\xfa\x05\xa6\a\xf6|\xf5A\x83\xf8\x88u>\xaa\xa8\xb3x\xbc~\xd3a\xe3\x96L\xdf\xb9\xf1w\xe0[\x1fjT<\xf1b++4\xdf\xe9s\x85\x15,\f\xc4\xfb\xad\xbc\xeb', 0x3a, './sys/class/video4linux/video0/dev_debug'}, 0xf6) 17.439603523s ago: executing program 2 (id=4746): add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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"/472, 0x1d8, 0xffffffffffffffff) 17.261931551s ago: executing program 2 (id=4751): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x1b, &(0x7f00000000c0)=[{0x1b, '\x00', @st={0x4, [{0x70cf3a29631e7de, @svalue=0x8}, {0x1, @svalue=0xff}, {0x1, @uvalue=0x105}, {0x2, @svalue=0x1400}]}, 0x8000006}, {0x16, '\x00', @st={0x4, [{0x0, @svalue=0x3ff}, {0x2, @svalue=0x3}, {0x1, @uvalue=0x4}, {0x3, @svalue=0x7fffffffffffffff}]}, 0x27fffffc}]}) 17.116797791s ago: executing program 2 (id=4754): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x8}, {0xffbd, 0xff46, [0x0, 0xd]}}}}, 0x15) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}], 0x1, 0x0, 0x0, 0x10}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16.731584798s ago: executing program 2 (id=4758): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000000)="3f96", 0x2}], 0x1, 0x4, 0x2, 0x13) 5.861727522s ago: executing program 6 (id=4844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0xc83, r0}, 0x38) 5.500477755s ago: executing program 6 (id=4849): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000640)=0x1c) prctl$PR_SET_PDEATHSIG(0x1, 0x1a) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 4.658924685s ago: executing program 1 (id=4859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.566041836s ago: executing program 1 (id=4862): r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.381424753s ago: executing program 1 (id=4864): r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3, 0xed6, 0x5, 0x3, 0x5, 0x8003, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x9, 0x3, 0x5, 0x6, 0x8, 0x2, 0x4, 0x2}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 4.284457121s ago: executing program 1 (id=4866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x1, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfd, 0xfc, 0x9}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x7, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x9000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0x7000, 0x0, 0xd, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0x4, 0xd, 0x4, 0x6, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0xb, 0x80, 0x87}, {0xdddd0000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x7, 0x5, 0x1, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x1}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xff}, {0xfd, 0x9, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xef, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0x40, 0x8d, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x9, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x3, 0x5, '\x00', 0x10}, {0x39, 0x5, 0x5, '\x00', 0x8}, {0x9, 0x2, 0x0, '\x00', 0x8}, {0x5, 0x7, 0x1, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x83}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 4.211380412s ago: executing program 0 (id=4868): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000600)={[0xfffffffffffffffc, 0xf3, 0x1, 0x1, 0x1, 0xfffffffffffffffe, 0x1ff, 0x8, 0x4, 0x7, 0x2, 0x3, 0x2, 0x2, 0x2, 0x7fff], 0x30000, 0x812}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.142113591s ago: executing program 0 (id=4869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) 4.107439795s ago: executing program 0 (id=4870): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=5,size=6']) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'wlan1\x00', @multicast}) r8 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'M', 0x3a, '\\', 0x3a, './proc_mnt'}, 0x2c) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x5, "a8dfa6fcc54700000000aed10000df000000004000", 0x3, 0x7ffffff8, 0x4, 0x8000, 0x4050805, 0xa}) 3.452883817s ago: executing program 1 (id=4872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.443379112s ago: executing program 6 (id=4873): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, r4}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) 3.115687908s ago: executing program 1 (id=4875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x1, 0x2794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x7, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r6, 0x0, 0x0, 0x24008001) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000) setresuid(0x0, 0x0, 0xee01) getgid() setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "a2290000c650f776", "43bcecdd21f55be0266a460d84605c030802ac0b38baa9d317c79977994ab3fe", "2b710100"}, 0x38) 3.114440675s ago: executing program 7 (id=4876): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) 3.107273235s ago: executing program 0 (id=4877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c75, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.769620084s ago: executing program 7 (id=4878): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x6, &(0x7f00000000c0)) 2.531655301s ago: executing program 7 (id=4879): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)="41434d33740881", 0x7) 2.37314559s ago: executing program 6 (id=4880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000680)='#', 0x1}], 0x1}}], 0x1, 0x400c001) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) 2.372757806s ago: executing program 7 (id=4881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000002c0)={0x3, @pix_mp={0x120000, 0x6, 0x3432564f, 0x5, 0x5, [{0x3d, 0x3}, {0x9, 0x8ac}, {0xfffffff9}, {0xddb, 0x802}, {0xffff, 0x2}, {0x4, 0x2}, {0x0, 0x200}, {0x0, 0xfffffffe}], 0x8, 0x5, 0x4, 0x2, 0x5}}) 2.227840141s ago: executing program 0 (id=4882): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x401, 0x9ed3e73c04505f01, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r4], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 2.199707315s ago: executing program 6 (id=4883): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aac000000060a010400000000000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c00030000000000000000b9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0) listen(0xffffffffffffffff, 0x3) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 2.091775402s ago: executing program 7 (id=4884): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 157.55788ms ago: executing program 45 (id=4758): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000000)="3f96", 0x2}], 0x1, 0x4, 0x2, 0x13) 147.455311ms ago: executing program 6 (id=4886): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) 146.736326ms ago: executing program 7 (id=4887): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r0, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=4888): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) kernel console output (not intermixed with test programs): 1334.675786][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1334.675805][ T44] usb 6-1: config 1 has no interface number 0 [ 1334.675836][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.696907][ T44] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1334.699070][T21809] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1334.737094][T13931] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1334.739148][T13931] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.739226][T13931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.764377][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1334.764654][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1334.764840][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1334.772390][T13931] usb 10-1: selecting invalid altsetting 1 [ 1334.772558][T13931] dvb_ttusb_budget: ttusb_init_controller: error [ 1334.772568][T13931] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1334.854872][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1334.855091][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1334.855289][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1334.927485][T21801] lo speed is unknown, defaulting to 1000 [ 1335.025190][T13931] DVB: Unable to find symbol stv0299_attach() [ 1335.026188][ T30] audit: type=1400 audit(1788196172.450:4177): avc: denied { map } for pid=21785 comm="syz.5.4359" path="socket:[80655]" dev="sockfs" ino=80655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1335.032246][ T44] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 1335.032941][ T44] snd_usb_pod 6-1:1.1: invalid control EP [ 1335.032956][ T44] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1335.033109][ T44] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1335.034412][T13931] DVB: Unable to find symbol tda8083_attach() [ 1335.034422][T13931] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1335.036759][ T44] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1335.383270][T21819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.420524][T21819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.440487][T21819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1335.492487][T15905] usb 6-1: USB disconnect, device number 83 [ 1335.738123][ T44] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1335.899280][ T44] usb 5-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 1335.900423][ T44] usb 5-1: config 9 has an invalid interface number: 245 but max is 0 [ 1335.900466][ T44] usb 5-1: config 9 has no interface number 0 [ 1335.903026][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.903054][ T44] usb 5-1: Product: syz [ 1335.903080][ T44] usb 5-1: Manufacturer: syz [ 1335.903097][ T44] usb 5-1: SerialNumber: syz [ 1336.136936][T21823] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1336.168745][ T44] uvcvideo 5-1:9.245: Found UVC 0.06 device syz (8086:1155) [ 1336.178545][ T44] uvcvideo 5-1:9.245: No valid video chain found. [ 1336.188827][ T44] usb 5-1: USB disconnect, device number 51 [ 1337.442399][T21838] ip_tables: iptables: counters copy to user failed while replacing table [ 1338.058367][T15905] usb 10-1: USB disconnect, device number 29 [ 1338.163265][T21845] xt_hashlimit: size too large, truncated to 1048576 [ 1338.324117][T21848] EXT4-fs error: 13 callbacks suppressed [ 1338.324154][T21848] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:15: iget: checksum invalid [ 1338.723556][T21852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4379'. [ 1338.823544][T21855] netlink: 'syz.3.4380': attribute type 9 has an invalid length. [ 1338.823584][T21855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1338.841057][T21855] netlink: 'syz.3.4380': attribute type 9 has an invalid length. [ 1338.841077][T21855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1338.861883][ T6826] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.861949][ T6826] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.861976][ T6826] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.862002][ T6826] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.926949][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1339.927232][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1339.928431][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1340.002025][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 1340.002091][T21865] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1340.003046][T21865] bridge0: entered allmulticast mode [ 1340.003871][T21865] veth0: left allmulticast mode [ 1340.003887][T21865] veth0: left promiscuous mode [ 1340.004037][T21865] bridge0: port 3(veth0) entered disabled state [ 1340.137374][T21865] bridge_slave_1: left allmulticast mode [ 1340.137413][T21865] bridge_slave_1: left promiscuous mode [ 1340.137585][T21865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.139644][T21865] bridge_slave_0: left allmulticast mode [ 1340.139672][T21865] bridge_slave_0: left promiscuous mode [ 1340.139825][T21865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.148656][ T30] audit: type=1400 audit(1788196177.099:4178): avc: denied { listen } for pid=21861 comm="syz.3.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1340.724923][T21877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1342.219939][ T44] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1342.724555][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 1342.914630][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1342.914689][ T44] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1343.016704][T21897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4392'. [ 1343.139012][ T44] usb 6-1: config 100 has an invalid interface number: 173 but max is 0 [ 1343.139052][ T44] usb 6-1: config 100 has no interface number 0 [ 1343.139104][ T44] usb 6-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 1343.139130][ T44] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1343.139153][ T44] usb 6-1: config 100 interface 173 has no altsetting 0 [ 1343.146725][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1343.146962][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1343.147076][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1343.411932][ T44] usb 6-1: string descriptor 0 read error: -22 [ 1343.412043][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.465832][T21887] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1343.483242][ T44] metro_usb 6-1:100.173: required endpoints missing [ 1343.540697][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1343.541363][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1343.541550][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1343.792393][ T5703] usb 6-1: USB disconnect, device number 84 [ 1343.922720][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1343.932017][T21920] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1343.946729][T21921] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1343.961974][T21922] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1345.053535][T21940] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4404'. [ 1345.651243][T21947] netlink: 'syz.5.4405': attribute type 2 has an invalid length. [ 1345.651307][T21947] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4405'. [ 1345.747622][ T30] audit: type=1400 audit(1788196182.479:4179): avc: denied { mounton } for pid=21946 comm="syz.4.4406" path="/myproc" dev="autofs" ino=81019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1346.601796][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1346.603197][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1346.645696][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1346.798371][T21956] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1346.943245][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1346.943279][T21964] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1346.972871][T21965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1347.112291][T21967] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1347.570286][T21969] lo speed is unknown, defaulting to 1000 [ 1349.383783][T13931] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1349.537872][ T44] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1349.538033][T13931] usb 10-1: Using ep0 maxpacket: 16 [ 1349.538937][T13931] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1349.539878][T13931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.539903][T13931] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1349.539934][T13931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.545477][T16063] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1349.562640][T13931] usb 10-1: config 0 descriptor?? [ 1349.637302][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1349.637778][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1349.639768][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1349.662707][ T30] audit: type=1400 audit(1788196186.137:4180): avc: denied { ioctl } for pid=21998 comm="syz.3.4422" path="socket:[81175]" dev="sockfs" ino=81175 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1349.690206][T22004] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:13: iget: checksum invalid [ 1349.712725][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1349.712840][ T44] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1349.715669][ T44] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 1349.715692][ T44] usb 5-1: config 100 has no interface number 0 [ 1349.715722][ T44] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1349.715746][ T44] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1349.715784][ T44] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1349.715802][ T44] usb 5-1: config 100 interface 173 has no altsetting 0 [ 1349.722346][ T44] usb 5-1: string descriptor 0 read error: -22 [ 1349.722460][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.735764][T21994] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1349.753441][ T44] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 1349.786146][ T44] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1349.836258][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1349.840486][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1349.840716][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1349.890897][T22002] ima: policy update failed [ 1349.891018][ T30] audit: type=1802 audit(1788196186.352:4181): pid=22002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.4423" res=0 errno=0 [ 1349.927142][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1349.927500][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1349.927641][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1349.982568][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4426'. [ 1349.992217][T22012] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1350.000341][T22010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4425'. [ 1350.014003][T13931] usbhid 10-1:0.0: can't add hid device: -71 [ 1350.014112][T13931] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1350.024544][T13931] usb 10-1: USB disconnect, device number 30 [ 1350.047046][T21994] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 1350.058272][ T5703] usb 5-1: USB disconnect, device number 52 [ 1350.073155][ T5703] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1350.084095][ T5703] metro_usb 5-1:100.173: device disconnected [ 1350.585367][T13931] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1350.750805][T13931] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1350.751696][T13931] usb 6-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 1350.751732][T13931] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1350.751754][T13931] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1350.751772][T13931] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1350.751797][T13931] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1350.751816][T13931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 112, changing to 10 [ 1350.751837][T13931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 24931, setting to 1024 [ 1350.751856][T13931] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1350.753111][T13931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1350.753129][T13931] usb 6-1: Product: syz [ 1350.753141][T13931] usb 6-1: Manufacturer: syz [ 1350.889888][T22022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1350.890031][T22022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1350.890145][T22022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1350.890223][T22022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1350.896037][T13931] sisusb 6-1:1.0: Invalid USB2VGA device [ 1350.896058][T13931] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 1351.329295][T22040] netlink: 'syz.9.4433': attribute type 1 has an invalid length. [ 1351.400293][T22040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1352.026631][T13931] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1352.122815][T22045] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1352.297268][T13931] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1352.303969][T13931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.304019][T13931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.320209][T22022] lo speed is unknown, defaulting to 1000 [ 1352.387544][T13931] usb 5-1: selecting invalid altsetting 1 [ 1352.387667][T13931] dvb_ttusb_budget: ttusb_init_controller: error [ 1352.387678][T13931] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1352.419136][T13931] DVB: Unable to find symbol stv0299_attach() [ 1352.427490][T13931] DVB: Unable to find symbol tda8083_attach() [ 1352.427511][T13931] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1352.444965][ T30] audit: type=1400 audit(1788196188.737:4182): avc: denied { ioctl } for pid=22053 comm="syz.3.4437" path="socket:[81281]" dev="sockfs" ino=81281 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1352.556574][ T30] audit: type=1400 audit(1788196188.850:4183): avc: denied { write } for pid=22053 comm="syz.3.4437" path="socket:[81281]" dev="sockfs" ino=81281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1352.581251][T22064] netlink: 'syz.0.4438': attribute type 2 has an invalid length. [ 1352.581275][T22064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4438'. [ 1352.866931][T22073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4441'. [ 1352.866982][T22073] netlink: 'syz.0.4441': attribute type 7 has an invalid length. [ 1352.867006][T22073] netlink: 'syz.0.4441': attribute type 8 has an invalid length. [ 1352.867020][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4441'. [ 1352.936798][T22077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.947864][T22077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.969903][T22077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1353.332059][T16961] usb 6-1: USB disconnect, device number 85 [ 1354.574241][T21048] usb 5-1: USB disconnect, device number 53 [ 1354.854520][T22109] xt_hashlimit: size too large, truncated to 1048576 [ 1355.211804][T22115] EXT4-fs error: 32 callbacks suppressed [ 1355.211853][T22115] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1356.464202][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1356.493533][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1356.511973][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1357.267040][T22128] netlink: 'syz.3.4456': attribute type 2 has an invalid length. [ 1357.267103][T22128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1357.675451][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1357.682266][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.773336][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1359.784629][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1359.795791][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1359.854682][T22138] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1359.856462][T22140] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1359.885209][T22142] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:0: iget: checksum invalid [ 1359.983680][T22149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.073185][T22149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.091192][T22149] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4460'. [ 1360.156499][T22151] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 1360.156934][ T30] audit: type=1400 audit(1788196195.960:4184): avc: denied { relabelfrom } for pid=22146 comm="syz.4.4459" name="UDPv6" dev="sockfs" ino=81416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1360.156973][ T30] audit: type=1400 audit(1788196195.960:4185): avc: denied { relabelto } for pid=22146 comm="syz.4.4459" name="UDPv6" dev="sockfs" ino=81416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 1360.217595][T16961] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1360.366032][T16961] usb 10-1: device descriptor read/64, error -71 [ 1360.622578][T16961] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1360.728343][T21048] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1360.782900][T16961] usb 10-1: device descriptor read/64, error -71 [ 1360.892095][T21048] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1360.893075][T21048] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 1360.893097][T21048] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.893113][T21048] usb 5-1: config 4 has no interface number 0 [ 1360.893140][T21048] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1360.894769][T21048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.894788][T21048] usb 5-1: Product: syz [ 1360.894801][T21048] usb 5-1: Manufacturer: syz [ 1360.894814][T21048] usb 5-1: SerialNumber: syz [ 1360.915969][T16961] usb usb10-port1: attempt power cycle [ 1361.110877][ T25] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1361.300368][T16961] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1361.302166][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 1361.306810][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1361.306837][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1361.306891][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.399107][T21048] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1361.748761][T20836] EXT4-fs error: 1 callbacks suppressed [ 1361.748842][T20836] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1361.749090][T20836] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1361.749306][T20836] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1361.947898][T21048] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1361.955604][T21048] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1361.955670][T21048] usb 5-1: media controller created [ 1361.974067][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1361.980987][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1361.987657][T16961] usb 10-1: device descriptor read/8, error -71 [ 1361.999420][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.011481][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.012759][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.013391][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.018369][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.034359][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.039729][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.040876][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.051099][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.051638][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.052782][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.060716][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.064984][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.072187][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.081524][T22158] dib0700: tx buffer length is larger than 4. Not supported. [ 1362.089818][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.090786][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.092698][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.094517][ T25] iforce 6-1:1.0: usb_submit_urb failed: -71 [ 1362.094556][ T25] input input66: Timeout waiting for response from device. [ 1362.098188][T21048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1362.161045][ T25] usb 6-1: USB disconnect, device number 86 [ 1362.252053][T22172] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:6: iget: checksum invalid [ 1362.264627][T21048] DVB: Unable to find symbol dib7000p_attach() [ 1362.264650][T21048] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1362.279049][T22174] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:0: iget: checksum invalid [ 1362.285145][T21048] rc_core: Couldn't load IR keymap rc-dib0700-rc5 [ 1362.285162][T21048] Registered IR keymap rc-empty [ 1362.285345][T21048] dvb-usb: could not initialize remote control. [ 1362.285352][T21048] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1362.323038][T21048] usb 5-1: USB disconnect, device number 54 [ 1362.503163][T22181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4468'. [ 1363.263677][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1363.283342][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1363.283519][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1363.422521][T21048] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1363.477920][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1363.478129][T20839] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1364.318189][T22212] 9p: Bad value for 'wfdno' [ 1364.923167][T22218] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4479'. [ 1365.497108][T22222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.507143][T22222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.527275][T22222] netlink: 'syz.3.4481': attribute type 1 has an invalid length. [ 1365.539702][T21048] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1365.621276][T22222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1365.678575][T21048] usb 6-1: device descriptor read/64, error -71 [ 1365.776452][T22224] veth9: entered allmulticast mode [ 1365.781743][T22224] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1365.956882][T21048] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1366.095453][T21048] usb 6-1: device descriptor read/64, error -71 [ 1366.224056][T21048] usb usb6-port1: attempt power cycle [ 1366.587162][T21048] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1366.613083][T21048] usb 6-1: device descriptor read/8, error -71 [ 1366.876208][T21048] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1366.898025][T21048] usb 6-1: device descriptor read/8, error -71 [ 1367.016058][T21048] usb usb6-port1: unable to enumerate USB device [ 1371.108262][ T4971] EXT4-fs error: 7 callbacks suppressed [ 1371.108549][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1371.109057][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1371.109191][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1382.253545][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1382.253845][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1382.253975][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1382.287349][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1383.268782][ T30] audit: type=1400 audit(1788196217.243:4186): avc: denied { mounton } for pid=22236 comm="syz.9.4484" path="/268/file0" dev="tmpfs" ino=1489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1383.268843][ T30] audit: type=1400 audit(1788196217.579:4187): avc: denied { read } for pid=22245 comm="syz.0.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1383.484049][T22258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.494677][T22258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.302157][T22268] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1385.351135][T22274] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:6: iget: checksum invalid [ 1385.469665][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1385.471644][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1385.471771][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1387.709972][T22298] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4499'. [ 1388.649777][T22304] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:0: iget: checksum invalid [ 1388.686364][T22305] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:0: iget: checksum invalid [ 1388.703822][T22306] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:0: iget: checksum invalid [ 1388.721232][T22307] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:0: iget: checksum invalid [ 1388.769749][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1388.780996][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1388.796841][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1389.156909][T22314] lo speed is unknown, defaulting to 1000 [ 1389.409172][T22319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.409710][T22319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.162082][T22327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.162403][T22327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.839290][T22333] FAULT_INJECTION: forcing a failure. [ 1390.839290][T22333] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.881986][T22333] CPU: 0 UID: 0 PID: 22333 Comm: syz.4.4509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.882024][T22333] Tainted: [L]=SOFTLOCKUP [ 1390.882033][T22333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1390.882045][T22333] Call Trace: [ 1390.882053][T22333] [ 1390.882063][T22333] dump_stack_lvl+0x100/0x190 [ 1390.882098][T22333] should_fail_ex.cold+0x5/0xa [ 1390.882129][T22333] should_failslab+0xc2/0x120 [ 1390.882154][T22333] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1390.882180][T22333] ? __d_alloc+0x35/0xa50 [ 1390.882209][T22333] __d_alloc+0x35/0xa50 [ 1390.882231][T22333] ? do_raw_spin_lock+0x128/0x260 [ 1390.882259][T22333] d_alloc+0x4a/0x1e0 [ 1390.882285][T22333] d_alloc_name+0x83/0xb0 [ 1390.882310][T22333] ? __pfx_d_alloc_name+0x10/0x10 [ 1390.882332][T22333] ? fast_dput+0x168/0x6f0 [ 1390.882360][T22333] ? dput.part.0+0x4f/0x240 [ 1390.882390][T22333] proc_setup_thread_self+0x3f/0x1e0 [ 1390.882418][T22333] proc_fill_super+0x5d4/0x870 [ 1390.882448][T22333] ? __pfx_proc_fill_super+0x10/0x10 [ 1390.882476][T22333] get_tree_nodev+0xdd/0x190 [ 1390.882497][T22333] vfs_get_tree+0x92/0x320 [ 1390.882522][T22333] path_mount+0x7d0/0x24c0 [ 1390.882554][T22333] ? __pfx_path_mount+0x10/0x10 [ 1390.882578][T22333] ? lockdep_hardirqs_on+0x7d/0x110 [ 1390.882603][T22333] ? putname+0xb1/0x110 [ 1390.882624][T22333] ? kmem_cache_free+0x127/0x6c0 [ 1390.882660][T22333] ? __x64_sys_mount+0x293/0x310 [ 1390.882687][T22333] __x64_sys_mount+0x293/0x310 [ 1390.882720][T22333] ? __pfx___x64_sys_mount+0x10/0x10 [ 1390.882755][T22333] do_syscall_64+0x123/0x790 [ 1390.882780][T22333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.882803][T22333] RIP: 0033:0x7f1e6079e159 [ 1390.882821][T22333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.882840][T22333] RSP: 002b:00007f1e5e9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1390.882860][T22333] RAX: ffffffffffffffda RBX: 00007f1e60a25fa0 RCX: 00007f1e6079e159 [ 1390.882873][T22333] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 1390.882885][T22333] RBP: 00007f1e60835024 R08: 0000000000000000 R09: 0000000000000000 [ 1390.882896][T22333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.882908][T22333] R13: 00007f1e60a26038 R14: 00007f1e60a25fa0 R15: 00007ffdeaa9cb48 [ 1390.882934][T22333] [ 1391.106583][T22333] proc_fill_super: can't allocate /proc/thread-self [ 1391.621419][T22340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1391.722607][T16961] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1391.879829][T16961] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1391.881505][T16961] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.881549][T16961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.076742][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1392.077084][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1392.077207][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1392.157845][T16961] usb 6-1: selecting invalid altsetting 1 [ 1392.157949][T16961] dvb_ttusb_budget: ttusb_init_controller: error [ 1392.157961][T16961] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1392.762814][T16961] DVB: Unable to find symbol stv0299_attach() [ 1392.779507][T16961] DVB: Unable to find symbol tda8083_attach() [ 1392.779542][T16961] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1393.160632][ T25] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1393.202057][T22372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4519'. [ 1393.331789][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 1393.342914][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1393.342968][ T25] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1393.429800][ T25] usb 10-1: config 100 has an invalid interface number: 173 but max is 0 [ 1393.430113][ T25] usb 10-1: config 100 has no interface number 0 [ 1393.439139][ T25] usb 10-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 1393.439159][ T25] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1393.439173][ T25] usb 10-1: config 100 interface 173 has no altsetting 0 [ 1393.591241][ T25] usb 10-1: string descriptor 0 read error: -22 [ 1393.591363][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.630306][T22360] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1393.952514][ T25] metro_usb 10-1:100.173: required endpoints missing [ 1394.715165][ T25] usb 10-1: USB disconnect, device number 35 [ 1394.930078][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1394.940433][T22393] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1394.958567][T22395] EXT4-fs error: 13 callbacks suppressed [ 1394.965229][T22395] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1394.981721][T22396] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1395.095644][ T25] usb 6-1: USB disconnect, device number 91 [ 1395.290881][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1395.322606][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1395.323499][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1395.391058][T22402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1396.353779][T22413] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20129] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22413] [ 1396.775643][T22415] 9p: p9: multiple sources not supported [ 1396.783293][ T30] audit: type=1400 audit(1788196230.218:4188): avc: denied { setopt } for pid=22411 comm="syz.0.4531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1396.934468][T22416] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4530'. [ 1398.529268][T21048] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1398.533287][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1398.533557][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1398.533676][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1398.561093][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1398.561283][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1398.583360][T21048] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1398.763988][T22441] udevd[22441]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1398.800889][T22443] netlink: 'syz.5.4539': attribute type 2 has an invalid length. [ 1398.801016][T22443] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1400.084710][ T30] audit: type=1400 audit(1788196233.306:4189): avc: denied { ioctl } for pid=22447 comm="syz.0.4542" path="socket:[82847]" dev="sockfs" ino=82847 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1400.295793][T22458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1400.473112][T22457] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4545'. [ 1400.615178][T22455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.617217][T22455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.635708][T22450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4544'. [ 1402.552264][T22479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4551'. [ 1402.989826][ T4971] EXT4-fs error: 4 callbacks suppressed [ 1402.996212][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1403.009587][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1403.023689][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1404.118302][ T30] audit: type=1400 audit(1788196237.066:4190): avc: denied { execmod } for pid=22504 comm="syz.9.4562" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=83203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1405.849862][T22529] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4568'. [ 1406.281858][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1406.285590][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1406.293020][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1406.542865][T22542] FAULT_INJECTION: forcing a failure. [ 1406.542865][T22542] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.542899][T22542] CPU: 0 UID: 0 PID: 22542 Comm: syz.4.4575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.542918][T22542] Tainted: [L]=SOFTLOCKUP [ 1406.542922][T22542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1406.542930][T22542] Call Trace: [ 1406.542934][T22542] [ 1406.542940][T22542] dump_stack_lvl+0x100/0x190 [ 1406.542962][T22542] should_fail_ex.cold+0x5/0xa [ 1406.542979][T22542] should_failslab+0xc2/0x120 [ 1406.542996][T22542] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1406.543011][T22542] ? __kthread_create_on_node+0x186/0x3f0 [ 1406.543028][T22542] kvasprintf+0xbc/0x150 [ 1406.543046][T22542] ? __pfx_kvasprintf+0x10/0x10 [ 1406.543063][T22542] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1406.543079][T22542] ? __kthread_create_on_node+0xce/0x3f0 [ 1406.543095][T22542] ? __pfx_rescuer_thread+0x10/0x10 [ 1406.543111][T22542] __kthread_create_on_node+0x186/0x3f0 [ 1406.543125][T22542] ? vsnprintf+0x4c5/0x1300 [ 1406.543137][T22542] ? __pfx___kthread_create_on_node+0x10/0x10 [ 1406.543158][T22542] ? __pfx_rescuer_thread+0x10/0x10 [ 1406.543180][T22542] kthread_create_on_node+0xc7/0x100 [ 1406.543195][T22542] ? __pfx_kthread_create_on_node+0x10/0x10 [ 1406.543209][T22542] ? __pfx_scnprintf+0x10/0x10 [ 1406.543224][T22542] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 1406.543238][T22542] ? init_rescuer+0x19f/0x550 [ 1406.543257][T22542] init_rescuer+0x321/0x550 [ 1406.543273][T22542] ? __pfx_init_rescuer+0x10/0x10 [ 1406.543289][T22542] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1406.543312][T22542] __alloc_workqueue+0xe82/0x1950 [ 1406.543334][T22542] alloc_workqueue_noprof+0xc7/0x130 [ 1406.543354][T22542] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1406.543378][T22542] ? __pfx___debug_object_init+0x10/0x10 [ 1406.543400][T22542] nci_register_device+0x21e/0xb80 [ 1406.543427][T22542] ? __pfx_nci_register_device+0x10/0x10 [ 1406.543455][T22542] ? lockdep_init_map_type+0x5c/0x250 [ 1406.543479][T22542] virtual_ncidev_open+0x141/0x220 [ 1406.543501][T22542] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1406.543519][T22542] misc_open+0x26d/0x450 [ 1406.543546][T22542] ? __pfx_misc_open+0x10/0x10 [ 1406.543571][T22542] chrdev_open+0x234/0x6a0 [ 1406.543594][T22542] ? __pfx_chrdev_open+0x10/0x10 [ 1406.543616][T22542] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1406.543647][T22542] do_dentry_open+0x6ab/0x14d0 [ 1406.543664][T22542] ? __pfx_chrdev_open+0x10/0x10 [ 1406.543689][T22542] vfs_open+0x82/0x3f0 [ 1406.543711][T22542] path_openat+0x19fa/0x2440 [ 1406.543727][T22542] ? __pfx_path_openat+0x10/0x10 [ 1406.543744][T22542] do_file_open+0x20e/0x430 [ 1406.543758][T22542] ? __pfx_do_file_open+0x10/0x10 [ 1406.543781][T22542] ? _raw_spin_unlock+0x28/0x50 [ 1406.543798][T22542] ? alloc_fd+0x471/0x7a0 [ 1406.543816][T22542] do_sys_openat2+0x10f/0x1e0 [ 1406.543830][T22542] ? __pfx_do_sys_openat2+0x10/0x10 [ 1406.543849][T22542] __x64_sys_openat+0x12d/0x210 [ 1406.543864][T22542] ? __pfx___x64_sys_openat+0x10/0x10 [ 1406.543885][T22542] do_syscall_64+0x123/0x790 [ 1406.543899][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.543911][T22542] RIP: 0033:0x7f1e6079e159 [ 1406.543922][T22542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.543933][T22542] RSP: 002b:00007f1e5e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1406.543944][T22542] RAX: ffffffffffffffda RBX: 00007f1e60a25fa0 RCX: 00007f1e6079e159 [ 1406.543952][T22542] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1406.543959][T22542] RBP: 00007f1e60835024 R08: 0000000000000000 R09: 0000000000000000 [ 1406.543965][T22542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.543971][T22542] R13: 00007f1e60a26038 R14: 00007f1e60a25fa0 R15: 00007ffdeaa9cb48 [ 1406.543986][T22542] [ 1406.655143][T22542] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 1406.801170][T12571] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1407.284456][T22549] lo speed is unknown, defaulting to 1000 [ 1407.384439][T12571] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1407.395736][T12571] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1407.406209][T12571] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1407.415968][T12571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.532879][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1407.533114][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1407.533271][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1407.611453][T22553] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.611499][T22553] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.787942][T22553] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.787985][T22553] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.209202][T22559] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1408.705028][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1408.727905][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1408.735432][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1408.744394][T12571] gud 6-1:1.0: Failed to add properties (error=-71) [ 1408.744427][T12571] gud 6-1:1.0: probe with driver gud failed with error -71 [ 1408.744984][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1408.747883][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1408.827669][T22563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1408.851325][T22564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1408.868767][T12571] usb 6-1: USB disconnect, device number 92 [ 1408.964734][T22553] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.964773][T22553] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.030949][T22565] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1409.032696][T22566] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1409.181796][T22571] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1409.200869][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.201193][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.223555][T22570] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1409.318852][T22573] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1409.339515][T22574] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1409.356238][T22553] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.356297][T22553] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.411444][T22568] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1409.425661][T22576] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:15: iget: checksum invalid [ 1409.442098][T22577] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:15: iget: checksum invalid [ 1409.499760][T22561] lo speed is unknown, defaulting to 1000 [ 1410.278081][T22584] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4584'. [ 1411.322581][T16063] Bluetooth: hci2: command tx timeout [ 1411.682712][T22592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.683035][T22592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.683295][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1412.225020][T22592] lo speed is unknown, defaulting to 1000 [ 1412.243494][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1412.957734][T22606] netlink: 'syz.5.4588': attribute type 2 has an invalid length. [ 1412.957799][T22606] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4588'. [ 1413.502215][T16063] Bluetooth: hci2: command tx timeout [ 1414.032183][ T5266] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1415.064800][T16961] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1415.226090][T16961] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1415.227420][T16961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.227445][T16961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.227474][T16961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.236198][T16961] usb 6-1: config 0 descriptor?? [ 1415.236610][ T4971] EXT4-fs error: 11 callbacks suppressed [ 1415.236622][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1415.240192][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1415.240372][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1415.255047][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1415.256622][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1415.257202][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1415.607752][T19718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.633483][T19718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.654832][T19718] bond0 (unregistering): Released all slaves [ 1415.673924][T19718] bond1 (unregistering): Released all slaves [ 1415.736449][T16063] Bluetooth: hci2: command tx timeout [ 1415.745597][T19718] bond2 (unregistering): (slave veth5): Releasing active interface [ 1415.790378][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1415.790640][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1415.790822][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1415.804226][T19718] bond2 (unregistering): Released all slaves [ 1416.088001][T22626] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1416.110455][T19718] tipc: Disabling bearer [ 1416.110608][T19718] tipc: Left network mode [ 1416.115609][T22561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.115703][T22561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.115849][T22561] bridge_slave_0: entered allmulticast mode [ 1416.117267][T22561] bridge_slave_0: entered promiscuous mode [ 1416.123177][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 1416.124827][T22561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.124919][T22561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.126113][T22561] bridge_slave_1: entered allmulticast mode [ 1416.146832][T22561] bridge_slave_1: entered promiscuous mode [ 1416.216239][T22649] xt_hashlimit: size too large, truncated to 1048576 [ 1416.306819][T22653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.307140][T22653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.307543][T16961] hid-led 0003:27B8:01ED.001B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 1416.385292][T22561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.389930][ T5266] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1416.390410][T22653] ¾x9ÿ: renamed from bridge_slave_0 [ 1416.413833][T22655] udevd[22655]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1416.436127][T22612] netlink: 'syz.5.4593': attribute type 1 has an invalid length. [ 1416.455627][T16961] hid-led 0003:27B8:01ED.001B: ThingM blink(1) initialized [ 1416.585070][T22612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1416.594988][T22561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.747205][T22615] veth9: entered allmulticast mode [ 1416.772820][T22615] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1416.789235][T12571] usb 6-1: USB disconnect, device number 93 [ 1416.906506][T22561] team0: Port device team_slave_0 added [ 1416.913620][T22561] team0: Port device team_slave_1 added [ 1417.027722][T22561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.027749][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.027789][T22561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.045154][T22561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.045171][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.045190][T22561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.118813][ T5266] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1417.170765][T19718] hsr_slave_0: left promiscuous mode [ 1417.180974][T19718] hsr_slave_1: left promiscuous mode [ 1417.181632][T19718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.197036][T19718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.354357][T22666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.376807][T22666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.392191][T22666] netlink: 'syz.3.4604': attribute type 1 has an invalid length. [ 1417.641959][T19718] team0 (unregistering): Port device team_slave_1 removed [ 1417.680632][T19718] team0 (unregistering): Port device team_slave_0 removed [ 1417.832699][T22677] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 1417.857879][T22677] SELinux: failed to load policy [ 1417.973899][T16063] Bluetooth: hci2: command tx timeout [ 1418.118114][T22666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1418.174664][T22667] veth11: entered allmulticast mode [ 1418.278006][T22561] hsr_slave_0: entered promiscuous mode [ 1418.282974][T22561] hsr_slave_1: entered promiscuous mode [ 1418.335716][ T30] audit: type=1400 audit(1788196250.388:4191): avc: denied { getopt } for pid=22682 comm="syz.4.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1418.530692][ T5266] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1419.554223][T22693] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1419.976462][ T5266] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1420.156546][T22706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4611'. [ 1420.236095][ T5266] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1420.300587][T13933] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1420.368669][ T5266] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1420.462894][T13933] usb 5-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 1420.463784][T13933] usb 5-1: config 9 has an invalid interface number: 245 but max is 0 [ 1420.463803][T13933] usb 5-1: config 9 has no interface number 0 [ 1420.466435][T13933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.466458][T13933] usb 5-1: Product: syz [ 1420.466470][T13933] usb 5-1: Manufacturer: syz [ 1420.466483][T13933] usb 5-1: SerialNumber: syz [ 1420.692831][T22700] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4609'. [ 1420.709847][T13933] uvcvideo 5-1:9.245: Found UVC 0.06 device syz (8086:1155) [ 1420.709946][T13933] uvcvideo 5-1:9.245: No valid video chain found. [ 1420.726794][T13933] usb 5-1: USB disconnect, device number 55 [ 1420.746077][T22266] EXT4-fs error: 43 callbacks suppressed [ 1420.751828][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1420.762928][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1420.774695][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1420.848408][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm dhcpcd: iget: checksum invalid [ 1421.042819][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm dhcpcd: iget: checksum invalid [ 1421.063009][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm dhcpcd: iget: checksum invalid [ 1421.168465][T22727] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1421.722501][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1421.722791][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1421.722911][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1423.350243][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.356655][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.396957][T22730] lo speed is unknown, defaulting to 1000 [ 1423.901151][T22753] netlink: 'syz.0.4616': attribute type 1 has an invalid length. [ 1424.317323][T22753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1424.410221][T22754] veth5: entered allmulticast mode [ 1424.481954][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1424.496025][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1424.500869][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1424.502661][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1424.505783][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1425.219776][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4621'. [ 1425.769529][T22761] lo speed is unknown, defaulting to 1000 [ 1426.571826][T22792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1427.651840][ T52] Bluetooth: hci0: command tx timeout [ 1427.922318][T22800] EXT4-fs error: 30 callbacks suppressed [ 1427.928053][T22800] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:12: iget: checksum invalid [ 1427.982932][T22803] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:12: iget: checksum invalid [ 1428.187177][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1428.190372][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1428.220286][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1428.505432][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4624'. [ 1428.771904][T12571] usb 4-1: USB disconnect, device number 45 [ 1429.835383][ T52] Bluetooth: hci0: command tx timeout [ 1430.381064][T22813] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1430.838377][T16063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1430.852697][T16063] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1430.859955][T16063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1430.876318][T16063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1430.884760][T16063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1430.937329][T22826] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1430.944814][T22827] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1431.250213][ T105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.371632][T22761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.371762][T22761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.372297][T22761] bridge_slave_0: entered allmulticast mode [ 1431.375183][T22761] bridge_slave_0: entered promiscuous mode [ 1431.384943][T22761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.385011][T22761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.385127][T22761] bridge_slave_1: entered allmulticast mode [ 1431.403837][T22761] bridge_slave_1: entered promiscuous mode [ 1431.438014][T22828] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1431.446530][T22829] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1431.528933][T22561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1431.558234][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1431.558885][T22561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1431.569371][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1431.583507][T22761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.586844][T22761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.699020][ T105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1432.070198][T16063] Bluetooth: hci0: command tx timeout [ 1432.105464][T22561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1432.123993][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1432.134774][T22561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1432.180292][T22561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.223266][T22761] team0: Port device team_slave_0 added [ 1432.262397][ T105] bond0: (slave netdevsim1): Releasing backup interface [ 1432.270908][ T105] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 1432.297707][ T105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1432.436706][T22761] team0: Port device team_slave_1 added [ 1432.462100][T22761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.462124][T22761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.462146][T22761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.463824][T22761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.463835][T22761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.463854][T22761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.550480][T16063] Bluetooth: hci1: command tx timeout [ 1433.910398][T22824] lo speed is unknown, defaulting to 1000 [ 1433.958911][T22761] hsr_slave_0: entered promiscuous mode [ 1433.959583][T22761] hsr_slave_1: entered promiscuous mode [ 1433.960014][T22761] debugfs: 'hsr0' already exists in 'hsr' [ 1433.960030][T22761] Cannot create hsr debugfs directory [ 1433.974601][T22854] EXT4-fs error: 7 callbacks suppressed [ 1433.974618][T22854] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1434.026479][ T105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.077223][T22855] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1434.157262][T22856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1434.203070][T22857] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1434.254083][T22859] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1434.293376][ T52] Bluetooth: hci0: command tx timeout [ 1434.460510][T22862] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1434.517695][T22864] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1434.550119][T16063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.578056][T16063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.578695][T22866] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:11: iget: checksum invalid [ 1434.600835][T16063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.625546][T16063] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.634148][T16063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1434.675083][T22867] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:12: iget: checksum invalid [ 1434.691157][T22868] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:12: iget: checksum invalid [ 1434.861616][ T5266] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1435.130059][ T105] gretap0 (unregistering): left promiscuous mode [ 1435.159393][ T105] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1435.180440][ T105] bond0 (unregistering): left promiscuous mode [ 1435.180481][ T105] bond_slave_0: left promiscuous mode [ 1435.180614][ T105] bond_slave_1: left promiscuous mode [ 1435.199124][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.209695][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.219216][ T105] bond0 (unregistering): Released all slaves [ 1435.224005][ T105] bond1 (unregistering): Released all slaves [ 1435.232593][ T105] bond2 (unregistering): (slave bond3): Releasing active interface [ 1435.241642][ T105] bond2 (unregistering): Released all slaves [ 1435.250864][ T105] bond3 (unregistering): Released all slaves [ 1435.261456][ T105] bond4 (unregistering): (slave veth3): Releasing active interface [ 1435.271423][ T105] bond4 (unregistering): Released all slaves [ 1435.279797][ T105] bond5 (unregistering): (slave veth5): Releasing active interface [ 1435.289368][ T105] bond5 (unregistering): Released all slaves [ 1435.302747][ T105] bond6 (unregistering): (slave veth7): Releasing active interface [ 1435.311969][ T105] bond6 (unregistering): Released all slaves [ 1435.320378][ T105] bond7 (unregistering): (slave veth9): Releasing active interface [ 1435.329112][ T105] bond7 (unregistering): Released all slaves [ 1435.338695][ T105] bond8 (unregistering): Released all slaves [ 1435.348376][T22824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.348463][T22824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.349283][T22824] bridge_slave_0: entered allmulticast mode [ 1435.350484][T22824] bridge_slave_0: entered promiscuous mode [ 1435.354478][T22824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.357361][T22824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.357469][T22824] bridge_slave_1: entered allmulticast mode [ 1435.360551][T22824] bridge_slave_1: entered promiscuous mode [ 1435.373993][T22561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.400826][T22882] overlayfs: failed to clone upperpath [ 1435.446198][T22824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.448773][T22824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.507777][T22863] lo speed is unknown, defaulting to 1000 [ 1435.553588][T22824] team0: Port device team_slave_0 added [ 1435.581178][T22824] team0: Port device team_slave_1 added [ 1435.670415][T22824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.670456][T22824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.670810][T22824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.672598][T22824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.672617][T22824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.672902][T22824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.700570][T22561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.739156][ T52] Bluetooth: hci1: command tx timeout [ 1435.804098][ T5266] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1435.815159][T22824] hsr_slave_0: entered promiscuous mode [ 1435.815887][T22824] hsr_slave_1: entered promiscuous mode [ 1435.816376][T22824] debugfs: 'hsr0' already exists in 'hsr' [ 1435.816390][T22824] Cannot create hsr debugfs directory [ 1435.831462][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.831540][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.834340][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.834414][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.996059][ T105] hsr_slave_0: left promiscuous mode [ 1436.002187][ T105] hsr_slave_1: left promiscuous mode [ 1436.003645][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.008415][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.055900][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4639'. [ 1436.057051][T22890] fuse: fd is not a fuse device [ 1436.407712][T22561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1436.596463][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1436.732270][ T5266] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1436.782543][ T30] audit: type=1400 audit(1788196267.639:4192): avc: denied { setopt } for pid=22905 comm="syz.0.4640" lport=58714 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1436.808547][T22863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.808687][T22863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.808807][T22863] bridge_slave_0: entered allmulticast mode [ 1436.809988][T22863] bridge_slave_0: entered promiscuous mode [ 1436.812258][T22863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.812326][T22863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.812412][T22863] bridge_slave_1: entered allmulticast mode [ 1436.813646][T22863] bridge_slave_1: entered promiscuous mode [ 1436.847510][ T52] Bluetooth: hci3: command tx timeout [ 1436.848618][T22863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.870741][T22863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.886850][ T105] IPVS: stop unused estimator thread 0... [ 1437.083722][T22921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4642'. [ 1437.236128][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.247455][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.257039][ T105] bond0 (unregistering): Released all slaves [ 1437.266407][T22863] team0: Port device team_slave_0 added [ 1437.294013][T22561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.295806][T22863] team0: Port device team_slave_1 added [ 1437.368904][T22863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.368938][T22863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.368958][T22863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.372718][T22863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.372733][T22863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.372751][T22863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.698056][T22863] hsr_slave_0: entered promiscuous mode [ 1437.698772][T22863] hsr_slave_1: entered promiscuous mode [ 1437.699228][T22863] debugfs: 'hsr0' already exists in 'hsr' [ 1437.699244][T22863] Cannot create hsr debugfs directory [ 1437.749107][T22561] veth0_vlan: entered promiscuous mode [ 1437.794435][T22561] veth1_vlan: entered promiscuous mode [ 1437.826871][T22761] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1437.840761][T22761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1437.867107][T22761] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1437.877019][T22761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1437.877708][T22761] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1437.887617][T22761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1437.901496][ T105] hsr_slave_0: left promiscuous mode [ 1437.906983][ T105] hsr_slave_1: left promiscuous mode [ 1437.907604][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.907620][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.912832][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.912847][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.950152][ T105] veth1_macvtap: left promiscuous mode [ 1437.950192][ T105] veth0_macvtap: left promiscuous mode [ 1437.950284][ T105] veth1_vlan: left promiscuous mode [ 1437.950347][ T105] veth0_vlan: left promiscuous mode [ 1437.959825][ T52] Bluetooth: hci1: command tx timeout [ 1438.143152][ T105] team0 (unregistering): Port device team_slave_1 removed [ 1438.150684][ T105] team0 (unregistering): Port device team_slave_0 removed [ 1438.229641][T22761] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1438.247345][T22761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1438.406777][ T30] audit: type=1400 audit(1788196269.155:4193): avc: denied { ioctl } for pid=22941 comm="syz.0.4644" path="socket:[86539]" dev="sockfs" ino=86539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1438.419210][T22561] veth0_macvtap: entered promiscuous mode [ 1438.422141][T22561] veth1_macvtap: entered promiscuous mode [ 1438.523659][T22561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.604564][T22561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.731679][ T176] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.739771][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.739812][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.739840][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.833526][T22960] netlink: 'syz.0.4646': attribute type 12 has an invalid length. [ 1439.016196][T22962] xt_hashlimit: size too large, truncated to 1048576 [ 1439.072146][ T52] Bluetooth: hci3: command tx timeout [ 1439.078111][ T30] audit: type=1400 audit(1788196269.791:4194): avc: denied { create } for pid=22959 comm="syz.0.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1439.196519][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.196590][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.298639][T22761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.347603][T22972] EXT4-fs error: 80 callbacks suppressed [ 1439.347820][T22972] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1439.354256][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.354282][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.382190][T22973] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1439.398244][T22761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.399323][T22974] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1439.420803][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.420885][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.463074][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.463170][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.571279][T22979] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:7: iget: checksum invalid [ 1439.582461][T22980] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:7: iget: checksum invalid [ 1439.685809][T22983] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:7: iget: checksum invalid [ 1439.689469][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm dhcpcd: iget: checksum invalid [ 1439.714429][T22985] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1440.086444][T22988] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1440.182937][ T52] Bluetooth: hci1: command tx timeout [ 1440.339313][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4649'. [ 1440.514907][T22994] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1440.607548][T22761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.836588][T22761] veth0_vlan: entered promiscuous mode [ 1440.846801][T22761] veth1_vlan: entered promiscuous mode [ 1440.915694][T22761] veth0_macvtap: entered promiscuous mode [ 1440.918793][T22761] veth1_macvtap: entered promiscuous mode [ 1440.954486][T22761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.960282][T22761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.072357][ T105] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.072618][ T105] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.171332][T19722] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.172039][T19722] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.239904][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.239947][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.283204][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.283249][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.295365][ T52] Bluetooth: hci3: command tx timeout [ 1441.611359][ T176] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.856716][ T30] audit: type=1400 audit(1788196272.382:4195): avc: denied { connect } for pid=23021 comm="syz.8.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1442.002049][ T176] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.038597][T22863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1442.052824][T22863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.058501][T22863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1442.071111][T22863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.084464][T22863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1442.104261][T22863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.105530][T22863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1442.115282][T22863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1442.185506][ T176] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.402711][ T176] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.468514][T16063] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1442.479697][T16063] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1442.506069][T16063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1442.528090][T16063] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1442.539715][T16063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1442.798587][T22863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.948133][T22863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.948387][T23034] lo speed is unknown, defaulting to 1000 [ 1442.990811][T19722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.990900][T19722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.206503][T22824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1443.225351][T22824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1443.519698][ T52] Bluetooth: hci3: command tx timeout [ 1443.578749][T22824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1443.596783][T22824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1443.607583][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.607666][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.659921][ T176] bridge_slave_1: left allmulticast mode [ 1443.659964][ T176] bridge_slave_1: left promiscuous mode [ 1443.660207][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.675360][ T176] bridge_slave_0: left allmulticast mode [ 1443.675382][ T176] bridge_slave_0: left promiscuous mode [ 1443.675530][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.847657][T23062] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4658'. [ 1444.046348][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.058307][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.069017][ T176] bond0 (unregistering): Released all slaves [ 1444.078305][T22824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1444.096656][T22824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1444.128822][T22824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1444.134016][T22824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.336815][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1444.520879][ T176] hsr_slave_0: left promiscuous mode [ 1444.528666][ T176] hsr_slave_1: left promiscuous mode [ 1444.529411][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.529427][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.534661][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1444.534677][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1444.552822][ T176] veth1_macvtap: left promiscuous mode [ 1444.552861][ T176] veth0_macvtap: left promiscuous mode [ 1444.552948][ T176] veth1_vlan: left promiscuous mode [ 1444.553004][ T176] veth0_vlan: left promiscuous mode [ 1444.800964][ T52] Bluetooth: hci2: command tx timeout [ 1444.851645][ T176] team0 (unregistering): Port device team_slave_1 removed [ 1444.866556][ T176] team0 (unregistering): Port device team_slave_0 removed [ 1444.997345][ T5266] EXT4-fs error: 41 callbacks suppressed [ 1444.997390][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 1445.019982][T23077] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1445.028819][T23078] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1445.039334][T23079] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1445.044221][T23080] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1445.071987][T23081] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1445.077970][T23083] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1445.094434][T23082] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:2: iget: checksum invalid [ 1445.098881][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1445.149785][T23086] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:9: iget: checksum invalid [ 1445.169261][T23087] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1445.316990][T22824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.333484][T22863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.422264][T23034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.422351][T23034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.422446][T23034] bridge_slave_0: entered allmulticast mode [ 1445.423574][T23034] bridge_slave_0: entered promiscuous mode [ 1445.434890][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1445.439256][T23034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.439331][T23034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.439450][T23034] bridge_slave_1: entered allmulticast mode [ 1445.443741][T23034] bridge_slave_1: entered promiscuous mode [ 1445.598199][T16063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1445.611626][T23034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.613156][T16063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1445.629686][T16063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1445.639810][T16063] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1445.650110][T16063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1445.662745][T23034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.709606][T22824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.729718][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1445.751377][T23034] team0: Port device team_slave_0 added [ 1445.763843][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.763933][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.780574][T23034] team0: Port device team_slave_1 added [ 1445.803505][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.803588][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.884079][T23104] lo speed is unknown, defaulting to 1000 [ 1445.897334][T22863] veth0_vlan: entered promiscuous mode [ 1445.905924][T23034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.905946][T23034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.905967][T23034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.939592][T23034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.939608][T23034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.939628][T23034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.007489][T22863] veth1_vlan: entered promiscuous mode [ 1446.052642][T23034] hsr_slave_0: entered promiscuous mode [ 1446.059164][T23034] hsr_slave_1: entered promiscuous mode [ 1446.166538][ T176] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.317061][ T176] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.438656][ T176] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.450349][T22863] veth0_macvtap: entered promiscuous mode [ 1446.456847][T22863] veth1_macvtap: entered promiscuous mode [ 1446.575777][T22863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.630729][ T176] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.668674][T22824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.732622][T22863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.789265][T23104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.789368][T23104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.789491][T23104] bridge_slave_0: entered allmulticast mode [ 1446.790701][T23104] bridge_slave_0: entered promiscuous mode [ 1446.793224][T23104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.793292][T23104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.793387][T23104] bridge_slave_1: entered allmulticast mode [ 1446.794591][T23104] bridge_slave_1: entered promiscuous mode [ 1446.816714][T23104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.818716][T23104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.838771][T23104] team0: Port device team_slave_0 added [ 1446.840956][T23104] team0: Port device team_slave_1 added [ 1446.868475][T23104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.868490][T23104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.868509][T23104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.949289][T23104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.949322][T23104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.949355][T23104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.026008][T16063] Bluetooth: hci2: command tx timeout [ 1447.220879][T23104] hsr_slave_0: entered promiscuous mode [ 1447.228405][T23104] hsr_slave_1: entered promiscuous mode [ 1447.229264][T23104] debugfs: 'hsr0' already exists in 'hsr' [ 1447.229280][T23104] Cannot create hsr debugfs directory [ 1447.895088][T16063] Bluetooth: hci0: command tx timeout [ 1448.077906][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1448.091349][T19719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.091388][T19719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.123342][T22824] veth0_vlan: entered promiscuous mode [ 1448.175038][ T176] bridge_slave_1: left allmulticast mode [ 1448.196188][ T176] bridge_slave_1: left promiscuous mode [ 1448.196378][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.211616][ T176] bridge_slave_0: left allmulticast mode [ 1448.217439][ T176] bridge_slave_0: left promiscuous mode [ 1448.231754][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.390440][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.406654][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.416192][ T176] bond0 (unregistering): Released all slaves [ 1448.426081][ T297] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.430586][ T297] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.430630][ T297] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.456295][ T105] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.554721][T22824] veth1_vlan: entered promiscuous mode [ 1448.573412][T22824] veth0_macvtap: entered promiscuous mode [ 1448.578264][T22824] veth1_macvtap: entered promiscuous mode [ 1448.588040][T22824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.590899][T22824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.659078][ T297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.662770][ T105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.662824][ T105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.662866][ T105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.727964][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.728014][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.993555][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1449.166601][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.166644][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.196577][ T176] hsr_slave_0: left promiscuous mode [ 1449.202054][ T176] hsr_slave_1: left promiscuous mode [ 1449.203942][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.203963][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.208994][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.209014][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.224468][ T176] veth1_macvtap: left promiscuous mode [ 1449.224503][ T176] veth0_macvtap: left promiscuous mode [ 1449.224588][ T176] veth1_vlan: left promiscuous mode [ 1449.224637][ T176] veth0_vlan: left promiscuous mode [ 1449.249606][T16063] Bluetooth: hci2: command tx timeout [ 1449.353927][T21048] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1449.422134][ T176] team0 (unregistering): Port device team_slave_1 removed [ 1449.431854][ T176] team0 (unregistering): Port device team_slave_0 removed [ 1449.520663][T21048] usb 8-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 1449.521614][T21048] usb 8-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 1449.521668][T21048] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.521703][T21048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.616099][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.616128][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.659064][T23034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1449.686848][T23034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1449.693787][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1449.702352][T23034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1449.772580][T21048] usb 8-1: dvb_usb_v2: usb_bulk_msg() write length=12, actual=7 [ 1449.772665][T21048] dvb_usb_af9035 8-1:1.0: probe with driver dvb_usb_af9035 failed with error -5 [ 1449.779756][T23034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1449.861556][T23169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1450.102653][T16063] Bluetooth: hci0: command tx timeout [ 1450.134516][T23034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1450.606631][T23034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1450.608598][T23034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1450.618204][T23177] EXT4-fs error: 72 callbacks suppressed [ 1450.618220][T23177] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1450.624823][T23034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1450.634415][T23180] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1451.297946][T23188] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1451.946346][T16063] Bluetooth: hci2: command tx timeout [ 1451.959011][T23187] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4669'. [ 1452.012452][T23192] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1452.035570][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1452.036236][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1452.036471][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1452.181992][T23198] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1452.183598][T23199] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1452.219869][T23197] pim6reg1: entered promiscuous mode [ 1452.219909][T23197] pim6reg1: entered allmulticast mode [ 1452.279892][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 1452.289746][T23034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.325596][ T52] Bluetooth: hci0: command tx timeout [ 1452.351965][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1452.391067][ T2257] libceph: connect (1)[c::]:6789 error -101 [ 1452.394243][ T2257] libceph: mon0 (1)[c::]:6789 connect error [ 1452.428819][T23194] ceph: No mds server is up or the cluster is laggy [ 1452.536613][T23034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.652367][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.652475][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.660593][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.660668][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.880526][T23213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1453.593234][T23230] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4674'. [ 1453.689504][T23034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.736640][ T25] usb 8-1: USB disconnect, device number 7 [ 1453.771766][T23104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1453.791354][T23104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1453.803194][T23104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1453.837160][T23104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1453.845458][T23104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1453.859122][T23104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1453.871015][T23104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1453.882601][T23104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1453.969498][ T30] audit: type=1400 audit(1788196283.721:4196): avc: denied { name_connect } for pid=23247 comm="syz.7.4677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1453.970330][T23034] veth0_vlan: entered promiscuous mode [ 1453.984716][T23034] veth1_vlan: entered promiscuous mode [ 1454.642290][ T52] Bluetooth: hci0: command tx timeout [ 1454.663342][T23250] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4675'. [ 1454.746140][T23034] veth0_macvtap: entered promiscuous mode [ 1454.782435][T23034] veth1_macvtap: entered promiscuous mode [ 1454.819441][T23034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1454.841165][T23034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.871366][T23104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.944093][ T176] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.028817][T19718] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.028906][T19718] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.028961][T19718] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.118013][T23104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.151459][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.151496][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.200528][T19718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.200633][T19718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.262566][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.262670][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.278704][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.278742][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.344518][T23104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1455.496099][T23104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.585007][T23104] veth0_vlan: entered promiscuous mode [ 1455.602133][T23104] veth1_vlan: entered promiscuous mode [ 1455.663802][T23104] veth0_macvtap: entered promiscuous mode [ 1455.677497][T23104] veth1_macvtap: entered promiscuous mode [ 1455.695392][T23104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.719495][T23104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.746762][ T297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.747489][ T297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.747641][ T297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.747692][ T297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.840926][T23292] vivid-000: disconnect [ 1455.994044][T23298] netlink: 'syz.1.4676': attribute type 1 has an invalid length. [ 1456.143854][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.143902][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.202622][T19718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.202665][T19718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.668344][T23290] vivid-000: reconnect [ 1458.596508][ T4971] EXT4-fs error: 56 callbacks suppressed [ 1458.596556][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1458.596820][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1458.596965][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1458.625828][T23305] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4683'. [ 1458.852358][T23312] netlink: 'syz.0.4678': attribute type 2 has an invalid length. [ 1458.852387][T23312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4678'. [ 1458.901652][T23324] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4688'. [ 1458.901697][T23324] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4688'. [ 1458.995206][ T30] audit: type=1400 audit(1788196288.417:4197): avc: denied { write } for pid=23329 comm="syz.6.4693" name="functions" dev="configfs" ino=66998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1459.237324][T23341] syzkaller0: entered promiscuous mode [ 1459.237372][T23341] syzkaller0: entered allmulticast mode [ 1459.322975][T23347] overlay: Bad value for 'workdir' [ 1459.407991][T23353] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1459.660921][T23369] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1459.661561][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1459.661742][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1459.790862][T23373] FAULT_INJECTION: forcing a failure. [ 1459.790862][T23373] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.790927][T23373] CPU: 1 UID: 0 PID: 23373 Comm: syz.7.4712 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.790955][T23373] Tainted: [L]=SOFTLOCKUP [ 1459.790962][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.790970][T23373] Call Trace: [ 1459.790976][T23373] [ 1459.790982][T23373] dump_stack_lvl+0x100/0x190 [ 1459.791011][T23373] should_fail_ex.cold+0x5/0xa [ 1459.791035][T23373] should_failslab+0xc2/0x120 [ 1459.791056][T23373] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1459.791074][T23373] ? skb_clone+0x190/0x400 [ 1459.791097][T23373] skb_clone+0x190/0x400 [ 1459.791114][T23373] netlink_deliver_tap+0xaed/0xcc0 [ 1459.791148][T23373] netlink_unicast+0x6a5/0x850 [ 1459.791174][T23373] ? __pfx_netlink_unicast+0x10/0x10 [ 1459.791196][T23373] ? genl_rcv_msg+0x4be/0x800 [ 1459.791218][T23373] netlink_ack+0x655/0xb80 [ 1459.791248][T23373] netlink_rcv_skb+0x333/0x420 [ 1459.791274][T23373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1459.791293][T23373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1459.791328][T23373] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1459.791356][T23373] genl_rcv+0x28/0x40 [ 1459.791382][T23373] netlink_unicast+0x585/0x850 [ 1459.791410][T23373] ? __pfx_netlink_unicast+0x10/0x10 [ 1459.791442][T23373] netlink_sendmsg+0x8b0/0xda0 [ 1459.791469][T23373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.791495][T23373] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1459.791525][T23373] __sys_sendto+0x48b/0x4e0 [ 1459.791547][T23373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.791570][T23373] ? __pfx___sys_sendto+0x10/0x10 [ 1459.791599][T23373] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1459.791641][T23373] __x64_sys_sendto+0xe0/0x1c0 [ 1459.791665][T23373] ? do_syscall_64+0xae/0x790 [ 1459.791683][T23373] ? lockdep_hardirqs_on+0x7d/0x110 [ 1459.791700][T23373] do_syscall_64+0x123/0x790 [ 1459.791720][T23373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.791737][T23373] RIP: 0033:0x7fb65f15e98e [ 1459.791752][T23373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1459.791767][T23373] RSP: 002b:00007fb660109e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1459.791784][T23373] RAX: ffffffffffffffda RBX: 00007fb66010b6c0 RCX: 00007fb65f15e98e [ 1459.791796][T23373] RDX: 0000000000000024 RSI: 00007fb66010a000 RDI: 0000000000000005 [ 1459.791806][T23373] RBP: 0000000000000000 R08: 00007fb660109f04 R09: 000000000000000c [ 1459.791816][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1459.791827][T23373] R13: 00007fb660109f58 R14: 00007fb66010a000 R15: 0000000000000000 [ 1459.791849][T23373] [ 1459.972802][ T30] audit: type=1400 audit(1788196289.334:4198): avc: denied { execute } for pid=23375 comm="syz.7.4716" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1460.434197][T23392] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4722'. [ 1460.434239][T23392] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4722'. [ 1460.443548][T23390] binder: 23389:23390 ioctl c0306201 2000000001c0 returned -14 [ 1460.698782][T23402] bridge0: port 3(wlan1) entered blocking state [ 1460.698940][T23402] bridge0: port 3(wlan1) entered disabled state [ 1460.699300][T23402] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 1460.759156][T23402] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 1460.767684][T23402] bridge0: port 3(wlan1) entered blocking state [ 1460.767814][T23402] bridge0: port 3(wlan1) entered forwarding state [ 1461.057570][ T30] audit: type=1400 audit(1788196290.335:4199): avc: denied { read } for pid=23416 comm="syz.7.4731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1461.261590][T23421] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1461.859588][ T176] bridge0: port 3(wlan1) entered disabled state [ 1461.860571][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1461.860804][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1461.860918][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1462.203408][ T30] audit: type=1800 audit(1788196291.429:4200): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4738" name="file" dev="configfs" ino=90720 res=0 errno=0 [ 1462.238006][T23434] mass_storage.0/lun.0: unable to open backing file: 0x0000000000010001 [ 1462.398136][ T176] IPVS: starting estimator thread 0... [ 1462.487180][T23447] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4741'. [ 1462.491129][ T5604] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1462.512938][T23444] IPVS: using max 55 ests per chain, 132000 per kthread [ 1462.652045][ T5604] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1462.654636][ T5604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.654661][ T5604] usb 8-1: Product: syz [ 1462.654675][ T5604] usb 8-1: Manufacturer: syz [ 1462.654687][ T5604] usb 8-1: SerialNumber: syz [ 1462.768336][ T30] audit: type=1400 audit(1788196291.944:4201): avc: denied { read } for pid=23458 comm="syz.0.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1462.912174][T23465] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1462.950096][T23468] netlink: 'syz.0.4752': attribute type 4 has an invalid length. [ 1463.041870][T23474] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1463.083503][T23477] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1463.123081][T23476] FAULT_INJECTION: forcing a failure. [ 1463.123081][T23476] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1463.123134][T23476] CPU: 1 UID: 0 PID: 23476 Comm: syz.2.4754 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.123163][T23476] Tainted: [L]=SOFTLOCKUP [ 1463.123171][T23476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.123181][T23476] Call Trace: [ 1463.123188][T23476] [ 1463.123194][T23476] dump_stack_lvl+0x100/0x190 [ 1463.123225][T23476] should_fail_ex.cold+0x5/0xa [ 1463.123252][T23476] get_futex_key+0x1d0/0x14f0 [ 1463.123275][T23476] ? __pfx_get_futex_key+0x10/0x10 [ 1463.123296][T23476] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1463.123321][T23476] futex_wait_setup+0x91/0x540 [ 1463.123352][T23476] __futex_wait+0x19f/0x300 [ 1463.123377][T23476] ? __pfx___futex_wait+0x10/0x10 [ 1463.123400][T23476] ? __pfx_try_to_wake_up+0x10/0x10 [ 1463.123417][T23476] ? futex_hash+0x311/0x400 [ 1463.123439][T23476] ? __pfx_futex_wake_mark+0x10/0x10 [ 1463.123466][T23476] ? find_held_lock+0x2b/0x80 [ 1463.123487][T23476] ? futex_wake+0x4ea/0x5e0 [ 1463.123516][T23476] futex_wait+0xe6/0x370 [ 1463.123539][T23476] ? __pfx_futex_wait+0x10/0x10 [ 1463.123568][T23476] ? vfs_write+0x914/0x1050 [ 1463.123591][T23476] ? vfs_write+0x15d/0x1050 [ 1463.123618][T23476] do_futex+0x265/0x440 [ 1463.123640][T23476] ? __pfx_do_futex+0x10/0x10 [ 1463.123667][T23476] __x64_sys_futex+0x34f/0x4d0 [ 1463.123692][T23476] ? __pfx___x64_sys_futex+0x10/0x10 [ 1463.123721][T23476] do_syscall_64+0x123/0x790 [ 1463.123742][T23476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.123767][T23476] RIP: 0033:0x7f980a59e159 [ 1463.123781][T23476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.123798][T23476] RSP: 002b:00007f980b5080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1463.123818][T23476] RAX: ffffffffffffffda RBX: 00007f980a825fa8 RCX: 00007f980a59e159 [ 1463.123830][T23476] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f980a825fa8 [ 1463.123842][T23476] RBP: 00007f980a825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1463.123854][T23476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.123865][T23476] R13: 00007f980a826038 R14: 00007ffdafd21940 R15: 00007ffdafd21a28 [ 1463.123889][T23476] [ 1463.194933][ T5604] cdc_ncm 8-1:1.0: bind() failure [ 1463.226740][ T5604] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1463.226780][ T5604] cdc_ncm 8-1:1.1: bind() failure [ 1463.247260][ T5604] usb 8-1: USB disconnect, device number 8 [ 1463.283967][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1463.290307][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1463.546266][ T30] audit: type=1400 audit(1788196292.674:4202): avc: denied { lock } for pid=23483 comm="syz.6.4759" path="socket:[90796]" dev="sockfs" ino=90796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1463.850714][T23493] overlayfs: failed to clone upperpath [ 1463.946771][ T5703] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1464.022843][T23496] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1464.137426][ T5703] usb 2-1: device descriptor read/64, error -71 [ 1464.405938][ T5703] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1464.588705][T23522] EXT4-fs error: 4 callbacks suppressed [ 1464.594475][T23522] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:7: iget: checksum invalid [ 1464.616342][T23523] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:7: iget: checksum invalid [ 1464.748126][ T5703] usb 2-1: device descriptor read/64, error -71 [ 1464.872919][ T5703] usb usb2-port1: attempt power cycle [ 1465.034765][T23534] devpts: Bad value for 'max' [ 1465.079933][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1465.080217][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1465.080368][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1466.273274][T23539] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1466.572970][ T5703] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1466.583949][T23540] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1466.710799][ T5703] usb 2-1: device descriptor read/8, error -71 [ 1466.774145][T23542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1466.827196][T23546] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1467.033659][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4787'. [ 1467.047990][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4787'. [ 1467.157835][T23555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1467.346404][ T42] IPVS: starting estimator thread 0... [ 1467.412412][T23564] netlink: 'syz.1.4791': attribute type 10 has an invalid length. [ 1467.444753][T23563] IPVS: using max 49 ests per chain, 117600 per kthread [ 1467.829870][T23565] bond1: entered allmulticast mode [ 1467.832734][T23565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1467.987515][T23566] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1468.255330][T23566] bond1: (slave macvlan2): making interface the new active one [ 1468.263419][T23566] macvlan2: entered allmulticast mode [ 1468.272605][T23566] bond0: entered allmulticast mode [ 1468.278422][T23566] bond_slave_0: entered allmulticast mode [ 1468.278504][T23566] bond_slave_1: entered allmulticast mode [ 1468.278736][T23566] bond_slave_0: entered promiscuous mode [ 1468.278770][T23566] bond_slave_1: entered promiscuous mode [ 1468.574119][T23566] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1468.786846][T23574] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1469.361889][T23586] lo speed is unknown, defaulting to 1000 [ 1470.601335][T23616] bridge0: port 3(vlan2) entered blocking state [ 1470.603186][T23616] bridge0: port 3(vlan2) entered disabled state [ 1470.603332][T23616] vlan2: entered allmulticast mode [ 1470.603347][T23616] gretap0: entered allmulticast mode [ 1470.612817][T23616] vlan2: entered promiscuous mode [ 1470.612838][T23616] gretap0: entered promiscuous mode [ 1470.628491][T23616] bridge0: port 3(vlan2) entered blocking state [ 1470.628572][T23616] bridge0: port 3(vlan2) entered forwarding state [ 1470.920332][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1470.920379][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1470.920734][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1470.949945][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1470.949965][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1470.949986][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1470.959319][ T105] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.000295][T19718] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.000352][T19718] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.000394][T19718] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.509617][T23642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4820'. [ 1471.519683][T23642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.557708][T23642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.641049][ T5703] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1471.813748][ T5703] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1471.826439][ T5703] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1471.835342][ T5703] usb 7-1: config 1 has no interface number 0 [ 1471.843320][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.851548][ T5703] usb 7-1: Product: syz [ 1471.856138][ T5703] usb 7-1: Manufacturer: syz [ 1471.860833][ T5703] usb 7-1: SerialNumber: syz [ 1471.878161][ T5703] usb 7-1: 3:1 : does not exist [ 1471.883526][ T5703] usb 7-1: 3:2 : does not exist [ 1471.992863][T22266] EXT4-fs error: 6 callbacks suppressed [ 1471.992917][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1471.993117][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1471.993278][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1472.151252][T13931] usb 7-1: USB disconnect, device number 12 [ 1472.354600][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1472.354859][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1472.354977][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1473.137900][ T5703] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1473.309731][ T5703] usb 7-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 1473.320242][ T5703] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.320278][ T5703] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1473.344128][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.344170][ T5703] usb 7-1: Product: syz [ 1473.344203][ T5703] usb 7-1: Manufacturer: syz [ 1473.344221][ T5703] usb 7-1: SerialNumber: syz [ 1473.609563][T13931] usb 7-1: USB disconnect, device number 13 [ 1474.771916][T23712] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4850'. [ 1474.910418][T23717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1474.930473][T23719] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1474.936473][T23720] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u8:8: iget: checksum invalid [ 1474.943473][T19976] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1475.126277][T19976] usb 7-1: Using ep0 maxpacket: 8 [ 1475.131940][T19976] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1475.142153][T19976] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1475.150560][T19976] usb 7-1: config 179 has no interface number 0 [ 1475.150627][T19976] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1475.150654][T19976] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1475.150681][T19976] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1475.150705][T19976] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1475.150730][T19976] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1475.150768][T19976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.227405][T23710] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1475.298923][T22266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 1475.458293][T23736] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4859'. [ 1475.530966][T23741] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4860'. [ 1475.584117][ T30] audit: type=1800 audit(1788196303.937:4203): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4861" name="nullb0" dev="tmpfs" ino=157 res=0 errno=0 [ 1475.839000][T13931] usb 7-1: USB disconnect, device number 14 [ 1475.839031][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1475.839070][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1476.722475][T23766] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4872'. [ 1477.561276][ T30] audit: type=1400 audit(1788196305.790:4204): avc: denied { write } for pid=23785 comm="syz.7.4879" name="strings" dev="configfs" ino=67000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1479.851055][ T4971] EXT4-fs error: 5 callbacks suppressed [ 1479.851096][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1479.851364][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1479.851494][ T4971] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1222: comm udevd: iget: checksum invalid [ 1480.009019][T23798] netlink: 'syz.0.4882': attribute type 2 has an invalid length. [ 1480.009046][T23798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1480.077471][T23805] [ 1480.079844][T23805] ====================================================== [ 1480.086870][T23805] WARNING: possible circular locking dependency detected [ 1480.093899][T23805] syzkaller #0 Tainted: G L [ 1480.099880][T23805] ------------------------------------------------------ [ 1480.106910][T23805] syz.0.4888/23805 is trying to acquire lock: [ 1480.112993][T23805] ffff88807560bed0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xe6/0x190 [ 1480.123292][T23805] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1480.123292][T23805] but task is already holding lock: [ 1480.130660][T23805] ffff8880443ce460 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 1480.130997][ T30] audit: type=1400 audit(1788196308.194:4205): avc: denied { write } for pid=5588 comm="syz-executor" path="pipe:[4516]" dev="pipefs" ino=4516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1480.162537][T23805] [ 1480.162537][T23805] which lock already depends on the new lock. [ 1480.162537][T23805] [ 1480.173390][T23805] [ 1480.173390][T23805] the existing dependency chain (in reverse order) is: [ 1480.182398][T23805] [ 1480.182398][T23805] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 1480.189779][T23805] lock_acquire+0x1d1/0x380 [ 1480.194794][T23805] mnt_want_write+0x6f/0x420 [ 1480.199888][T23805] lookup_open+0x150/0x1990 [ 1480.204897][T23805] path_openat+0xa2c/0x2440 [ 1480.209904][T23805] do_file_open+0x20e/0x430 [ 1480.214933][T23805] file_open_name+0x1c3/0x3e0 [ 1480.220121][T23805] filp_open+0x2e/0x50 [ 1480.224692][T23805] fsg_lun_open+0x6b/0x7b0 [ 1480.229623][T23805] fsg_store_file+0x1e7/0x450 [ 1480.234804][T23805] configfs_write_iter+0x302/0x4e0 [ 1480.240434][T23805] vfs_write+0x6af/0x1050 [ 1480.245291][T23805] ksys_write+0x12a/0x250 [ 1480.250119][T23805] do_syscall_64+0x123/0x790 [ 1480.255212][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.261624][T23805] [ 1480.261624][T23805] -> #3 (&common->filesem){++++}-{4:4}: [ 1480.269341][T23805] lock_acquire+0x1d1/0x380 [ 1480.274352][T23805] down_read+0x99/0x4c0 [ 1480.279011][T23805] fsg_show_file+0x20/0x180 [ 1480.284016][T23805] configfs_read_iter+0x426/0x6f0 [ 1480.289546][T23805] __kernel_read+0x397/0xad0 [ 1480.294655][T23805] integrity_kernel_read+0x7e/0xb0 [ 1480.300271][T23805] ima_calc_file_hash_tfm+0x25e/0x350 [ 1480.306147][T23805] ima_calc_file_hash+0x1e3/0x380 [ 1480.311682][T23805] ima_collect_measurement+0x94f/0xb30 [ 1480.317652][T23805] process_measurement+0xdfe/0x2350 [ 1480.323358][T23805] ima_file_check+0xc3/0x110 [ 1480.328458][T23805] security_file_post_open+0xc4/0x210 [ 1480.334339][T23805] path_openat+0x5cd/0x2440 [ 1480.339346][T23805] do_file_open+0x20e/0x430 [ 1480.344352][T23805] do_sys_openat2+0x10f/0x1e0 [ 1480.349538][T23805] __x64_sys_openat+0x12d/0x210 [ 1480.354893][T23805] do_syscall_64+0x123/0x790 [ 1480.359988][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.366381][T23805] [ 1480.366381][T23805] -> #2 (&p->frag_sem){++++}-{4:4}: [ 1480.373752][T23805] lock_acquire+0x1d1/0x380 [ 1480.378767][T23805] down_read+0x99/0x4c0 [ 1480.383428][T23805] configfs_read_iter+0x346/0x6f0 [ 1480.388972][T23805] __kernel_read+0x397/0xad0 [ 1480.394070][T23805] integrity_kernel_read+0x7e/0xb0 [ 1480.399695][T23805] ima_calc_file_hash_tfm+0x25e/0x350 [ 1480.405567][T23805] ima_calc_file_hash+0x1e3/0x380 [ 1480.411094][T23805] ima_collect_measurement+0x94f/0xb30 [ 1480.417061][T23805] process_measurement+0xdfe/0x2350 [ 1480.422791][T23805] ima_file_check+0xc3/0x110 [ 1480.427912][T23805] security_file_post_open+0xc4/0x210 [ 1480.433793][T23805] path_openat+0x5cd/0x2440 [ 1480.438799][T23805] do_file_open+0x20e/0x430 [ 1480.443806][T23805] do_sys_openat2+0x10f/0x1e0 [ 1480.448989][T23805] __x64_sys_openat+0x12d/0x210 [ 1480.454345][T23805] do_syscall_64+0x123/0x790 [ 1480.459438][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.465836][T23805] [ 1480.465836][T23805] -> #1 (&buffer->mutex#2){+.+.}-{4:4}: [ 1480.473555][T23805] lock_acquire+0x1d1/0x380 [ 1480.478565][T23805] __mutex_lock+0x1a4/0x1bd0 [ 1480.483662][T23805] configfs_read_iter+0x79/0x6f0 [ 1480.489109][T23805] __kernel_read+0x397/0xad0 [ 1480.494229][T23805] integrity_kernel_read+0x7e/0xb0 [ 1480.499850][T23805] ima_calc_file_hash_tfm+0x25e/0x350 [ 1480.505723][T23805] ima_calc_file_hash+0x1e3/0x380 [ 1480.511256][T23805] ima_collect_measurement+0x94f/0xb30 [ 1480.517231][T23805] process_measurement+0xdfe/0x2350 [ 1480.522940][T23805] ima_file_check+0xc3/0x110 [ 1480.528039][T23805] security_file_post_open+0xc4/0x210 [ 1480.533922][T23805] path_openat+0x5cd/0x2440 [ 1480.538928][T23805] do_file_open+0x20e/0x430 [ 1480.543948][T23805] do_sys_openat2+0x10f/0x1e0 [ 1480.549133][T23805] __x64_sys_openat+0x12d/0x210 [ 1480.554490][T23805] do_syscall_64+0x123/0x790 [ 1480.559582][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.566002][T23805] [ 1480.566002][T23805] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1480.574594][T23805] check_prev_add+0xeb/0xe60 [ 1480.579691][T23805] __lock_acquire+0x1492/0x1ec0 [ 1480.585045][T23805] lock_acquire+0x1d1/0x380 [ 1480.590067][T23805] __mutex_lock+0x1a4/0x1bd0 [ 1480.595163][T23805] ima_file_truncate+0xe6/0x190 [ 1480.600537][T23805] security_file_truncate+0xf9/0x1e0 [ 1480.606326][T23805] path_openat+0x1d7e/0x2440 [ 1480.611434][T23805] do_file_open+0x20e/0x430 [ 1480.616443][T23805] do_sys_openat2+0x10f/0x1e0 [ 1480.621642][T23805] __x64_sys_openat+0x12d/0x210 [ 1480.627012][T23805] do_syscall_64+0x123/0x790 [ 1480.632105][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.638501][T23805] [ 1480.638501][T23805] other info that might help us debug this: [ 1480.638501][T23805] [ 1480.648722][T23805] Chain exists of: [ 1480.648722][T23805] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#6 [ 1480.648722][T23805] [ 1480.662526][T23805] Possible unsafe locking scenario: [ 1480.662526][T23805] [ 1480.669964][T23805] CPU0 CPU1 [ 1480.675309][T23805] ---- ---- [ 1480.680653][T23805] rlock(sb_writers#6); [ 1480.684881][T23805] lock(&common->filesem); [ 1480.691888][T23805] lock(sb_writers#6); [ 1480.698548][T23805] lock(&ima_iint_mutex_key[depth]); [ 1480.703902][T23805] [ 1480.703902][T23805] *** DEADLOCK *** [ 1480.703902][T23805] [ 1480.712027][T23805] locks held by syz.0.4888/23805: 1, last CPU#0: [ 1480.718334][T23805] #0: ffff8880443ce460 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 1480.727544][T23805] [ 1480.727544][T23805] stack backtrace: [ 1480.733415][T23805] CPU: 0 UID: 0 PID: 23805 Comm: syz.0.4888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.744329][T23805] Tainted: [L]=SOFTLOCKUP [ 1480.748631][T23805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1480.758666][T23805] Call Trace: [ 1480.761929][T23805] [ 1480.764845][T23805] dump_stack_lvl+0x100/0x190 [ 1480.769514][T23805] print_circular_bug.cold+0x178/0x1be [ 1480.774983][T23805] check_noncircular+0x146/0x160 [ 1480.779915][T23805] check_prev_add+0xeb/0xe60 [ 1480.784487][T23805] __lock_acquire+0x1492/0x1ec0 [ 1480.789323][T23805] ? tomoyo_path_perm+0x2db/0x460 [ 1480.794338][T23805] lock_acquire+0x1d1/0x380 [ 1480.798822][T23805] ? ima_file_truncate+0xe6/0x190 [ 1480.803838][T23805] ? __pfx___might_resched+0x10/0x10 [ 1480.809139][T23805] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1480.814527][T23805] __mutex_lock+0x1a4/0x1bd0 [ 1480.819120][T23805] ? ima_file_truncate+0xe6/0x190 [ 1480.824135][T23805] ? ima_file_truncate+0xe6/0x190 [ 1480.829171][T23805] ? __pfx___mutex_lock+0x10/0x10 [ 1480.834186][T23805] ? __pfx_ima_file_check+0x10/0x10 [ 1480.839372][T23805] ? hook_file_truncate+0xba/0x280 [ 1480.844483][T23805] ? ima_file_truncate+0xe6/0x190 [ 1480.849493][T23805] ima_file_truncate+0xe6/0x190 [ 1480.854333][T23805] security_file_truncate+0xf9/0x1e0 [ 1480.859603][T23805] path_openat+0x1d7e/0x2440 [ 1480.864183][T23805] ? __pfx_path_openat+0x10/0x10 [ 1480.869106][T23805] do_file_open+0x20e/0x430 [ 1480.873594][T23805] ? __pfx_do_file_open+0x10/0x10 [ 1480.878616][T23805] ? _raw_spin_unlock+0x28/0x50 [ 1480.883460][T23805] ? alloc_fd+0x471/0x7a0 [ 1480.887775][T23805] do_sys_openat2+0x10f/0x1e0 [ 1480.892440][T23805] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.897641][T23805] __x64_sys_openat+0x12d/0x210 [ 1480.902477][T23805] ? __pfx___x64_sys_openat+0x10/0x10 [ 1480.907838][T23805] do_syscall_64+0x123/0x790 [ 1480.912415][T23805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.918292][T23805] RIP: 0033:0x7f1ec799e159 [ 1480.922691][T23805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.942296][T23805] RSP: 002b:00007f1ec8852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1480.950692][T23805] RAX: ffffffffffffffda RBX: 00007f1ec7c25fa0 RCX: 00007f1ec799e159 [ 1480.958644][T23805] RDX: 00000000000a4242 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1480.966596][T23805] RBP: 00007f1ec7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1480.974550][T23805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.982763][T23805] R13: 00007f1ec7c26038 R14: 00007f1ec7c25fa0 R15: 00007ffecf725b78 [ 1480.990719][T23805] [ 1481.208457][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.210277][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.210385][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.210465][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.210554][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.210633][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.210819][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 1481.852674][T19719] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.874942][T19719] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.950861][T19719] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.046416][T19719] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.240022][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1482.247204][T19719] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 1482.247235][T19719] mac80211_hwsim hwsim46 wlan1: left promiscuous mode [ 1482.247352][T19719] bridge0: port 3(wlan1) entered disabled state [ 1482.248308][T19719] bridge_slave_1: left allmulticast mode [ 1482.248324][T19719] bridge_slave_1: left promiscuous mode [ 1482.248407][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.262327][T19719] bridge_slave_0: left allmulticast mode [ 1482.262348][T19719] bridge_slave_0: left promiscuous mode [ 1482.262446][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.370575][T19719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.383865][T19719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.398660][T19719] bond0 (unregistering): Released all slaves [ 1482.422168][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1482.444522][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1482.514238][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1482.659694][T19719] hsr_slave_0: left promiscuous mode [ 1482.665859][T19719] hsr_slave_1: left promiscuous mode [ 1482.666390][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.666405][T19719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.679541][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.679561][T19719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.694881][T19719] veth1_macvtap: left promiscuous mode [ 1482.694907][T19719] veth0_macvtap: left promiscuous mode [ 1482.694953][T19719] veth1_vlan: left promiscuous mode [ 1482.694993][T19719] veth0_vlan: left promiscuous mode [ 1482.802585][T19719] team0 (unregistering): Port device team_slave_1 removed [ 1482.810176][T19719] team0 (unregistering): Port device team_slave_0 removed [ 1483.146442][T19719] IPVS: stop unused estimator thread 0... [ 1483.427755][T19719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.446524][ T5266] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1483.459140][ T5266] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1483.468177][T19719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.486853][ T5266] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1483.498643][ T5266] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1483.513539][T19719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.565520][T19719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.690210][T19719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.706261][ T5266] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1483.717665][ T5266] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1483.734576][ T5266] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1483.746668][ T5266] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1483.758577][T19719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.809839][T19719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.863153][T19719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.974771][T19719] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1483.974823][T19719] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.986241][ T5266] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1484.014607][T19719] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.014654][T19719] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.039358][ T5266] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1484.056281][T19719] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.056335][T19719] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.069323][ T5266] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1484.097127][ T5266] 8021q: adding VLAN 0 to HW filter on device eth33 [ 1484.119710][T19719] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1484.119763][T19719] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.221446][T19719] bridge_slave_1: left allmulticast mode [ 1484.221487][T19719] bridge_slave_1: left promiscuous mode [ 1484.221589][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.234210][T19719] bridge_slave_0: left allmulticast mode [ 1484.234230][T19719] bridge_slave_0: left promiscuous mode [ 1484.234340][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.259933][T19719] bridge_slave_1: left allmulticast mode [ 1484.259963][T19719] bridge_slave_1: left promiscuous mode [ 1484.260338][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.284670][T19719] bridge_slave_0: left allmulticast mode [ 1484.290520][T19719] bridge_slave_0: left promiscuous mode [ 1484.296429][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.309530][T19719] vlan2: left allmulticast mode [ 1484.309560][T19719] gretap0: left allmulticast mode [ 1484.314525][T19719] vlan2: left promiscuous mode [ 1484.314540][T19719] gretap0: left promiscuous mode [ 1484.330803][T19719] bridge0: port 3(vlan2) entered disabled state [ 1484.338010][T19719] bridge_slave_1: left allmulticast mode [ 1484.349386][T19719] bridge_slave_1: left promiscuous mode [ 1484.349513][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.364896][T19719] bridge_slave_0: left allmulticast mode [ 1484.364921][T19719] bridge_slave_0: left promiscuous mode [ 1484.365026][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.388239][T19719] bond_slave_0: left promiscuous mode [ 1484.393978][T19719] bond_slave_1: left promiscuous mode [ 1484.563859][T19719] batman_adv: batadv0: Removing interface: gretap1 [ 1484.675816][T19719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.685251][T19719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.695189][T19719] bond0 (unregistering): Released all slaves [ 1484.704706][T19719] bond1 (unregistering): Released all slaves [ 1484.715136][T19719] bond2 (unregistering): (slave veth3): Releasing active interface [ 1484.723814][T19719] bond2 (unregistering): Released all slaves [ 1484.736419][T19719] bond3 (unregistering): Released all slaves [ 1484.778424][T19719] bond0 (unregistering): left allmulticast mode [ 1484.784760][T19719] bond_slave_0: left allmulticast mode [ 1484.790403][T19719] bond_slave_1: left allmulticast mode [ 1484.797140][T19719] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1484.807435][T19719] macvlan2 (unregistering): left allmulticast mode [ 1484.821400][T19719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.831047][T19719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.840766][T19719] bond0 (unregistering): Released all slaves [ 1484.851295][T19719] bond1 (unregistering): Released all slaves [ 1484.894749][T19719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.904655][T19719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.916301][T19719] bond0 (unregistering): Released all slaves [ 1484.999011][T19719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.015579][T19719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.025638][T19719] bond0 (unregistering): Released all slaves [ 1485.032739][ T5266] 8021q: adding VLAN 0 to HW filter on device eth34 [ 1485.137551][ T5266] 8021q: adding VLAN 0 to HW filter on device eth35 [ 1485.138262][T19719] : left promiscuous mode [ 1485.209791][T23871] EXT4-fs error: 155 callbacks suppressed [ 1485.209833][T23871] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1485.234970][ T5266] 8021q: adding VLAN 0 to HW filter on device eth36 [ 1485.235665][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm dhcpcd: iget: checksum invalid [ 1485.265259][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 1485.267943][T23873] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1485.269231][T23874] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1485.281793][ T5266] 8021q: adding VLAN 0 to HW filter on device eth37 [ 1485.282950][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 1485.286939][T23875] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1485.322444][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #125: comm dhcpcd: iget: checksum invalid [ 1485.366538][T23876] EXT4-fs error (device sda1): ext4_lookup:1787: inode #273: comm dhcpcd: iget: checksum invalid [ 1485.408342][ T5266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm dhcpcd: iget: checksum invalid [ 1485.636358][T19719] hsr_slave_0: left promiscuous mode [ 1485.641794][T19719] hsr_slave_1: left promiscuous mode [ 1485.642450][T19719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.642907][T19719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.664778][T19719] hsr_slave_0: left promiscuous mode [ 1485.671038][T19719] hsr_slave_1: left promiscuous mode [ 1485.671497][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.671512][T19719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.692362][T19719] hsr_slave_0: left promiscuous mode [ 1485.697830][T19719] hsr_slave_1: left promiscuous mode [ 1485.698246][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.698448][T19719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.719951][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.727356][T19719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.738771][T19719] hsr_slave_0: left promiscuous mode [ 1485.744541][T19719] hsr_slave_1: left promiscuous mode [ 1485.744902][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.744915][T19719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.750210][T19719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.750222][T19719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.780859][T19719] veth1_macvtap: left promiscuous mode [ 1485.780896][T19719] veth0_macvtap: left promiscuous mode [ 1485.780946][T19719] veth1_vlan: left promiscuous mode [ 1485.780982][T19719] veth0_vlan: left promiscuous mode [ 1485.802384][T19719] veth1_macvtap: left promiscuous mode [ 1485.802424][T19719] veth0_macvtap: left promiscuous mode [ 1485.802484][T19719] veth1_vlan: left promiscuous mode [ 1485.802520][T19719] veth0_vlan: left promiscuous mode [ 1485.824962][T19719] veth1_macvtap: left promiscuous mode [ 1485.830596][T19719] veth0_macvtap: left promiscuous mode [ 1485.836144][T19719] veth1_vlan: left promiscuous mode [ 1485.836188][T19719] veth0_vlan: left promiscuous mode [ 1486.109555][T19719] team0 (unregistering): Port device team_slave_1 removed [ 1486.124466][T19719] team0 (unregistering): Port device team_slave_0 removed [ 1486.201095][T19718] smbdirect: ib_dev[syz0] removed [ 1486.249992][T19719] team0 (unregistering): Port device team_slave_1 removed [ 1486.264771][T19719] team0 (unregistering): Port device team_slave_0 removed [ 1486.389565][T19719] team0 (unregistering): Port device team_slave_1 removed [ 1486.405047][T19719] team0 (unregistering): Port device team_slave_0 removed [ 1486.517408][T19719] team0 (unregistering): Port device team_slave_1 removed [ 1486.530857][T19719] team0 (unregistering): Port device team_slave_0 removed [ 1487.466314][T19719] IPVS: stop unused estimator thread 0... [ 1489.011949][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.012010][ T1309] ieee802154 phy1 wpan1: encryption failed: -22