last executing test programs: 6m35.204613603s ago: executing program 32 (id=72): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r1 = dup(r0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x555, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x9, 0x4, 0x1, 0x1, 0x0, 0x3, 0x0, 0xfff, 0x7ff, 0x1, 0xcba, 0x0, 0x7, 0xfffffffd, 0x0, 0x2, {0xfffffffa, 0x8000}, 0x0, 0x7}}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000001c0)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x5, 0x0, [{0x3c4, 0x0, 0xd}, {0xc0011032, 0x0, 0xca8}, {0x0, 0x0, 0x8}, {0x185, 0x0, 0x4}, {0x580, 0x0, 0x1}]}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000280)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0x401, 0x0, '\x00', {0x0, @reserved}}) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000400)={{0x3, 0x0, 0x80, {0x4, 0x3000}}, "a2deef6d1615df6eec773d176332c270ae11f16a5d8653e845c6188313e74ebf03271eaa39a0e19ada2566089f3c71fcb454056506716c958d700123c75cea3cf66dea4cf777b4d41be7f646689752749838a706050d35e91cb524920cb578a83415e3b1b65590fa34ab433a10c0689fdba0787a790bfec891faa3d38764dfbb5e450da2e60bee67b21079017ec410b55ff79bb7d689bc004acad9f133a39c93a0753bff7b65cf3478c6978dda7b0075564eedda18dda9b6a1be6f49d1574f84ccab3b5fedc1dda4804b4f77e54a80f367101bf057051331ace403e4a48022c47c14ba89a0488b40e1b392869c925280f80a9fcc2af4a4356107b5ccce6338c2c71a284eedc812407df8db67d9c51e3244a31b2898a7cdd9f49c9cc36a2d635f8df6f00c67579d6d0040e5bfbb1427161392436b21010732c0eac54afc533b7ef25d9159d170a0275130ac6cded77c53f2b22e709d10059300bb6a4fa5fc4b9e9f551505ae0174778de8bc51b1e441c36cecb0928b30c8d08b0e9bb897d080af9d7e26b66b87e9203f9f81872fddcd9dc49fbd079739416b65bc85a9c15e418f122bc99a4fd4480bf3593861c10773fe97361c60c763a9a15b2d1756eda9cddce1ad5ffa13b119c5beba5e3bc021dc12a40b488c2dd01e0a88cc3c4e6bcf5308eb16854475b28e1cd934c273d92faac2767124d4142be570c9209dd3e6d25de18bcdc3a5e6323762eb42b49a933b86091007bee28f71e0d24cf3e373248b112a9bf66e47ebdd1daca9c847d6c23f5f496e7375c2f79e5c9f408f92a24e193bee110defa8233d347860693854e876db4ee5e989aea1aca6d5d1af30aab54abf1f31e22044857d7ef10b3ed3cd82686cf9b091bf738c02eab93da66bcf3800a345ea8a96ea326ccaa3f5f2163bf409cc3403a2e32c28d71d769040c348e41919c30aaeecb57f4b0d5c535b02ee4113d3d9c7b932cea784bd65c118eb44173ab0a8137ae8d2b6575ede4d9e6727175548a97d5928d8051279abbf618ee59fa0dd3b58b2ad2f981c38d01b01cdba127b84b3ff86ce5bce32b3d8e6b225f61676c34b38b1709f3ae4605d3760ae774fe648b33079a7dc828fe8d8215b8b85f1e3c052b54b66aba36d15611e9c6bc9bea57f783bb7e7c54cff0ec991acadeb56e503dc5d29fc150b82df3d52d3162f34a09933f8b0d9199cc8729580153606b72138a3690e377677b3ec23ceac17096fd47d03c34d0ab8ec5356738ea7013efbe5c7faf0a19d27ca2970eafa236527e45f17b7d72ef6b8ec399f8a8ebb3c128f3087be9295fcb59dc9ff6ea63daca120606d0c76381f89c584df0e17beaba8ea8cb2732edcbfe1d01cfc4b4d7d699d2859fd1c95c40c73027f28e9ece956fff89805e627a3109360ee32b84b40e9bdc36c3da1da16b94568d9889d8da0ab8f19540b96dfc9201e30163da6321e14e7fd8a745a8154123703e485bc8b4eb79b211dc329619073bb8d9c54a7937f964ba7cdf5645efed8947cc1789e2d5aebd69811ad6a8fc0fc5c78da1be8fe541f861b01a77a4d82fe1141f0f2a95df0a6fc0292822501bc56bf4bd32b5ed734b0c9423d2b48aa27f0c7e758853917b1203c9581fe19fa3194f6950900ff3bd57ec47d5b2f366d666395c526c9b07a8dc5b4401f4d28c4c6d71af521b1fff4c61025886a7e6da81b449d61449ed01ed7e762ecdf809fee967da5064476ea4ceb8b2d1157866204ee4f4be3bbd63af1b94ca19ecc9ee8a72baf3fe0cd221ddc03244b08c4cd08880bd0396b7d65c3f90e89cdd7dc304850c7cb39917636dbf8908eeca3ed2dd2501197c8a3ee7bfebe1e632c21ad3288d46a27c98f61c2d25bf376cff16ac64183896978cd07471309216536ec84084e160c2d70b0b492939ffb15fd521dc5adf05e1cca8e2bb3029a234a36fdde4ddf2bbe2138f5a24e290a0c68f6e34a45b29ea899d84e34ac4cb963baa1ac0290e09410d39434fdb9a3d5827bdee114fa39d0e1f7e1f5a3d392abe8c1d5a981378c606a7c6f17a5641c8390bcfa54da5346d99ddf74e268b631152bcdc746c10de77bdf92bb504e686c7d35e157366ae344ecf94f6af85cb704924e298713d8517704a2151a7454a6d05d57e03001b58375179ee39b787f58b0d91815b37b90835f9e85c06d026aec0c00a5b0a92e44e9a7816f5091be71844e99a338797955605caf10f368e59f39c97b27bc8b851fcac74de1dd2948b74bafbbb2f26e67f650ede5931dca6700c09254f3de28a22926e364d051964a385120334b8a2f515eb4a476117c4ce1ccd1e521af0b48c07238cf333ef6251c7b5eda78c1a88913a773a74311642775a3dc3fcc50ae616fa267eede6ca54f55ad9be6fec05913f08e7e89facc3d6fbc108bd1e6cb6fdcd750fb850f5e7bbd600a4ec20c2a8dbe8dd6ff54022f5c2b480dc68e66c5f40f05720ab70f6ba67913d6877f1e9d7176d83583dd7581efe473f85bf3da1112a7e3420fbfdd6737db413e04205d230c21504edd473beeb8d9bc2a7e4c76e93e9e1efafd2b7be22221b2a13a0ae3e7089d89afe3d73eff1457d6355cd03925d149d0ffb8644bff5bd724bbd92b83c8c95a57230771f3fc20bef76ad527b2e0fdfb3234ffd9f9b6cc8948cdc3b9a0dec1b505d37276aa2f09e30c811349b0c2382d1c7f3004b60eda1f3b5dca900484db2cf6f3fb0d395a078586df4eb9cdee9099f3dae9f630ac8a312ebcb7e56132869be677f07dfa0cdd5503e8403be213beac30b53c6fe71797cc9a701226f531016dbb242f27433096715fae3458ce74207109d2899dfd9b08ab60f55a80f12066a11296529ec8e200db76cd7a5d01997c538bd26f53bf6d63e488468a07dc9be6bb281bcf6f2959d74f80a55a88b11a1e60fba395b7e41b639b41735c947744b185602be2790a0d9e736f1a0eb840c43e3e076df3d0d08d690db38e39ef1f62ade5222276bc076019d02bca8b378364f9ca0fdb981e0fd798993e4f1bae40c894798bb6949d5eb924cff334d9c35f5088f0f9ee7bf3e6fbc1c85591cfadede93bb1837cdce014a976bfbf752646b8c00f604bc0bb48ee17844f3dd18e0a6bbf5df88f43c8ce8a4e77f232ee4f0bd93f5a29c50d5b544d4ca2278d540873876c42100ae45ab280646478986c5533d5007ac2dff3f363663955b2ecbd88ac1a76fe34187c79cdae61c37d4e3c3427d0a082d5437985310b6d31568812b3781e5bad6ce10a5c6a20fddd1ff4141871d24c78be0c24a0decda5163759cf6767b23ed9ab37faf797e74146aba90801c2596c54b6f76ae3f1e5b187b249f7992c55b23b17748a4b6951bf71dd050f811400310a902832e153243e3c5a0e30eae95b8f854a19ed22d40dc8b055c3bc9b91987e67b27489e10f8080dbd6702e3fbdab67ed119fddc5b9f2fa5297fdb16209d2bf330bb13ce127df70809a7a99a0aa0f811a67845332ae440fd57bba12f941eb69ba8f2c8f1cc18457d7bfbff5a8efe99af460fc378305845730afa9a19eb935bf9a5f903be910c05a839fd563fd5ab7b12d70b5da012dbe6dbfdc913b77559bab10f10e0273aa7a3893f13a05229559563b684d34f7803ee8c3353ec84d958cdd07de221d794381b7c9788f073a0da2d4b933e23c4ce30f631676e68d2836dcd3b0e27ec198f433efeca7a00388f3e2c00d664c4a09acd4e58dfe7fc4549bc6d105c6e9e3de0ad7b4a3fa2490165eb0e7ed33abf8a10badfb8ebd0069b89b0379f081edaea407ef7063f2c81f5113d64903c7de5602ec1c1ef44af07ee68081eaa5f57f93ad95475c08052537a0816c7fa4562e27f8e887f941ac6506d0240e094c29421c724286dda813cad5c13a0a7fe24645c02c7a7aa826cbf498b80740718bee4f782a6a0145208540784f8ca271711edb6c1bfeba371a4214fcaab61ac71179307122ef4443bdfcae2046e215f8a3a035d7d0fdf9f12bc5e08910fbd5b4800075a88845cce010518a463cd402cfee11c27cd0faa7e52f62e4e53b100e1d969827d69fb21c651603346e3a42adda08c95ff88e4656f66d3ae3d52b5893649651e0d27b1419063b1610333c73f6743ee7d1454dfe07b4d4980e3c01e9aa28a5f9574bd76fb0c433e78c67d06bdadc25277ce5468b48361b0cfacae2aa802afffa32c148e89da4d13e418aab3c32bd011980cafdff55b9390d15a74ba1b37610cd880f7b1d27c45350dc4fef2cb39453651665f1800a36326cd0666759b8713157d027d0acfb557f97f93356646e2e832bcb15311d6453dc1d37a282224bd57d225abd93fa6e3ad295dbb5a6ba38342f96cc621f67fe19bf780fa761314cd087d02f51985554d1b0eaba8879fa96c9157d38f9ae0d9dfd8fb9f2280072949d2e7e4cac8d90552b8405c5e23ff3c13b8d4c7228035e20db42a83eabc4d5edbdcb17cbd2a2087fe9e8a73f066b84afcfcde385d852bafddc3b79df5dc8c950fd5261054a89ceb5d12c64a0484aa4be635c8836a42ee7d3c63a1974b49eac3f8abea3e814da7a7b35ddbc1082bdc46a8d914c443b6d1ccd2ba250029625720e3884ebfd5ed5d4b4f9b35d9d2c05fb88a0a9bbc5291a2819b58154b994ebf2a6a4154114ba6de1f06e29fb8c217a3da2bc3910add313edcbefa06f16e0b3d74e142302be78ab79796c590155d824eea2f02bab4a53a61bf3b0e7379bacd9b5c3845d72b23fa4a545a72c8a4dd0e26cb02f17cd905bcc13fe7b9ca483738fba6c22b864f56363af52bd83d03242b5a2e305bb0aea67aa47c86f6e990170985abbd3b5bdbd951847a1ded8f0c8848edacd905d00ee9bcf9cfaaaaec930500140392fd0438c0e1d1e9b0d2dc5c01b32cb983e0f14ded54431b3e5331149db5858c155fc845ed6574b4de9c96e88aef74b8647531d9b775b3071e86fc1913bdb502901df711ec05087230841b2833e091be64c1f55304a5ddc888892c1999f16af242e9a01069c99caec4c9d0ebb8900c5cfcbcb92275a46b6170c7b23c56eccfa67a2b76bd1f6bbb1919c2ee2f9c11ce695502ea4cdbc770032b27a6ea9a07ad764b2bdb4bbc670cddf4700c3868bd88d4917ea74d7a4bfafdc7713fdf0b52a9adde286e7f46108c8697d1296d8d9d7fee8f04d83792680c8032fdbbb73b4640078612815c77e6219829a044a4ea82ad08eea698220ddfd17616056e7982ab5daaa55618c5287f1246daa956951a94b980a4eac083d3b1bba1c2bc720eec08ec668c6bc5bc16b669a5c38eaf9f389ce1a944ea26ead623478278f91071a4c84e408525f1ff03e80db1a598fafc7fdc08a20f7e4644a707b4d645e8221104c075a1938ae249fba1913aeb5ec320ae444d41381b6d0a535846c91276512c35a363f508d6fb4a601d5c1ebf5c88ba682333688f9effca73f1288dc33ed30781f332a1e193b2b02a2902cf9e510189bae9c02780e6d83ded5ee8983619cb957717e7f315f58fe2f4585b01d06729f1e6bf3cd5717f233ba084ed4b809ec29768cb126120cf30cfc24a0fa355d31309397a306f0a40c72686d9956c969d1a0f7285ded55ec5c1cc1c58342be8eeaa4b87a966509c123f1e81f9aefa0094f18dde164b7bac3b3a26ca0eb6e78a0fbf963a36372cb23d1a7c36bb32e09cbd2ec698ce389ed490c5f04c5aad65600805a8ca826517566534ebabfdb7a86c822c0ffc93dfabaf03a7173678f165b9224433c4218a098284d8cfae4ebcdf8e2c6360d633d062a0f0614a7fc81d1565a96edc1baa5bd87a4ab0b2c023246", "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"}) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002480)=0xffffffffffffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x8000000000000001, 0x50000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002500)={r2, r3, 0x4, r1}, 0x10) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000002540)={0x800, [0x8, 0x1, 0x9, 0x6, 0x5, 0x8, 0x800, 0x0, 0x2, 0x6, 0x2, 0x3ff, 0xe53, 0x9, 0x8, 0x8, 0xfff8, 0x8f46, 0x3, 0xe6, 0x1, 0x9, 0x3ff, 0x7, 0x29, 0x5, 0xb7, 0x2, 0x1c6, 0x5, 0x1, 0x3, 0xac, 0x5, 0x7, 0x1223, 0x8, 0xaa2, 0x2, 0x7, 0xe, 0xe00, 0x5, 0xc, 0xffff, 0x6, 0x8, 0x8], 0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000025c0)={0x0}, &(0x7f0000002600)=0xc) ptrace(0x11, r4) fcntl$setstatus(r3, 0x4, 0x400) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000002640)=0x1) shmdt(0x0) pipe2$9p(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180800) write$P9_RREADLINK(r5, &(0x7f00000026c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000002700)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002780)={0x0}, &(0x7f00000027c0)=0xc) rt_sigqueueinfo(r6, 0xa, &(0x7f0000002800)={0x2b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000002880)={0x1, 0xffffff7f, 0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000028c0)=0x3ff) dup(r1) getpid() bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002900)={r2, r3, 0x0, r3}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) 6m23.997944619s ago: executing program 33 (id=37): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x74, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xff, 0x1, 0x400, 0x0, 0xde1, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x6, 0x1, 0x98bb, 0x3, 0x9b9, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x74}}, 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140d01800a00010072616e677a000000040002800900010073797a30"], 0x108}}, 0x0) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r4, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0x80, &(0x7f0000000100)="807761b8a0cbe90fcad3506e5625829a92036d55d6c6a5c7384b6ce62b045563135d7b764b979d1751eb0a53032ada03bf2d8a1123a77060ea4ec0acfe0b85f64baec87f", 0x44) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000740)={&(0x7f0000000000)={0xa, 0x4e22, 0xe6, @private2, 0xff}, 0x1c, 0x0}, 0x20044081) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r4) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x44005) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480001) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0xc00, 0x80600}) 6m22.838239782s ago: executing program 34 (id=47): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m16.852352559s ago: executing program 35 (id=212): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m14.92835037s ago: executing program 5 (id=226): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xb}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (async, rerun: 64) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') (async, rerun: 64) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000400), 0x1000) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff116000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) close(r0) 6m14.629423588s ago: executing program 5 (id=232): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x19}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xb15}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x96}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x4000000000003) sendfile(r6, r7, &(0x7f0000000100)=0x6, 0x100000000010001) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x2}, @my=0x0, 0x3, 0x7, 0x7, 0x2e, 0x0, 0xfffffffd}) 6m14.564282772s ago: executing program 36 (id=232): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x19}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xb15}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x96}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x4000000000003) sendfile(r6, r7, &(0x7f0000000100)=0x6, 0x100000000010001) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x2}, @my=0x0, 0x3, 0x7, 0x7, 0x2e, 0x0, 0xfffffffd}) 6m13.473612423s ago: executing program 37 (id=243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r2, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800620"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800620"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6m10.291188524s ago: executing program 38 (id=277): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 6m8.472159286s ago: executing program 39 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x10}}, 0x14}}, 0x0) 6m7.370595401s ago: executing program 40 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001006970366772659661700000000400028008001f000b000000"], 0x40}}, 0x20004880) add_key(0x0, 0x0, &(0x7f0000000500)="f876c4dd3f078bbd60b0910f2039e4c7a65b926313188f8609bf2d23", 0x1c, 0x0) (async) r4 = add_key(0x0, 0x0, &(0x7f0000000500)="f876c4dd3f078bbd60b0910f2039e4c7a65b926313188f8609bf2d23", 0x1c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a0007215000008009f000d000000080026000816"], 0x40}}, 0x200040b4) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a0007215000008009f000d000000080026000816"], 0x40}}, 0x200040b4) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r9, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r10}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r11, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) (async) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r11, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = dup(r13) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r3) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200"]) (async) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r14, 0x6f) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b201664bd37d5e1dcb2f64ec074a225ac13a89be79e2bd5bdcd8cffc5ee0512dfe666423022c73264aee90673292872b9ed8e53787dcf53322f00", 0xfffff, r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="fffffb5cb5bd02d47f6fcf593d9d3881e889efc4a835bffd283654f8938c176c7d18d165ac4727d1b02e4f253d30888a04e37090427a859fafce34f14a1848060c20043b6c2c353fad45ded1c7dfcdc7c379a56996c11fbc8445b2dbc34c4627ba941f9ba340c4b0f6d9a51e90586a34202d7eb7fda246f174c7d97777834d634b36c6099254a3435c500280f7b657602b7e2dcb3fafeeafb4bd1a6ce0f271c623", @ANYRES16=r1, @ANYBLOB="0100000000000000400001000000000000000c410000004c0014fffffff073797a3100"/98], 0x68}}, 0x2000c000) 6m6.145330908s ago: executing program 41 (id=299): r0 = socket(0xf, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) shutdown(r1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(7\x00') 5m57.52069318s ago: executing program 42 (id=335): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x19}, 0xb, 0x1, 0x2, 0x9, 0x6, 0x4}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0x9, 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x8c23e1bb00d9928b) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0xfb, 0x1000}]}) write$ppp(r0, &(0x7f0000000200)="7489", 0x2) 5m57.25425467s ago: executing program 43 (id=339): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x0, 0x6, 0x4c6b, 0x204c6, r2, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_master_gpio_break\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r2, &(0x7f0000000a40)="0b4ad768"}, 0x20) 5m54.159977686s ago: executing program 44 (id=349): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="1c7b52d16b82ba32612652ace91bba942d0ad045028f3f7ed8de19ef12a770241064d2a7457ffc337a13506bbdb59d705e37dc3de9d2117f52bd4ade7b3c43ec9d0f14e8f6dd69d18f1c57bc5b6eaa36829fda7097e55d89a1e5023c6901b9833bbf1650ec63f800"/117, 0x75}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18, 0x8000}, 0x0) (async, rerun: 64) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async, rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"}) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/122, 0x7a}], 0x1}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async, rerun: 32) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000002000/0xf000)=nil) (rerun: 32) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m53.371764421s ago: executing program 45 (id=356): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f"], 0xb4}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x6) r2 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0xb, 0x8, 0x101, 0x1, 0x8, 0x81, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x6, 0x1, 0xeb]}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x2710}, 0x14, 0x8000, 0x7}, {{}, 0x11, 0x9, 0x9}, {{r4, r5/1000+10000}, 0x2, 0x4, 0x9025}], 0x48) close_range(r0, r3, 0x0) 5m50.95046321s ago: executing program 5 (id=336): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0xfffffffc}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5m50.839917918s ago: executing program 5 (id=358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @mcast1, 0x80000000}, 0x1c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) umount2(&(0x7f0000000000)='./bus\x00', 0x3) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) prlimit64(r4, 0x0, &(0x7f0000000100)={0x6, 0xa54}, &(0x7f00000001c0)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}]}, 0x50}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5], [0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x2]], '\x00', [{}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5f08, 0x6}, {}, {}, {}, {}, {0x4, 0x8}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$cgroup(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x1, &(0x7f0000000540)={[{@none}, {@release_agent={'release_agent', 0x3d, './file2'}}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@subsystem='cpuset'}, {}, {@xattr}, {@favordynmods}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@uid_eq={'uid', 0x3d, r9}}, {@smackfsdef={'smackfsdef', 0x3d, ')&.@\\],-/:{*'}}, {@flag='mand'}]}) sendmsg$nl_netfilter(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000000c0)=""/178, 0xb2}], 0x2}, 0x17ba}], 0x1, 0x20, 0x0) listxattr(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0) 5m50.827278081s ago: executing program 5 (id=359): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x40012020, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x40012020, 0x0) unshare(0x62040200) r1 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x6, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_TXQLEN={0x8, 0xd, 0xb2d}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1300d}]}, 0x44}}, 0x0) close_range(r3, r2, 0x0) (async) close_range(r3, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) fspick(r2, &(0x7f00000000c0)='./file0\x00', 0x0) (async) fspick(r2, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x4010) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}]}) (async) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}]}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x2, 0x81, 0x7, 0xff, 0x3, 0x3, 0x7, 0xf7, 0x38, 0x2a0, 0x7, 0x6, 0x20, 0x2, 0x3, 0x7c, 0x5}, [{0x6474e555, 0x7, 0x6, 0xe25, 0x8, 0x1, 0x3}, {0x70000000, 0xf, 0x4, 0x10000, 0x2, 0xf46, 0x1, 0x8}], "0879573fecdd1d36b1be6c3df088299ffb4aee534070fca24bbb94ce3a04e177a9dbfe8e2b50d53ead4317455f1290b134a4b2e6f4b271d89734c0b7692cbaddf771f0683d354871faf96bddb8b462850b6b904ec591a0664a05faea73dc63dce1d114d39309c6f3246629", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6e3) 5m49.740008011s ago: executing program 5 (id=360): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800194f644e37908ea0412c4867af65c4e9b7c57418124e15080500002830f0bfdd650c972a1b96c6c16d753f8edc", @ANYRES16, @ANYBLOB="05002ebd7000fdffffff4400000008000300", @ANYRES32, @ANYBLOB="0c0023800800150085000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbc2356400000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400085c}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 5m49.727546214s ago: executing program 46 (id=360): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800194f644e37908ea0412c4867af65c4e9b7c57418124e15080500002830f0bfdd650c972a1b96c6c16d753f8edc", @ANYRES16, @ANYBLOB="05002ebd7000fdffffff4400000008000300", @ANYRES32, @ANYBLOB="0c0023800800150085000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbc2356400000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400085c}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 5m44.239725785s ago: executing program 1 (id=407): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m43.51949146s ago: executing program 1 (id=409): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0xc5) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_io_uring_setup(0x4faa, &(0x7f0000000140)={0x0, 0x6835, 0x2000, 0x1, 0x208}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x1, &(0x7f0000000240)=[{&(0x7f0000000400)="cc1ce7032eb1a9c604dc42cd7fb8249770a6a8e156d72c58650c89e94a5064611de036be463fa83a00882e0252cdcabf206b387f1f2ae662a33b6b3eacc52c48a19bf4a1eec8f8bd6b4fc49d0e608a4d2cfebf3f464d7b7d0ded371349c9870ea7589f26a65d7653174d3c3af153d87263f4a3f2c604b537cac457da4d2c868e58aaca4b6f2e9b5f6dd1be6353d6bc94c7d525dbb66eeae6405b0d40e7d5843a68966a2e274ad3626cffac3dbfcbe665af0fb95184bf637db4d422444b6c891edc8de2c90f8fdc73c95df57ba92e607ab6519788ed171dec7820ac291a685eff11cfb4", 0xe3}], 0x1, 0x2, 0x1, {0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf251b00eb0008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0xc5) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) syz_io_uring_setup(0x4faa, &(0x7f0000000140)={0x0, 0x6835, 0x2000, 0x1, 0x208}, &(0x7f00000001c0), &(0x7f0000000200)) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x1, &(0x7f0000000240)=[{&(0x7f0000000400)="cc1ce7032eb1a9c604dc42cd7fb8249770a6a8e156d72c58650c89e94a5064611de036be463fa83a00882e0252cdcabf206b387f1f2ae662a33b6b3eacc52c48a19bf4a1eec8f8bd6b4fc49d0e608a4d2cfebf3f464d7b7d0ded371349c9870ea7589f26a65d7653174d3c3af153d87263f4a3f2c604b537cac457da4d2c868e58aaca4b6f2e9b5f6dd1be6353d6bc94c7d525dbb66eeae6405b0d40e7d5843a68966a2e274ad3626cffac3dbfcbe665af0fb95184bf637db4d422444b6c891edc8de2c90f8fdc73c95df57ba92e607ab6519788ed171dec7820ac291a685eff11cfb4", 0xe3}], 0x1, 0x2, 0x1, {0x1}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf251b00eb0008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 5m43.449995378s ago: executing program 1 (id=411): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000814}, 0x480c5) 5m43.369329667s ago: executing program 1 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040005000000", 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000080)=[0x3, 0x4], 0x2) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000040)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='v7\x00', 0x1f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000100a000084"], 0x48) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)=""/162) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r4}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) 5m43.238841149s ago: executing program 1 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) umount2(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,mmap,cache=none,cache=loose,posixacl']) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 5m43.178606788s ago: executing program 1 (id=416): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='exofs\x00', 0x6, &(0x7f00000000c0)='*]&\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000380)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r7 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0xa}, [{0x2, 0x4, r0}, {0x2, 0x4, r1}, {0x2, 0x7, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x1, 0xee00}], {0x4, 0x1}, [{0x8, 0x0, r6}, {0x8, 0x1, r7}], {0x10, 0x5}, {0x20, 0x4}}, 0x64, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000600)=""/68) getgroups(0x4, &(0x7f0000000680)=[r2, r2, r6, r6]) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x100, 0x20) unlinkat(r9, &(0x7f0000000700)='./file0\x00', 0x200) write$P9_RREADLINK(r8, &(0x7f0000000740)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f00000007c0)={0x2b, @broadcast, 0x4e21, 0x2, 'none\x00', 0x1, 0x1, 0x69}, 0x2c) mount(&(0x7f0000000800)=@filename='./file1\x00', &(0x7f0000000840)='./file1\x00', &(0x7f0000000880)='ramfs\x00', 0x400, &(0x7f00000008c0)='exofs\x00') mount$9p_fd(0x0, &(0x7f0000000900)='./file1\x00', &(0x7f0000000940), 0x157000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_user}], [{@smackfshat}]}}) read$FUSE(r8, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000002a40)={0x130, 0x0, r10, {0x4, 0x80000000, 0x0, '\x00', {0x4000, 0x3, 0x1, 0x2, r0, r2, 0x4000, '\x00', 0x2, 0x4, 0x3, 0x9, {0x2, 0x1}, {0x6, 0x4}, {0x9, 0x81}, {0x6, 0x5}, 0x7ff, 0x3, 0x3, 0x88b9}}}, 0x130) splice(r8, &(0x7f0000002b80)=0x4, r8, &(0x7f0000002bc0)=0x3c, 0x6, 0x2) mount$tmpfs(0x0, &(0x7f0000002c00)='./file1\x00', &(0x7f0000002c40), 0x14000c, &(0x7f0000002c80)={[{@huge_never}, {@inode64}, {@mode={'mode', 0x3d, 0x7}}, {@gid={'gid', 0x3d, r7}}, {@huge_never}, {@huge_advise}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x70, 0x78, 0x47, 0x74, 0x25, 0x35, 0x38, 0x70]}}], [{@appraise}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) pread64(r8, &(0x7f0000002d40)=""/200, 0xc8, 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040844) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x74, r12, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x24}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf5}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8051}, 0x4000051) r13 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003100), 0x0, 0x0) unlinkat(r13, &(0x7f0000003140)='./file1\x00', 0x200) 5m28.159060876s ago: executing program 47 (id=416): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='exofs\x00', 0x6, &(0x7f00000000c0)='*]&\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000380)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r7 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0xa}, [{0x2, 0x4, r0}, {0x2, 0x4, r1}, {0x2, 0x7, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x1, 0xee00}], {0x4, 0x1}, [{0x8, 0x0, r6}, {0x8, 0x1, r7}], {0x10, 0x5}, {0x20, 0x4}}, 0x64, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000600)=""/68) getgroups(0x4, &(0x7f0000000680)=[r2, r2, r6, r6]) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x100, 0x20) unlinkat(r9, &(0x7f0000000700)='./file0\x00', 0x200) write$P9_RREADLINK(r8, &(0x7f0000000740)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f00000007c0)={0x2b, @broadcast, 0x4e21, 0x2, 'none\x00', 0x1, 0x1, 0x69}, 0x2c) mount(&(0x7f0000000800)=@filename='./file1\x00', &(0x7f0000000840)='./file1\x00', &(0x7f0000000880)='ramfs\x00', 0x400, &(0x7f00000008c0)='exofs\x00') mount$9p_fd(0x0, &(0x7f0000000900)='./file1\x00', &(0x7f0000000940), 0x157000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_user}], [{@smackfshat}]}}) read$FUSE(r8, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000002a40)={0x130, 0x0, r10, {0x4, 0x80000000, 0x0, '\x00', {0x4000, 0x3, 0x1, 0x2, r0, r2, 0x4000, '\x00', 0x2, 0x4, 0x3, 0x9, {0x2, 0x1}, {0x6, 0x4}, {0x9, 0x81}, {0x6, 0x5}, 0x7ff, 0x3, 0x3, 0x88b9}}}, 0x130) splice(r8, &(0x7f0000002b80)=0x4, r8, &(0x7f0000002bc0)=0x3c, 0x6, 0x2) mount$tmpfs(0x0, &(0x7f0000002c00)='./file1\x00', &(0x7f0000002c40), 0x14000c, &(0x7f0000002c80)={[{@huge_never}, {@inode64}, {@mode={'mode', 0x3d, 0x7}}, {@gid={'gid', 0x3d, r7}}, {@huge_never}, {@huge_advise}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x70, 0x78, 0x47, 0x74, 0x25, 0x35, 0x38, 0x70]}}], [{@appraise}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) pread64(r8, &(0x7f0000002d40)=""/200, 0xc8, 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040844) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x74, r12, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x24}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf5}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8051}, 0x4000051) r13 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003100), 0x0, 0x0) unlinkat(r13, &(0x7f0000003140)='./file1\x00', 0x200) 5m21.30870318s ago: executing program 7 (id=633): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x80002) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x601, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) umount2(&(0x7f0000000000)='./cgroup\x00', 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x80080, 0x0, 0x3e}, 0x18) r5 = open$dir(&(0x7f0000000100)='./cgroup\x00', 0x31b112e4fd13d5db, 0x4bd9b54b88903008) renameat2(r4, &(0x7f00000000c0)='./cgroup\x00', r5, &(0x7f0000000140)='./cgroup\x00', 0x5) r6 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x11, &(0x7f00000000c0)={@broadcast, @random="ca50dd51f754", @void, {@x25={0x805, {0x3, 0xf9, 0x17}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x28, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @NL80211_ATTR_IE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000240), &(0x7f0000000180)=ANY=[@ANYBLOB="026326d2d692144e2c69ed658287cf8d63091e87ec4975232ce96872b58874796e336fc009f07aa08aec0411f4231ec6c6786637b08d6faa558dc0e2ea336de94491999076686d30706960bf5b40c74b364425ab5b3af1c4b04404d61d30b5e3a3b339fb1cf4e46085f600755ceb7890ffe41a62196f390b"], 0x5, 0x3) 5m21.159582119s ago: executing program 7 (id=634): readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="e15a", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00\t\x00\x00\x00'], 0x2c}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1001200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)=0xbffffffc) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0xd4, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x17c}, 0x1, 0x0, 0x0, 0x18}, 0x8810) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080000000000000000000000000000000000000000000da8f08b15e540d1bcfe36bb2c6cbb15072b207ed8f75277ab7845cb597a558b2b812155425e26813718700abacce4d1890e8b89742784c903952a7ef4266749efb682f7cd2587dcccbe392dc55f355a01ae308d5f84863f1d5cd7702f7fc69e1"], 0x48) r9 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r9, 0x1, 0x29, 0x0, &(0x7f00000008c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) 5m21.026640143s ago: executing program 7 (id=638): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r4, 0x7}, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r5) open(&(0x7f0000000300)='./bus\x00', 0x169941, 0x16b) 5m20.938520104s ago: executing program 7 (id=640): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x4000005, 0x6, 0x6f03d58f, 0x1, {0x1, 0x180, 0x20ff, 0x1ff, 0x87, 0x400000000000d615, 0x4, 0x7ffffffe, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x8f00}) (async) creat(&(0x7f0000000080)='./file0\x00', 0x86) acct(&(0x7f0000000240)='./file0\x00') (async) acct(&(0x7f0000000600)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 5m20.848882731s ago: executing program 7 (id=642): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000140)={r3}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) 5m20.628785748s ago: executing program 7 (id=648): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x2, 0x3, 0xeeef0000, 0x1000, &(0x7f000096b000/0x1000)=nil}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x97}], 0x1) mremap(&(0x7f00008fc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000b13000/0x1000)=nil) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_io_uring_setup(0x114, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}) r7 = syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) 5m20.533358581s ago: executing program 48 (id=648): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x2, 0x3, 0xeeef0000, 0x1000, &(0x7f000096b000/0x1000)=nil}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x97}], 0x1) mremap(&(0x7f00008fc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000b13000/0x1000)=nil) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_io_uring_setup(0x114, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}) r7 = syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) 2m45.644909035s ago: executing program 8 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) 2m45.579713073s ago: executing program 8 (id=3203): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000140)={0x150001, 0x0, [0x6, 0x2, 0x8, 0x1000000100000000, 0x800002, 0x0, 0x2, 0x7fffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x2000493, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) dup(r2) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d52f90b9b500987f70e06d038e7ff7fc6e5539b324b298b089b0732346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801116bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb8744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea59796b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c46a348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5d2639a10477f1f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b942c1c7f12de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039e7799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2fe81ddb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec93b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadeaa57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb10000000000000004d3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157fa2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416e4872aaad8c653f52cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f426596e1cd7655b904801784c78e2724f43f1e504f6a18a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f07b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f69f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf95a06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000140)={0x150001, 0x0, [0x6, 0x2, 0x8, 0x1000000100000000, 0x800002, 0x0, 0x2, 0x7fffffff]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x2000493, 0x0) (async) 2m45.387750513s ago: executing program 8 (id=3205): r0 = socket(0x2a, 0x2, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80000) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m44.816337781s ago: executing program 8 (id=3209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1f1a00, 0x10) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x40) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00009d0000/0x1000)=nil, 0x1000}}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000040)='./bus\x00', 0xa) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) sendmsg$nl_xfrm(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c02000013002904000000000000220000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f0402011c04b5ce49bce59e1200e62e472c539fe1a2593c42b895cd480a4dd9dc1e88c3bf8aa1ab54e4b2892113631290ecff2d6c21b7199f915bc9e508be5d845c8c095e0be152c558784f34477cd2e747ef13c630ea24005f09444953afcf38f44b14d66af8c2b2555f385b0974b0952c25742f3a12fa6243dbd98bfa8db43edbea5a9413f8e0912e26146ad3c2fb2a59789d3727fd05be34497a174c29c77d9b38168bfe0502fcf6552449d367577cdf7d92c37912d284f30814f89229441cd3877564fe27efa93fe284b93489f5ea974b"], 0x7) flock(0xffffffffffffffff, 0xc) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) 2m44.75563814s ago: executing program 8 (id=3211): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x18}, 0x14) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0xfffd, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r4, @private=0xa010101}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000000002000000afac"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@multicast1, @multicast2=0xe0000300, 0x1f, "028a3f6c580629a6b301cdabff000000000000009264f7d866b1970548fc3c7b", 0xb2, 0xfffffff5, 0x6, 0x6}, 0x3c) 2m44.455931914s ago: executing program 8 (id=3218): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='mo']) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0x7f, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@any, 0x8412}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2m44.425676653s ago: executing program 49 (id=3218): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='mo']) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0x7f, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@any, 0x8412}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2m20.97749171s ago: executing program 4 (id=3538): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd7ef8df705be9a1578ec619073f661844f924df876122f68905404970c7f31084f11ccbd94876b6f5b3675c4274bacd30e6a0ab29bba201271c62ffd35868db5f3c85dcde790f7d5aefb6169e009cd59de90538b915cbfbdb9ce8078d490c18e9bb8c04247b7a1f7395dbde72822b864a1221d70da21a0197e0d02df359ae06", 0xad}], 0x1, 0x0, 0x3b}, 0x20004080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/pm_debug_messages', 0x440, 0x100) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3992}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x20040084) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000005400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000005500)={0x0, 0x0, &(0x7f00000054c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r5], 0x68}, 0x1, 0x0, 0x0, 0x240000c4}, 0x2000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00', {}, {}, 0x2f, 0x0, 0x4, 0x40}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4000000, 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}, {0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x239f, 0x7f, 0xd0e9, 0x41a, 0x0, 0xf838, 0x100]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="e7842a3e00900180c200000086dd6012000800303a00fe8000000000000000000000000000bbfe8000001000000000000000000000aa04029078000000006000081000003b0000000000000000000000ffff00000000fc0200"/102], 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x40204, 0x1041}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}}, 0x0) r12 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10) connect$phonet_pipe(r12, &(0x7f0000000300)={0x23, 0x7f, 0x7c, 0x8d}, 0x10) sendmsg$inet(r7, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0) 2m20.807715987s ago: executing program 4 (id=3541): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000a9a300ffff00000000200082b0cfc4337965941538be0200000000003823ccd8007400a391793ba7f40000000000fdf700"/64], 0x40) r3 = socket(0x10, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x401, 0xfffffffffffffff8}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000009c0), 0x4) 2m20.807420711s ago: executing program 4 (id=3542): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x1a002, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0584"], 0xfdef) dup3(r2, r0, 0x0) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f00000006c0)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x214000, 0x0) 2m20.667854629s ago: executing program 4 (id=3544): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x30109d, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x5}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.667348881s ago: executing program 4 (id=3545): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="90953149cad6"}, 0x10) (async) r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0xc0000) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @local}, {0x6, @local}, 0x24, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 'vlan1\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/psched\x00') ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000180)) (async) r4 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000200)={0x0, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e23, @remote}}}, 0x108) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x7fff, 0x1, 0x5}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c880}, 0x4044800) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2001801}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3e}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008000) r7 = accept4(r1, &(0x7f0000000640)=@sco, &(0x7f00000006c0)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) bind$inet6(r7, &(0x7f0000000740)={0xa, 0x4e24, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc9}, 0x1c) getsockname$inet(r4, &(0x7f0000000780)={0x2, 0x0, @multicast1}, &(0x7f00000007c0)=0x10) (async) sendto$x25(r5, &(0x7f0000000800)="a5c4d62da4666201a9dad04460a9dce9b0f3bd17220d677bce56ff10df937fea3e6a128da405ac6a6373dd2d6e3305f6c8ddbb7e1ced599555b832afe0a28b25e7e4f506ecf26401f55a7464152f57694c02f019652d9956c91082a3ba34603908cbb5f466", 0x65, 0x80, &(0x7f0000000880)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000008c0)={0x0, 0x1000, "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"}, &(0x7f0000001900)=0x1008) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000001940)={r8, 0x0, 0x20, 0x8ba4, 0x3ff}, &(0x7f0000001980)=0x18) (async) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xe0, 0x464, 0x400, 0x70bd2c, 0x25dfdbff, "8e13583c608ad90d841e2b5d68c05bd9b72e1b589adb4b5664b2bb6ca40b2ef5b1780ed4fd3e39ad860adf80b2b6da67931583e8f91e296e05c6568a7bc28289b51908aed8d720913388e7fca3001b638c1c2bfe79639b65ef1ee6e5195c9f6d59fd8cb77735bf4d349c115dbb691c350b9f0b403c86ff63bacd77efee3c26964f7d92d8fe16160950337d0bc8de616ce9045d9a74b0c692cdda96d66f8e77a5124d8997d93dd0936b5f381506915b6aadbaaf3568e3a27132b223c66e158e059e6eb69f4b3e5bd2f7a0c692e8", ["", "", "", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x40) readv(r0, &(0x7f0000001d80)=[{&(0x7f0000001b80)=""/148, 0x94}, {&(0x7f0000001c40)=""/6, 0x6}, {&(0x7f0000001c80)=""/199, 0xc7}, {0xfffffffffffffffe}], 0x4) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2000, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001e40), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x4841) syz_genetlink_get_family_id$wireguard(&(0x7f0000001f80), r4) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000001fc0)={0x4, 0x6}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000002040), 0x8) 2m20.407687721s ago: executing program 4 (id=3549): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) r1 = io_uring_setup(0x25ec, &(0x7f0000000280)={0x0, 0xc195, 0x400, 0xffffffff, 0x352, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r2, &(0x7f0000002fc0)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m20.367031273s ago: executing program 50 (id=3549): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) r1 = io_uring_setup(0x25ec, &(0x7f0000000280)={0x0, 0xc195, 0x400, 0xffffffff, 0x352, 0x0, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r2, &(0x7f0000002fc0)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m47.166899674s ago: executing program 9 (id=4007): r0 = shmget(0x2, 0x1000, 0x2c000101, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/31) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000173c2e5864a2fad65000000000a28000000000a010400000000000000000100004008000240000000020900010073797a300000000014000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x2004880}, 0x22002054) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x6, 0x2000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m47.09123155s ago: executing program 9 (id=4008): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x18e5c2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1000000000000004, 0x404000) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) 1m47.090891111s ago: executing program 9 (id=4009): socket$inet(0x2, 0x6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$igmp6(0xa, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2010, 0xcd02e5b54e96c93}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x880) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000004000000000000000", @ANYRES32, @ANYBLOB="455d00000000000000237267bd46e65b46012e734ed865460000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r2, 0x26c3, 0xfffffffb, 0x4c, 0x0, 0x0) 1m47.037664453s ago: executing program 9 (id=4010): r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x822b01) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000000c0)="5fabe1"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0x5ede00) 1m47.036722286s ago: executing program 9 (id=4011): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x99, "b7dfb78c11a765b452c530798e2d76164a0552ad5586520f9dd4eb170eaf946fc190915fd7551465c34c9b171e123609b1084e3dc41062512c4437d78f6584a009286ed91687dce2fda0e55d2b4484d39d2a702b6a4088b93cff9df08c25352ab2b00976849ea0bcf1cce04992db36c2e713371de3ff344e2d7bc88e67781a0b286c4a467f37d885a5b3efba6243bbf84804cb7b8d4cad4f45"}, &(0x7f00000000c0)=0xa1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344}, 0x7e35022, 0x8) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbb38100000886dd6001000800142f00fc010000000000000000000000000005fc011b0000000000000000000000000000008902", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r8, &(0x7f0000000340)={0x2c, 0x1, r9}, 0x10) (async) ptrace$setregs(0xf, r6, 0x2, &(0x7f00000006c0)="1860765114384572b2cffa9d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4e8c8cde33ed741208dd63defb87d6931e466687b52230b8e1a0f1c787d8be5c749450b350a789dcfc6b2c2a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb7b51ad0087749b4d7da1c0de182d7d8dbb395f39fe07e3bd7bdd95a801fccee106abb09076ec616a40cf3d93bebb99fe3dbaa3c20dd5d45cd9803d4a0efa6eaab5eab59773a8fb0e9d407dcd830e7c35fe93474390097e314af488e17b944b9f2ed50ef413afe9d9b85afaa99f01416fc80eefde3aaa25c007eb23f2c7a62920cd7457ee36c0e700b2b14ab65bab468d532be4b4b4ada7cd9fec18ffabec18619dfa39cfbeeafe146db312d36508f88ad2d900aec1ef05547ca75bb40ac44d3d4280aee0b8b3001027f8993f5453d98e4825926af3ad074ade2619bf39a3ab5ee9181dd6342516159251eb9e253960d423f66b6ffc2b8d0b74a1495d717d3db37526032a") (async) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000180100002800c000180"], 0x28}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @local}}, 0x8, 0x2, 0x8, 0x8, 0x1, 0x9, 0x6}, &(0x7f00000001c0)=0x9c) (async) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r10, 0x8915, &(0x7f0000001740)={'xfrm0\x00'}) 1m45.987570346s ago: executing program 9 (id=4012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}, @ldst={0x1, 0x3, 0x4, 0x3, 0x9, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m30.707165468s ago: executing program 51 (id=4012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}, @ldst={0x1, 0x3, 0x4, 0x3, 0x9, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 44.984846879s ago: executing program 2 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000100)=""/7, 0x7}], 0x5, &(0x7f0000000580)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/40, 0x28}], 0x3, &(0x7f0000001800)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/194, 0xc2}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/13, 0xd}], 0x7, &(0x7f0000002c80)=""/87, 0x57}, 0x8}, {{&(0x7f0000002d00)=@vsock, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x3, &(0x7f0000002fc0)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/205, 0xcd}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/215, 0xd7}], 0x3}, 0x9}], 0x0, 0x0, &(0x7f0000003500)={0x77359400}) 36.227221953s ago: executing program 2 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000100)=""/7, 0x7}], 0x5, &(0x7f0000000580)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/40, 0x28}], 0x3, &(0x7f0000001800)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/194, 0xc2}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/13, 0xd}], 0x7, &(0x7f0000002c80)=""/87, 0x57}, 0x8}, {{&(0x7f0000002d00)=@vsock, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x3, &(0x7f0000002fc0)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/205, 0xcd}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/215, 0xd7}], 0x3}, 0x9}], 0x0, 0x0, &(0x7f0000003500)={0x77359400}) 27.725010195s ago: executing program 2 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000100)=""/7, 0x7}], 0x5, &(0x7f0000000580)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/40, 0x28}], 0x3, &(0x7f0000001800)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/194, 0xc2}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/13, 0xd}], 0x7, &(0x7f0000002c80)=""/87, 0x57}, 0x8}, {{&(0x7f0000002d00)=@vsock, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x3, &(0x7f0000002fc0)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/205, 0xcd}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/215, 0xd7}], 0x3}, 0x9}], 0x0, 0x0, &(0x7f0000003500)={0x77359400}) 19.59426217s ago: executing program 2 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000100)=""/7, 0x7}], 0x5, &(0x7f0000000580)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/40, 0x28}], 0x3, &(0x7f0000001800)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/194, 0xc2}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/13, 0xd}], 0x7, &(0x7f0000002c80)=""/87, 0x57}, 0x8}, {{&(0x7f0000002d00)=@vsock, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x3, &(0x7f0000002fc0)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/205, 0xcd}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/215, 0xd7}], 0x3}, 0x9}], 0x0, 0x0, &(0x7f0000003500)={0x77359400}) 11.435961455s ago: executing program 2 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000100)=""/7, 0x7}], 0x5, &(0x7f0000000580)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/40, 0x28}], 0x3, &(0x7f0000001800)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/194, 0xc2}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/13, 0xd}], 0x7, &(0x7f0000002c80)=""/87, 0x57}, 0x8}, {{&(0x7f0000002d00)=@vsock, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x3, &(0x7f0000002fc0)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/205, 0xcd}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/215, 0xd7}], 0x3}, 0x9}], 0x0, 0x0, &(0x7f0000003500)={0x77359400}) 3.48493506s ago: executing program 3 (id=4787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000bc0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r4, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x34080, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x34080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce995da0b96973bd013b2e749981d1e1e556e3f35b9651bc9b6229f2a989695c475f6f2e43d168d4b020eb7bd8ddac0575419d0690ce40fb43", 0x0, 0x69}) (async) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce995da0b96973bd013b2e749981d1e1e556e3f35b9651bc9b6229f2a989695c475f6f2e43d168d4b020eb7bd8ddac0575419d0690ce40fb43", 0x0, 0x69}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.184349263s ago: executing program 2 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x19}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000100)=""/7, 0x7}], 0x5, &(0x7f0000000580)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/40, 0x28}], 0x3, &(0x7f0000001800)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/194, 0xc2}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/13, 0xd}], 0x7, &(0x7f0000002c80)=""/87, 0x57}, 0x8}, {{&(0x7f0000002d00)=@vsock, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x3, &(0x7f0000002fc0)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/205, 0xcd}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/215, 0xd7}], 0x3}, 0x9}], 0x0, 0x0, &(0x7f0000003500)={0x77359400}) 1.34563402s ago: executing program 6 (id=4791): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000858}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRESOCT=r0, @ANYRES64=0x0], 0x40}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0xfffffff8, 0x1, {{0x3c, 0x4, 0x3, 0x3, 0xf0, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast1, @multicast2, {[@generic={0xa4b4fd3f0a6a76fe, 0xa, "2cfbb5a4fe416370"}, @cipso={0x86, 0x4b, 0x3, [{0x2, 0x11, "c827731f9911e0331dda29f7bceeb2"}, {0x6, 0x9, "a28e4d9b85c114"}, {0x6, 0x6, "63b3081d"}, {0x0, 0x7, "101170d38c"}, {0x5, 0x11, "d5bddc404b088990d273cbdd9c1d4a"}, {0x0, 0xd, "a106fda982184e9f4aeb43"}]}, @cipso={0x86, 0x64, 0x2, [{0x0, 0x6, "a36bde84"}, {0x1, 0xd, "3c5ef85931206e5f684ae7"}, {0x1, 0xf, "2b0e3b4192e19dd99d1dc3304c"}, {0x6, 0x10, "168218c3f8f41d25a5b27917cbdb"}, {0x0, 0xb, "cf01306131eec285aa"}, {0x0, 0x8, "367b2e6ba1ec"}, {0x2, 0x5, "da5349"}, {0x1, 0x3, '5'}, {0x6, 0x11, "2668c7aeef2e4e9d1acaaa1bf96853"}]}, @ssrr={0x89, 0xf, 0x14, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @remote]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xad, 0x0, 0x9, [0x7f]}]}}}}}) poll(&(0x7f0000000340)=[{r0, 0x1000}, {r0, 0x1520}], 0x2, 0x6) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)="afae217ff99d6204929fbd45be91dca63cd98510c622b3cfbffec914b8aa36b1dbb02710c2b8b2cc31293a5bd0756febaaaceb01f0d2f08a4749a619d3d987c99d79dc3c7a68e4bc14eacb05196bb387146614ef926b7e96fa9f91c87a09b59e61456a5cbad653c51cb8b04383faec647ddbc8da5c5ac0e028b4b27dbbdd04e7034e97b8229559c5b121a9d721e18bfd758b5e9e77022c9ad90f8fe7c739269780532e3b04187b9f7b1d509243521ff3fe453cc64d7b99a8e9ee8d7013c751ddeb85202780309a02cb9536c5f0133ae1b74671940915a5f6c6a45c9dec57022b9adb43a6d175c5ac78d03fb741edd3509cfe8967d79a454309dbd4bdfc85a9a5d5c54146247bf146c95b86845523f3ef2692242ebb826f6cc355e253d2e133f04c61a5b7e8929186de01718f7188852914b3b254d6f3c7107d25e3f4f32d9532119053b092fb279c7e3c23d17ba2a3dd07734fa7a41873985211002a27180747369a3ce081da1d136f3b9b7846d1aac78bc2c7f9d54033a7265982ab9c290caba4498a4f0f0badee0ac3fa55bd10a95b6dda20f5f67e0eb820e57a52cb190218cef4aee8a3a4a966eb14032d5c0615b95e9cd6191c78e5120f55082eda19530f2321394ca87f4cc40e3fd84b13847b612ed07ddd5a4ec98460bf90897457d7b701dba0c3e240dea61d92f48391e9cb1cb1a896198e685d07ce285595441ef2695660c3ff688b6a9aaf97aab0c2e4fe508992d2fa5495d900e796c5d733d10914135214c77d36891321cdd44f120d36a5b615841893578e61d9af877a9ea409a69675dbcd1f64a6db78b193470d9741987e3663d6c138b8e7d08e347c8f96c9528b28f34845061c05380f56bfbc03bf4421bcab020334aadc12395054237d828577b2d389b2870c65d161b553200c14b7578f4a7b22ff95f438b1ddce2f44d946d549179b5edb3a23a2ebea94bd7fa1177fe3e44053223ba3057cdd7e3611a577fec9f990ef6f3e02cabf998b28c67ed0eaebfb95a769607578c1bd9429186c7fb0c589a073b3147ba60a97b26aff554c435f7a17c50fdab8b6ac7abcbcb7814b6fe0e39b310a08d8251eba99e76411f1ae9326117b023353893d07be7813c2ead6aab9532aee98a5951e5cb6eb6eb2c05a85e61edd232c50b87d6bc0a61438d180fabc558d590307311967c96772f5a6a41fddb26865a7b0b74c6e90cdb63c165ec07c8852b37e8142561389a08286efe4b057afcab473e05b1b6328a0eff40ba5c773939594bb88de84c9c2dca8a797392a07aa7d7a97898ab555a981b53f2547ab40dd764a9b14315c835871d221e0ba25f0bbb3d2748d34a31512adc5c7d7b1bbc3651a7136aadfa1f52350e1d9313ac5c2ced12317655b4d6a36b534722219753b0ba154586a3873177aa5d274d95ad1bb7f1e826c3461215c63cc6d182341f1471dbc6e75c6cdbad9d6c2d270dfe846f9ff14171c172e2d4d94b33a733412e8e0cf91c7c6429361881a42f475f0bb538714a1f473f86526a7d00ec225b39cfb48c85ebbca49e3ac01fcaa7130ea7917134abeea61d12f87aeabe85adb4c07681f453dd200574762fd3175cb07c5a930bad01e2bb36618082e465aa9979a42f977d5e554c895ae306a7536d795ab212adf07ea24f5943866fe6866e64f3d0d14f7270e2355103b1efc6240c24ebd5cab8102152f316ba365d812ef3a25ad09ae6e35c2d0d8ac9c8a62d2156c09e8945dbec69ac44d48e430f519a1d36650e30d4f7555dd89e9c611a18b42c9ecc9b264f05d0b3649911b164246be7e184923726c1a5a59a50f204cb51ae26d84970726319b40f7127b43aa3810e7674a6fa8e1d7e96f5219e7d6c8b9755b310b5e200e7d8738f13d3f0450f6b132af7325b544f4fbc8b5701903fcd811d0630f681316130ed7397380f65d69beb42bbda0cb5cb24555c6c386f0ea209610f94b8adf2d799a47712689944e20754437b6dd6f6383e4bfb6d0498475be19b50d6af220281754f812a580121af010896ea915a5dd7f6c60ed2c26ae9f3065da5c8cf35deac7608cb5d30d5ca9aec9197cd9ac7dd833d3b594b174c2b6ef7995752a0a5e605d38ea36b133c700b303c20978afaf08f0545b554d2ccdadf2d2c2486aa07aebb7ccefed67149e1cba224181ef3375f24167a8a74b7bed9f6fb319e05ed36e132e20eccee6d9b2365e63e0a9453653ca8c4b0c76a2f21c38cd88f1c19984346bb0a80d87b7753541fe6eaacd5425d45b191edc915c75b21bca9b84a788cef670c3127d34ead13a605fa47fe887505a5b34cf7d4dff413acf332b91240aa6e7c55cc75c72def2b43e7fd3d1832e5e73bffc0b620db4b9eb1c696369ba277131f77724d932af356f2b45ccdbdac106ed69f17610c25c882d14179b82ba59222db8283e56c1bf5bae5c4b18bfb6a8935c7c2f05338d0c1a6f5ada2395214283dc37a951ff69fac97cf1fd4a232c106c03d635428db2cb5f633275e9da57b499d98e0fdb7950ea8592cb1559b8118577b47212c6f045fda2329b7ffae58f3e4cdef7f45796d913eee0c6b15eee3e8e6881dc49f1f0c47b8364140873cfe992d993129127105abf862311526f5c58127c9184e0068696707e86d6cc40389697078ac4b924552522778cf562891a9df0ac40638a1e6c22430a1df07a4212037f8e778bf674c78fc842eb73df1b93db93b388beaecc197559b4ba6eb3da05dde24e6cf04735fc9f4db809e2ce9c12dddfddb525f23fda494bb232483d162fea43d41d0177c9af844352e596d2cbc63f5b247fe0fe7d051a48b045cef35b110b4187c1d61777775916a1698fcf1f5a4bfeb1e6601c6807d0b37f3e3a0ab2578d1e30951b2b2e553332de7a5442ff58836d5a7659fb70c9a5779824c331f0b64504e2617cd39f7bc3525a4ce1659977bf3cbb2411caaaeb484dd5a5cf3f46d41848ecc8df153327a1f843831818ca7d479842e18466ec7c5d868d3315e414b7c6f88d684951d0f3eeab0e9b41f90ec228ca0dfacb2c62cca1a00f16fba87b6979705fbf6e8377ed52fcf6407c535aec573ad25903d703eb6982e57bb9fcd1dc2c5fc81e3867bc53d1eb8ff6b8dc5ea85902b6aa860f23c65815ffd4d37e52439babd64d79387074c41b851291edbcfeb63b9d2f51d1f517afc57d2219c163efd1e642eadca75aefe30cfdeec5a2c4df3f6ab447bee179852b1302bed3f239d982bd30a95e85f59ab70623aa8406e68c18940c9987913bf1b1bb5ff291efc5bab2a69a139e975232890125f570dbf1a65ed9605e9181072c88dec1b42705fabab94319f3ce63ca14e611c9c7a21a6273e4854cc3fe22a3e6f3015c75f902f32132e072d1f060df3c67e31958496f9c253c3eadff7a0f4115f091dda91a3bde9d0074a904ef22c23bdf9081d5c85a96baf8e1f23b095f743c69d6610b49ef22447e31cee4eb2ae85eabf0a5f7cd285829eea9f14cfe3eed53c3507265c3f915f53f618d7b63ab6449e9d0a2f5365c98f03447eb39d898a493b8cf39758dd3ffc07d45b32925c69884e0f2b0f10234553f83846e0199a8c1d04998c66ba29fa8a1c28ed6a58ff4dd19d2e41ce48c700516b95f73569c9d5f3fe56a386be89a36d1d0ecb20e115041c03404a1f6c55cb60515d7267b111b9c6c7a3946f4e8ccedfce8e69a377608f960432a485184476046b96b29790f366a9ac7655004d15471ef91151a67ee2d77d618d27bb1b8f85a778f8d57cbcc612985b4ff07dc8a3925e12a1e9f29d31a8b05684addbf0eb4b39edabc99bbcf990e0b89b53551140e2eaf03e4aad1513d871635ad597a23136d6adcc112534bd7a746e53824bbdbe2df1e217b113b9dcf31dcfed2ebb35ed1bb3ebf4c5b58a7c57705eaf9e79d9db2c6116093075abd5086f78fae0fb5c8e8bf56fb509eb60129b20207c56e69edd310829f4ba2a66855fc92bcd98e7e48014702a478385db4b2bb362fd2b8f062dfb3a0c28faded8e0c12245b6b7cca58a598ed0d6e1b04df0668f185b226bab8294b87eb58c102236c0b7f7878280c97adab2c669c2e5918f08d247445e81c44bd20e204e91487fe05d022a0ea10d50bb8e189849eafa1f92a1e289278c50ca17db20d1d2aa0f5621e93b286d9f578b87be084bb8b7d31abda4714e32aff05c4096e6ce1f3af671e99aef41c537cd76b778213344fa8a8f3f5237b179122527c1635a04b4f9303b32b140e29fe916d2b77071b5dcf7b8c4adee4226ddc7c06ef3d6ebcb368504a7b6a0156956bcfaff8346cbef252cf11b9318cefcdf1ba58a5eb2c3e88ca3589e1ea875ef2acbc3c9145fdfe2b9098a1e456a8c0e32e3e51785ef6876331f49c0819fba406d1c7ee4dfbcfe7e7adc98686339fcaf394e00a9d57661632c09841ca788b48e336a329ee0d68cf0b59595aabe43c55173ee4cbab3f4f6dba3d41bd4df5095f08902a758c49d3da417740b1255e45b68cd956f96f4189b17636acc0f23bea522d336e8a695783c8e444a5b211ff8b0eeccdcdde44a578c86a56c2f33aa43b8a3e2c7b834c245028d80a6dbf9e8934765a6d574d2bdc6613294fb796d66acb3c4d9343db4bd78dc42da21a5f64ddb0c80e31db1ba65159313afcf84ea7d6e34c6d4b9b8abaa2db49784d231fe38a758b0bcbbde4be26e370a39d24204e4147c19c276bdd6c135609ff9a1d806188306c971667971e71641f7a3dcc35701632a692cee19d22339cb6d4be8a9b627f1ee69dee6f64a1140c307bef0886d60c2b2f79034aa9f25dae6167d177996b7d7b920d51a090fdff8f071aaeffc2afa777f82ea6bd2cccf341f3e6f39af66f082c3932c1818c553fe99569ee64cebe3782a02109a3ae9e082f961f913a8cc75b2c700454ee26b4b4de6e20a546c81e1c7e038615d9648bf0d2df6598afdae4c7c9afd02648bf406d065411ed926cc56fabd5606a4262050c66ebb2d8f1b1c0f4935eb412a0e459fee4abefce987c7ef78f37a203a9939786d514bcb82ea429eeeac7776c505f94290fbc3d28b542b9927f92de87a2295b403a17c04b46171672bc5f53bf79e8f4a2b3a258929ed1ac7697596b2884920f258cc1eef5ca17145539a0820ed5d1da91ef4f1f2508060564d6b4516c9e67990dd2ff834a00c2b763fcf821335bef951e9b362c9c5b5883f2db6d3fca8e32d6fafeba98b24fe41858685a266df7358bc37ba425da8fa30f6bad330bf9b0ce872527d1433274eb025e01753402134106041f6156b7d3050553a310a6a77ddd341c84eac77afff2ad5a7296426ae085a4da5e8c1ca755fdd0ed27d240fa9bd408144748cc529eb8ca0a2637aeb663b1a48fbedc225f99e3ecab46c192239d093cdcc6c8ef9480a97c09057c0470e2ee380f4e406a7eac6849657828f4f2f09d84e451e7c7abe853cbed08d9ff36d5cd05c254636777e21c82e1ae09f2969bc5bf8167e14572f202ae5d3fa58b46442ae36857c7bee74471edf8a2a6eb1d998f73b6da689c4345ec917befe17f0f505d8e7c7e769ca76b4f03ff25991f8d10c803ec289bd1491dbde1b45f7284a661aca33b1978f864e8c0fb4bfefa29080a1969277a4f62b076f2232e514b217a5d51e29455a2c04bb94bf72d8e7a797fac059eb5668633ce513e8380e5b16147387bddc3249f98c73caf9a2453a03cff97ad78e5ce4480b79dc506fc275a93c187f014f2aab13731205cef4daa4840516502bad325dd6e5cec603f181c4b15804a51be1a4ae76d365d9ec6fa0d8c91ded46ddf0aeeb4d81a58", 0x1000}, {&(0x7f0000000180)="14494f3cb2310b8b3963d45a17adc276c268", 0x12}, {&(0x7f0000000280)="dbda6cad073c5828a3101640631c937bf4c3a32d56afddef71fa3e94e2a935dadbb1b97d137fed8b6d5fd7bf19133b7d2eb9837218905185fe7e100dcd692238ab9dc8943ec2e2bf81c1c05e78589975046bb68f802e6f1ac933790dca9b093971d230fd076dc27cfc1634eb8109fed9e5ab587799746bb77c56f9e3a3b7c0e1f65fb593d8edc10e71aef326afadd46e422439eb92228e27d5", 0x99}], 0x3, &(0x7f0000001580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8009}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x50}, 0x24044045) 1.345518124s ago: executing program 3 (id=4792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080), 0x4f) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sync() 1.293977291s ago: executing program 3 (id=4793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020601020000000000000000020020000c00078005001500fd00000005000100060000000500050002000000fb0dc1408610d17b73683a69702c6d6163000900020073797a3200000000328777a1"], 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b40)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0x131) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="9c9242352332aab00000000029c311000100a70000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ext4_allocate_blocks\x00', r3, 0x0, 0x4}, 0x18) (async) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) sendmmsg(r4, &(0x7f0000000180), 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f0000003000)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="9c110000100701032dbd7000fcdbdf250300000608001f00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400e78000000c0029000000000000000000"], 0x119c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc8c0}, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000740)=""/3, 0x3}], 0x2}}], 0x1, 0x2021, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) (async) setuid(0xee00) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf257200000008000300", @ANYRES32=r8, @ANYBLOB="8d794c9cf88ee07ff9f405bc07adb19873afbff8e268c2efba5135316b901ea5602e1b958eb1ef81c5366c9b0d617563d17972a882befed9800148bb316ae2a40ec1ac0851b98cef6fa669ae77647e7302600b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) recvmsg$can_bcm(r7, &(0x7f0000000500)={&(0x7f0000001840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000001640)=""/39, 0xffffff94}, {&(0x7f0000001680)=""/218, 0xda}, {&(0x7f0000004040)=""/104, 0x68}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f00000018c0)=""/79, 0x4f}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f00000043c0)=""/225, 0xe1}, {&(0x7f0000004200)=""/205, 0xcd}], 0xb}, 0x0) (async) write$UHID_CREATE2(r7, 0x0, 0x118) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async) bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) 1.287635446s ago: executing program 6 (id=4794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) write$UHID_CREATE2(r2, 0x0, 0x194) (async) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r7}}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b50a400000000000850000000d1af22b0c000000b70000000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r9, &(0x7f00000004c0)=""/57, 0x39) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x9d, "b6e0e3cc8a30bf195b0c8f579093cd0befa91624de3fe99b7c39da2580f7228ead63ce80eb2c969a0f6d560211d1650021dff3e9dcdfd2298bcb1a9d766e47f034bb7418085bebdef29321b5f15f4984c949fd7a213616af87080ab4ee0e058289f0da26f7e2411cab978df3c5b631e8bd2de9db498c1d4478f749cf1e7b0d7b022670bc155490c17f586c3f53114677c4de9da522fb81e36389978b19"}, &(0x7f0000000100)=0xa5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r10, 0x240000}, 0x8) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000e006"]) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x40) (async) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', @link_local}) (rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delchain={0x23, 0x66, 0xf31, 0xfffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x9, 0xffff}}}, 0x24}}, 0x0) (async) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r13, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) sendmmsg$inet6(r13, &(0x7f0000003cc0)=[{{0x0, 0x300, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.287473963s ago: executing program 3 (id=4795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080080000ffffffffffff080211000000080211000000000000000000000000006400010001039b0280000000080026006c09000008000c006400000008000d00000000000a003400020202020202000008003500000000000400050108007e00020000006c005a804c00018048000200492749122202220c2700011d0051532b084146323d4a41323836240e2b4005014b304839374e4436204a12311d28482203030b501101142f57371d112a1936304b3621111c0003800500070004000000100001004818160b6c303606796001040a003400010101010101000008007e0000000000080035000100000006009600"], 0x114}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0xcf11c5f121dced94) syz_emit_vhci(&(0x7f00000011c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x8, 0x2}}}, 0xa) 1.163937121s ago: executing program 0 (id=4796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @loopback}, 0x1c) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/172, 0xac}], 0x1}, 0x3}], 0x1, 0x141, 0x0) 1.163691849s ago: executing program 3 (id=4797): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004340)='./file1\x00', 0x101042, 0x80) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f00000021c0)='./file1\x00', &(0x7f0000000100), 0x9a9080, &(0x7f0000002200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRES64=r2, @ANYRESOCT=r0]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000040), 0x4) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000600"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000e0018110000", @ANYRES16, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r9, &(0x7f0000002280)="3f030e03f007120006001e0089e9aaa911d7c2290f0074dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fb1511fdf9435e3ffe4600"/73, 0x48, 0x40088c4, &(0x7f0000000540)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c87de000002000000000000000000000e0000000000000000000000000600000d0000000000000000000000000000003221bbfb7489c34a00000000000000000000000000000000000000000000000000000000000000000c000000000000000071013d2b9ddf02249f7ce577300000000900"/150], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) setreuid(0x0, 0xee01) write$FUSE_INIT(r12, &(0x7f0000000200)={0x50, 0x0, r13, {0x7, 0x27, 0x0, 0x14, 0x76, 0xfffc, 0x92, 0x4, 0x0, 0x0, 0x10, 0x3}}, 0x50) 1.108673102s ago: executing program 6 (id=4798): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.047633991s ago: executing program 6 (id=4799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="44b800088ec0663505000000440f22c0ba430066edbaf80c66b8a8f9678066efbafc0c66ed0f09baf80c66b870601c8a66efbafc0cecdd240f01c4660f38803e9900ba4200b84d31efb800008ee8", 0x40}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 908.912642ms ago: executing program 6 (id=4800): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xfffffdffffffffff, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="f00581d6590d24fd50b42213fe4d5fe87c035b530d7b73990413ca6939b82f0ce1aad8e9622a4f56f208b7a0a4673054d092873b65df77be97701bd34bd40c2b8c680de2479836d0f3d777e3e72873c0cd3db7ab84408af0984a9a2f6ca0a1b75b37dda6d969f3c057bc9242d5d764e8c734b79753dd3a7f3f79c3db38afd6ff98a84e94292f1ed3a596ba24006d32127f9218d199955df67a00e48cf63351ad53f9f4723df65b32669a27dade137fb57e1f5cc21c7620315a819abc43763e75d0415b748b98d3eca599fee796dd32415fdea0147bbb1f4cc5"]) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000009c0)=0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) (async, rerun: 64) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec1349907ec9006d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be007ecabfdfde0dfa00b1", 0x1c}, 0x48, 0xffffffffffffffff) (rerun: 64) keyctl$setperm(0x5, r3, 0x0) (async) write$UHID_CREATE2(r2, 0x0, 0x118) (async) bind$bt_sco(r2, &(0x7f0000000000), 0x8) (async, rerun: 64) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001380)={0x53, 0xffffffffffffffff, 0x75, 0x8, @scatter={0x3, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f00000001c0)=""/4096, 0x1000}]}, &(0x7f0000001200)="3847ebe15f947851146897680f8c58f9586c54f58958b9f043cfd38f08dc25d2bb4f8f624367a18d7385bd18dc8aa887c0262d90997f0c9ea6e4243a254adacd4ea2c343ae240e0fff0f52e184480e7ad0576250b4ed9df3d4eff746e9d8ba854a8cb6e30e2986adc669ea253cd160d1d64da7f48a", &(0x7f0000001280)=""/179, 0xe, 0x20, 0x3, &(0x7f0000001340)}) (rerun: 64) 834.146116ms ago: executing program 6 (id=4801): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x10) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000300), 0x4001000, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@verity_on}, {@redirect_dir_off}, {@index_on}, {@redirect_dir_off}, {@uuid_null}, {@default_permissions}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file0\x00', 0x1c4) (async) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="660f388106f1f34998980f1a6086da3f363e673e460fc77ebef2400fd6ee0f22c03e0fc75a8566470f3880649d050f3235004000000f30430f92c6", 0xffffffffffffffbe}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="bd91", 0x2}], 0x1}}], 0x1, 0x40400c1) recvfrom$inet(r4, &(0x7f0000000040)=""/71, 0x47, 0x40000002, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) (async) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) 246.443317ms ago: executing program 0 (id=4802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x10001, 0x6}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000f9a000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x22, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 245.790124ms ago: executing program 3 (id=4803): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(&(0x7f0000000480)='./cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000002c00010026bd7000fcdbdf25040000004300118004"], 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x20000094) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20008044}, 0x4008010) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) connect$ax25(r4, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000042000000666b639f517f569c657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0001000000"], 0x4c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000), 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="080027bd7080fddbdf2545000000080001007063690011000200303030303a30303a03302e300000000008005f28bea8809465db8a618d19018e00000000000e0001006e657464657673e96d0000000f0002006e657464657673250fa2d6fea57d0f7e8fcff96995cd9c7ec958814034d6ad0426388136588d01b1fa90ca87d9e80932017a50720de6a2a4cd24f1f7fc072ba2eca81840a9b3030040e343ee4d28b81c2d7e87ebcea0fafc74441b58ed6fbe90712b4b1d36ca10"], 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x20) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x921c0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) r9 = syz_open_dev$vcsn(&(0x7f0000000800), 0xd60, 0x200000) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r8, 0x402, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000801}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) ioctl(r7, 0xfffffff9, &(0x7f0000000940)="a57068ddc4e0f843b0d6e07cc4430d5a5f2cf02a3a9d79d4e3ed3052b4e994196b4d55f8bafeef6fbcb2805f7083530e62bf7b631de8bc75f050c9f630b9a1d1cc53c33c38efdd5757abe4ef9a001d913054e4dcd06273cfcfc21c962409b8554cfd3566edf06bc6cd2d6997b8f9a25de3b36bf66edd5b8c47d0818606617e2c7b4dbf07750b0d915f711a1e893cded4f68331020aa6e5a980f258b0b262b7fd90b8186858d72002cb30bb38c52452b0a1f14bbd1e1c21f250c5500f78ae0224f450895956c45300593161bc0f4fe48d756e1fa7806cdcbafb30ca380a150574ad8ffd6a8781bd") syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 75.341634ms ago: executing program 0 (id=4804): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) 74.167447ms ago: executing program 0 (id=4805): r0 = socket(0x1e, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x3}}, 0x10) 307.061µs ago: executing program 0 (id=4806): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000980)={0x80, 0xfd2c, 0x80, 0x3, 0x11dd33e3}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5207, 0x0) 0s ago: executing program 0 (id=4807): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000240)=0x40000e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000060201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000300), 0xfffffffeffffffff}) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) kernel console output (not intermixed with test programs): erlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 381.163939][T21859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.170936][ T40] audit: type=1400 audit(1742436973.356:78786): avc: denied { watch watch_reads } for pid=21893 comm="syz.6.4219" path="/343/file0" dev="9p" ino=36831339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.226192][T21859] team0: Port device team_slave_0 added [ 381.238580][T21906] nfs: Unknown parameter 'noac/uinput' [ 381.240896][T21859] team0: Port device team_slave_1 added [ 381.284350][T21859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.286369][T21859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.293355][T21859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.298215][T21859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.300144][T21859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.308326][T21859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.333783][T21859] hsr_slave_0: entered promiscuous mode [ 381.335835][T21859] hsr_slave_1: entered promiscuous mode [ 381.337651][T21859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.337664][T21859] Cannot create hsr debugfs directory [ 381.501096][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.564791][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.614267][ T8199] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 381.649238][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.756016][ T12] bridge_slave_1: left allmulticast mode [ 381.758174][ T12] bridge_slave_1: left promiscuous mode [ 381.760269][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.765182][ T12] bridge_slave_0: left allmulticast mode [ 381.767478][ T12] bridge_slave_0: left promiscuous mode [ 381.769706][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.778314][ T8199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.787861][ T8199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.791683][ T8199] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 381.794964][ T8199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.801064][ T8199] usb 5-1: config 0 descriptor?? [ 381.813646][T21944] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 381.813646][T21944] program syz.3.4234 not setting count and/or reply_len properly [ 382.188164][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.192109][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.195539][ T12] bond0 (unregistering): Released all slaves [ 382.296339][T21954] netlink: 'syz.6.4236': attribute type 10 has an invalid length. [ 382.346650][T21960] siw: device registration error -23 [ 382.423201][T21955] netlink: 7442 bytes leftover after parsing attributes in process `syz.0.4224'. [ 382.426771][T21908] netlink: 7442 bytes leftover after parsing attributes in process `syz.0.4224'. [ 382.435230][ T8199] usbhid 5-1:0.0: can't add hid device: -71 [ 382.438079][ T8199] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 382.441075][T21964] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 382.442230][ T8199] usb 5-1: USB disconnect, device number 4 [ 382.443874][T21964] netlink: 'syz.3.4240': attribute type 1 has an invalid length. [ 382.447244][T21964] netlink: 'syz.3.4240': attribute type 3 has an invalid length. [ 382.449838][T21964] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4240'. [ 382.536799][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 382.616025][ T13] smc: removing ib device syz0 [ 382.703967][T21969] veth1_vlan (unregistering): left allmulticast mode [ 383.010682][ T12] hsr_slave_0: left promiscuous mode [ 383.012689][ T12] hsr_slave_1: left promiscuous mode [ 383.014973][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.017066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.024042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.037736][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.068028][ T66] Bluetooth: hci2: command tx timeout [ 383.076062][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4243'. [ 383.093725][ T12] veth1_macvtap: left promiscuous mode [ 383.095524][ T12] veth0_macvtap: left promiscuous mode [ 383.097229][ T12] veth1_vlan: left promiscuous mode [ 383.098711][ T12] veth0_vlan: left promiscuous mode [ 384.099270][ T12] team0 (unregistering): Port device team_slave_1 removed [ 384.154583][T21987] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 384.239468][ T12] team0 (unregistering): Port device team_slave_0 removed [ 384.301458][T21991] openvswitch: netlink: IP tunnel dst address not specified [ 384.342525][ T5992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 384.521638][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 384.528262][ T5992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.531346][ T5992] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 384.537253][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.541269][ T5992] usb 5-1: config 0 descriptor?? [ 384.631871][T22000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22000 comm=syz.6.4250 [ 384.764723][ T5992] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 385.075795][ T8199] usb 5-1: USB disconnect, device number 5 [ 385.103469][T21859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.106950][T21859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.111025][T21859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.116118][T21859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.166492][T21859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.174258][T21859] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.183160][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.185742][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.195634][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.197574][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.305616][ T66] Bluetooth: hci2: command tx timeout [ 385.308307][T21859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.335412][T21859] veth0_vlan: entered promiscuous mode [ 385.340397][T21859] veth1_vlan: entered promiscuous mode [ 385.359360][T21859] veth0_macvtap: entered promiscuous mode [ 385.363255][T21859] veth1_macvtap: entered promiscuous mode [ 385.370314][T21859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.373332][T21859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.376602][T21859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.384461][T21859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.387478][T21859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.390148][T21859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.392955][T21859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.396181][T21859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.401002][T21859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.403366][T21859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.405718][T21859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.408037][T21859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.436021][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.446030][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.455630][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.457827][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.670077][T22039] : entered promiscuous mode [ 385.671630][T22037] : renamed from lo [ 385.682071][T22037] syz.6.4260: attempt to access beyond end of device [ 385.682071][T22037] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 385.686397][T22037] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 385.764404][T22042] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 385.783306][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4261'. [ 386.304678][T22058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4266'. [ 386.325272][T22058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4266'. [ 386.341226][T22058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4266'. [ 386.352968][T22058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4266'. [ 386.399757][T22064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.402310][T22063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.682183][T22084] fuse: Unknown parameter '000000000000000000040x000000000000000400000000000000000003' [ 386.760865][ T40] audit: type=1400 audit(1742436978.585:78787): avc: denied { bind } for pid=22094 comm="syz.3.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 387.440469][T22104] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.443116][T22104] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.446450][T22104] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.449094][T22104] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.491797][T22106] netlink: 'syz.0.4279': attribute type 10 has an invalid length. [ 387.502260][T22106] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.507093][T22106] bond0: (slave team0): Enslaving as an active interface with an up link [ 387.782590][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 387.792992][ T7020] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 387.886833][ T1140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.953448][ T7020] usb 5-1: Using ep0 maxpacket: 16 [ 387.957051][ T7020] usb 5-1: config 3 has an invalid interface number: 143 but max is 1 [ 387.959698][ T7020] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 387.962910][ T7020] usb 5-1: config 3 has an invalid interface number: 70 but max is 1 [ 387.965397][ T7020] usb 5-1: config 3 has no interface number 0 [ 387.967117][ T7020] usb 5-1: config 3 has no interface number 1 [ 387.968706][ T7020] usb 5-1: config 3 interface 143 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 387.971553][ T7020] usb 5-1: config 3 interface 143 altsetting 5 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 387.974649][ T7020] usb 5-1: config 3 interface 143 altsetting 5 endpoint 0x87 has an invalid bInterval 231, changing to 11 [ 387.977593][ T7020] usb 5-1: config 3 interface 143 altsetting 5 endpoint 0x87 has invalid maxpacket 1584, setting to 1024 [ 387.980541][ T7020] usb 5-1: config 3 interface 143 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 387.983361][ T7020] usb 5-1: config 3 interface 143 altsetting 5 bulk endpoint 0xF has invalid maxpacket 1023 [ 387.986227][ T7020] usb 5-1: config 3 interface 143 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 387.988974][ T7020] usb 5-1: config 3 interface 143 altsetting 5 endpoint 0x6 has an invalid bInterval 251, changing to 11 [ 387.991999][ T7020] usb 5-1: config 3 interface 143 altsetting 5 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 387.995314][ T7020] usb 5-1: config 3 interface 70 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 387.998128][ T7020] usb 5-1: config 3 interface 70 altsetting 9 endpoint 0x8 has an invalid bInterval 182, changing to 11 [ 388.000991][ T7020] usb 5-1: config 3 interface 70 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 388.003814][ T7020] usb 5-1: config 3 interface 70 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 388.006711][ T7020] usb 5-1: config 3 interface 70 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 388.009436][ T7020] usb 5-1: config 3 interface 143 has no altsetting 0 [ 388.011178][ T7020] usb 5-1: config 3 interface 70 has no altsetting 0 [ 388.014906][ T7020] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=46.d3 [ 388.017640][ T7020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.019809][ T7020] usb 5-1: Product: ▶ [ 388.020980][ T7020] usb 5-1: Manufacturer: ᆄড়꾲軮빹萯ﯫṈ婾㤬뇅န속ᒟ촣꾝⨀᪌뀄봛鞾裑膺땋㽩輰Ⱆ䎜鯤䈕乑⋝튗륥걲駋赸칆좖損嵏᭄Ɪ㐟辟≼濮䰏仍蝗훯仭藠겠綠䂹誘頳㉊ᤕﳊ턶ꘙ覗⿓䲄朕漌ஞꋄ첀緾︨駹텢奀痨倾ꚹᑽ鰲ꮓ닖ᢺ䌍랑墬춲筳蚼砩祖췕輇姲헳䑛盇奚ꂓ襅㹕 [ 388.031176][ T7020] usb 5-1: SerialNumber: syz [ 388.034033][T22108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.036129][T22108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.199409][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 388.504279][ T7020] usb 5-1: USB disconnect, device number 6 [ 389.044091][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.049697][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.052461][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.057540][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.060327][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 389.063051][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.094552][ T40] audit: type=1400 audit(1742436980.765:78788): avc: denied { getopt } for pid=22147 comm="syz.3.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.170237][T22138] chnl_net:caif_netlink_parms(): no params data found [ 389.172679][T22162] openvswitch: netlink: Unknown key attributes 2 [ 389.197037][T22164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 389.213018][T22138] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.215547][T22138] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.217633][T22138] bridge_slave_0: entered allmulticast mode [ 389.219793][T22138] bridge_slave_0: entered promiscuous mode [ 389.222430][T22138] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.224421][T22138] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.227028][T22138] bridge_slave_1: entered allmulticast mode [ 389.229803][T22138] bridge_slave_1: entered promiscuous mode [ 389.253731][T22138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.258161][T22138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.277997][T22179] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.280641][T22179] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.283316][T22138] team0: Port device team_slave_0 added [ 389.287974][T22138] team0: Port device team_slave_1 added [ 389.312440][T22138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.314322][T22138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.321161][T22138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.324792][T22138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.326650][T22138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.334615][T22138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.369969][T22138] hsr_slave_0: entered promiscuous mode [ 389.372369][T22138] hsr_slave_1: entered promiscuous mode [ 389.374317][T22138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.376698][T22138] Cannot create hsr debugfs directory [ 389.514407][T22191] dccp_invalid_packet: pskb_may_pull failed [ 389.518056][T22191] syz.3.4302: attempt to access beyond end of device [ 389.518056][T22191] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 389.521931][T22191] SQUASHFS error: Failed to read block 0x0: -5 [ 389.523668][T22191] unable to read squashfs_super_block [ 389.579725][T22193] input: syz0 as /devices/virtual/input/input33 [ 389.581840][T22193] input: failed to attach handler leds to device input33, error: -6 [ 389.718357][ T1140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.846580][ T1140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.960632][ T1140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.054715][ T1140] bridge_slave_1: left allmulticast mode [ 390.056728][ T1140] bridge_slave_1: left promiscuous mode [ 390.058822][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.062586][ T1140] bridge_slave_0: left allmulticast mode [ 390.064610][ T1140] bridge_slave_0: left promiscuous mode [ 390.066688][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.387000][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.392798][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.396226][ T1140] bond0 (unregistering): Released all slaves [ 390.414951][ T40] audit: type=1400 audit(1742436981.999:78789): avc: denied { attach_queue } for pid=22205 comm="syz.6.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 390.747572][ T1140] hsr_slave_0: left promiscuous mode [ 390.749480][ T1140] hsr_slave_1: left promiscuous mode [ 390.751191][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.753288][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.757755][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.759801][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.798982][ T1140] veth1_macvtap: left promiscuous mode [ 390.800528][ T1140] veth0_macvtap: left promiscuous mode [ 390.802109][ T1140] veth1_vlan: left promiscuous mode [ 390.803590][ T1140] veth0_vlan: left promiscuous mode [ 391.292750][ T5298] Bluetooth: hci2: command tx timeout [ 391.763533][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 391.871198][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 392.833700][T22243] kvm: user requested TSC rate below hardware speed [ 392.863583][T22138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.869135][T22138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.873498][T22138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.877103][T22138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.879942][T22248] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 392.952937][T22138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.971776][T22138] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.976970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.980694][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.987878][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.990782][T13224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.078656][T22263] tmpfs: Unknown parameter 'appraise_type' [ 393.108106][T22138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.123111][T22138] veth0_vlan: entered promiscuous mode [ 393.127153][T22138] veth1_vlan: entered promiscuous mode [ 393.136958][T22138] veth0_macvtap: entered promiscuous mode [ 393.141466][T22138] veth1_macvtap: entered promiscuous mode [ 393.147596][T22138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.151529][T22138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.154735][T22138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.159148][T22138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.163091][T22138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.165836][T22138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.168772][T22138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.172309][T22138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.176631][T22138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.179389][T22138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.182656][T22138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.185091][T22138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.226341][T22267] loop9: detected capacity change from 0 to 4 [ 393.226695][T17542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.230112][T17542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.232203][T22267] Dev loop9: unable to read RDB block 4 [ 393.233908][T22267] loop9: unable to read partition table [ 393.236063][T22267] loop9: partition table beyond EOD, truncated [ 393.237811][T22267] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 393.246080][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.248274][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.463214][T22275] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 393.520838][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 393.626961][T22277] bond0: (slave team0): Releasing backup interface [ 393.647308][T22277] team0 (unregistering): Port device team_slave_0 removed [ 393.657388][T22277] team0 (unregistering): Port device team_slave_1 removed [ 393.722852][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4329'. [ 393.725406][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4329'. [ 393.748181][T22285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=22285 comm=syz.0.4330 [ 393.851668][T22305] tmpfs: Bad value for 'mpol' [ 394.044225][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4341'. [ 394.274204][T22343] tmpfs: Bad value for 'huge' [ 394.474573][ T40] audit: type=1400 audit(1742436985.788:78790): avc: denied { listen } for pid=22353 comm="syz.3.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 394.563769][ T40] audit: type=1400 audit(1742436985.881:78791): avc: denied { shutdown } for pid=22360 comm="syz.3.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.619560][T22363] ipt_REJECT: TCP_RESET invalid for non-tcp [ 394.679788][T22367] tmpfs: Group quota block hardlimit too large. [ 394.720373][ T57] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 394.831383][T22377] program syz.3.4355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.834098][T22377] ata1.00: invalid command format 0 [ 394.882008][ T57] usb 5-1: config 0 has no interfaces? [ 394.886074][ T57] usb 5-1: string descriptor 0 read error: -22 [ 394.887878][ T57] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 394.890520][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.893813][ T57] usb 5-1: config 0 descriptor?? [ 395.058249][T22390] 9pnet: Found fid 0 not clunked [ 395.114545][ T8199] usb 5-1: USB disconnect, device number 7 [ 395.227772][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4362'. [ 395.234569][T22399] FAT-fs (nullb0): bogus number of reserved sectors [ 395.236880][T22399] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 395.258832][T22403] set match dimension is over the limit! [ 395.329782][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4366'. [ 395.333182][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4366'. [ 395.336638][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4366'. [ 395.339890][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4366'. [ 395.344990][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4366'. [ 395.765209][T22437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.804528][T22444] 9pnet_fd: Insufficient options for proto=fd [ 395.874001][T13224] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.238647][ T12] wlan0: Trigger new scan to find an IBSS to join [ 397.044419][T22461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 397.122179][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.125355][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.128194][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.130591][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.133524][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 397.135547][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.229516][T22468] chnl_net:caif_netlink_parms(): no params data found [ 397.319753][T22468] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.328946][T22468] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.331445][T22468] bridge_slave_0: entered allmulticast mode [ 397.333756][T22468] bridge_slave_0: entered promiscuous mode [ 397.344109][T22468] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.346106][T22468] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.348066][T22468] bridge_slave_1: entered allmulticast mode [ 397.350217][T22468] bridge_slave_1: entered promiscuous mode [ 397.397807][T22468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.401627][T22468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.440140][T22468] team0: Port device team_slave_0 added [ 397.443461][T22468] team0: Port device team_slave_1 added [ 397.466014][T22468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.470617][T22468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.477462][T22501] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 397.479687][T22468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.487820][T22468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.490509][T22468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.499918][T22468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.532293][T22468] hsr_slave_0: entered promiscuous mode [ 397.534687][T22468] hsr_slave_1: entered promiscuous mode [ 397.536933][T22468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.539621][T22468] Cannot create hsr debugfs directory [ 397.572865][T22505] netlink: 'syz.0.4393': attribute type 10 has an invalid length. [ 397.640906][T22509] fuse: Bad value for 'fd' [ 397.719025][T22507] netlink: 'syz.3.4394': attribute type 13 has an invalid length. [ 397.941151][T13224] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.032359][T13224] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.149487][T13224] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.308951][T13224] bridge_slave_1: left allmulticast mode [ 398.310351][T22500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.310594][T13224] bridge_slave_1: left promiscuous mode [ 398.312800][T22500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 398.314220][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.320662][T13224] bridge_slave_0: left allmulticast mode [ 398.320865][T22500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 398.322267][T13224] bridge_slave_0: left promiscuous mode [ 398.322374][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.330413][T22500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.332743][T22500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 398.335393][T22500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 398.337788][T22500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.339570][T22500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 398.344687][T22500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 398.347043][T22500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.348851][T22500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 398.354348][T22500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 398.356983][T22500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.465963][T22525] program syz.3.4399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.733482][T13224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.737371][T13224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.740932][T13224] bond0 (unregistering): Released all slaves [ 398.811478][T22546] tipc: Started in network mode [ 398.812812][T22546] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 398.814749][T22546] tipc: Enabled bearer , priority 10 [ 398.817846][T22546] tipc: Resetting bearer [ 398.831895][T22546] tipc: Disabling bearer [ 399.112937][T13224] hsr_slave_0: left promiscuous mode [ 399.117768][T13224] hsr_slave_1: left promiscuous mode [ 399.120203][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.123005][T13224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.126405][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.129043][T13224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.176264][T13224] veth1_macvtap: left promiscuous mode [ 399.178395][T13224] veth0_macvtap: left promiscuous mode [ 399.180670][T13224] veth1_vlan: left promiscuous mode [ 399.182715][T13224] veth0_vlan: left promiscuous mode [ 399.423358][T22558] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 399.574060][T17540] wlan0: Trigger new scan to find an IBSS to join [ 399.745017][ T5298] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.084881][T13224] team0 (unregistering): Port device team_slave_1 removed [ 400.190360][T13224] team0 (unregistering): Port device team_slave_0 removed [ 400.528090][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 400.528176][ T5951] Bluetooth: hci1: command 0x0419 tx timeout [ 400.530335][ T5298] Bluetooth: hci2: command 0x041b tx timeout [ 401.001632][T22468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.003584][T22561] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 401.019401][T22468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.023616][T22468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.028260][T22468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.084916][T22468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.094944][T22468] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.101063][T17542] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.103103][T17542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.107628][T17540] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.109594][T17540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.144122][T22468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.228375][T22468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.271958][T22468] veth0_vlan: entered promiscuous mode [ 401.278788][T22468] veth1_vlan: entered promiscuous mode [ 401.282376][T22575] __nla_validate_parse: 30 callbacks suppressed [ 401.282393][T22575] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.4410'. [ 401.289487][T22575] netlink: zone id is out of range [ 401.291600][T22575] netlink: zone id is out of range [ 401.293662][T22575] netlink: zone id is out of range [ 401.297203][T22575] netlink: zone id is out of range [ 401.299056][T22575] netlink: zone id is out of range [ 401.304942][T22468] veth0_macvtap: entered promiscuous mode [ 401.308928][T22468] veth1_macvtap: entered promiscuous mode [ 401.315214][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.319325][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.322718][T22468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.328274][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.331114][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.334001][T22468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.336848][T22468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.340362][T22468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.342436][T22580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4412'. [ 401.345482][T22580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4412'. [ 401.349334][T22581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4412'. [ 401.352001][T22581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4412'. [ 401.356445][T22468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.359040][T22468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.362900][T22468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.365955][T22468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.412045][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.414543][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.436600][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.439198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.719117][T22603] wireguard0: entered promiscuous mode [ 401.721373][T22603] wireguard0: entered allmulticast mode [ 401.972225][ T5298] Bluetooth: hci0: command 0x0c1a tx timeout [ 402.051793][T22616] ptrace attach of "/syz-executor exec"[21396] was attempted by "  @ $"[22616] [ 402.102966][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4426'. [ 402.161987][T22636] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 402.164570][T22636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.216787][T22645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 402.313664][ T40] audit: type=1400 audit(1742436993.131:78792): avc: denied { setattr } for pid=22650 comm="syz.6.4434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 402.393367][T22654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.477121][T22656] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4436'. [ 402.580056][T22663] batadv_slave_1: entered promiscuous mode [ 402.582030][T22663] batadv_slave_1: left promiscuous mode [ 402.596161][T22663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4438'. [ 402.612171][T22663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4438'. [ 402.612717][ T5298] Bluetooth: hci0: unexpected event 0x07 length: 7 < 255 [ 402.749065][ T5298] Bluetooth: hci1: command 0x0419 tx timeout [ 402.755545][ T5298] Bluetooth: hci3: command 0x0405 tx timeout [ 402.757462][ T1149] wlan0: Trigger new scan to find an IBSS to join [ 402.776081][ T40] audit: type=1400 audit(1742436993.561:78793): avc: denied { search } for pid=22668 comm="syz.3.4439" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 403.216579][T22673] netfs: Couldn't get user pages (rc=-14) [ 403.612288][T22675] pimreg: entered allmulticast mode [ 403.653459][T22677] syzkaller1: entered promiscuous mode [ 403.655476][T22677] syzkaller1: entered allmulticast mode [ 403.660689][T22677] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 403.765091][T13224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.835210][T22683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22683 comm=syz.0.4445 [ 403.899058][T22692] netlink: 'syz.3.4446': attribute type 2 has an invalid length. [ 403.901352][T22692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4446'. [ 403.956187][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.203034][ T5298] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.962075][ T5298] Bluetooth: hci3: command 0x0405 tx timeout [ 404.962086][ T5951] Bluetooth: hci1: command 0x0419 tx timeout [ 405.241236][ T5298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.244642][ T5298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.247650][ T5298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.251913][ T5298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.253249][T22701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22701 comm=syz.0.4450 [ 405.258330][ T5298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 405.258496][ T5298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.360837][T22703] chnl_net:caif_netlink_parms(): no params data found [ 405.402997][T22703] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.405014][T22703] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.407075][T22703] bridge_slave_0: entered allmulticast mode [ 405.409242][T22703] bridge_slave_0: entered promiscuous mode [ 405.411954][T22703] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.413938][T22703] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.415867][T22703] bridge_slave_1: entered allmulticast mode [ 405.417959][T22703] bridge_slave_1: entered promiscuous mode [ 405.439295][T22703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.443305][T22703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.464839][T22719] syzkaller1: entered promiscuous mode [ 405.466354][T22719] syzkaller1: entered allmulticast mode [ 405.472219][T22703] team0: Port device team_slave_0 added [ 405.478987][T22703] team0: Port device team_slave_1 added [ 405.536731][T22703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.539335][T22703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.546749][T22703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.552129][T22703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.554704][T22703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.564187][T22703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.606954][T22703] hsr_slave_0: entered promiscuous mode [ 405.608966][T22703] hsr_slave_1: entered promiscuous mode [ 405.610671][T22703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.612706][T22703] Cannot create hsr debugfs directory [ 405.750546][T22725] overlayfs: failed to resolve './file0': -2 [ 405.828253][T22731] loop7: detected capacity change from 0 to 16384 [ 405.874895][T22737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.877060][T22737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.063759][T22731] blk_print_req_error: 7 callbacks suppressed [ 406.063773][T22731] I/O error, dev loop7, sector 12808 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 406.065990][T22740] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.068422][T22731] I/O error, dev loop7, sector 12808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.071534][T22740] buffer_io_error: 6 callbacks suppressed [ 406.071546][T22740] Buffer I/O error on dev loop7, logical block 1, async page read [ 406.074148][T22731] Buffer I/O error on dev loop7, logical block 1601, async page read [ 406.076005][T22740] Dev loop7: unable to read RDB block 8 [ 406.078237][T22731] I/O error, dev loop7, sector 12808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.081100][T22740] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.082579][T22731] Buffer I/O error on dev loop7, logical block 1601, async page read [ 406.086401][T22740] Buffer I/O error on dev loop7, logical block 3, async page read [ 406.094040][T22740] loop7: unable to read partition table [ 406.096234][T22740] loop_reread_partitions: partition scan of loop7 (DVř_cU,B|4UUcuJВQ2gםX:Rc6v) failed (rc=-5) [ 406.185281][T22730] I/O error, dev loop7, sector 10752 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 406.188061][T22730] Buffer I/O error on dev loop7, logical block 1344, lost async page write [ 406.190458][T22730] Buffer I/O error on dev loop7, logical block 1345, lost async page write [ 406.192942][T22730] Buffer I/O error on dev loop7, logical block 1346, lost async page write [ 406.195258][T22730] Buffer I/O error on dev loop7, logical block 1347, lost async page write [ 406.197665][T22730] Buffer I/O error on dev loop7, logical block 1348, lost async page write [ 406.200047][T22730] Buffer I/O error on dev loop7, logical block 1349, lost async page write [ 406.205584][T22730] I/O error, dev loop7, sector 11776 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 406.210001][T22730] I/O error, dev loop7, sector 12800 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 406.376565][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.416151][ T5298] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.453120][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.537682][ T7020] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 406.553698][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.657027][ T1149] bridge_slave_1: left allmulticast mode [ 406.658617][ T1149] bridge_slave_1: left promiscuous mode [ 406.660231][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.663217][ T1149] bridge_slave_0: left allmulticast mode [ 406.664771][ T1149] bridge_slave_0: left promiscuous mode [ 406.666333][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.716515][ T7020] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 406.719043][ T7020] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 406.722070][ T7020] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 406.724679][ T7020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 406.728043][ T7020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 406.732496][ T7020] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 406.735019][ T7020] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 406.737386][ T7020] usb 5-1: Product: syz [ 406.738580][ T7020] usb 5-1: Manufacturer: syz [ 406.743623][ T7020] cdc_wdm 5-1:1.0: skipping garbage [ 406.745187][ T7020] cdc_wdm 5-1:1.0: skipping garbage [ 406.747191][ T7020] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 406.748966][ T7020] cdc_wdm 5-1:1.0: Unknown control protocol [ 406.960179][ T7020] usb 5-1: USB disconnect, device number 8 [ 407.070534][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.075483][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.079075][ T1149] bond0 (unregistering): Released all slaves [ 407.362675][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.366292][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.369730][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.372540][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.375022][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.377691][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.380497][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.383187][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.385795][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.390538][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.393249][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.396787][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.399502][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.402142][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.404778][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.407404][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.409951][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.412905][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.415951][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.418738][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.421438][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.424836][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.427406][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.429912][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.432596][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.435069][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.437627][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.440118][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.443742][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.446670][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.449323][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.451958][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.453265][ T5298] Bluetooth: hci2: command tx timeout [ 407.457488][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.460101][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.463114][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.466124][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.468654][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.471210][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.473792][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.476396][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.479004][ T1149] hsr_slave_0: left promiscuous mode [ 407.479075][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.484178][ T1149] hsr_slave_1: left promiscuous mode [ 407.484293][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.486234][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.488411][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.490468][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.493111][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.497986][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.498004][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.500514][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.502807][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.505783][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.510246][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.513049][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.515638][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.518229][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.520824][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.524231][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.526894][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.529945][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.532626][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.535097][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.537628][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.540268][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.542873][ T1149] veth1_macvtap: left promiscuous mode [ 407.543356][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.544704][ T1149] veth0_macvtap: left promiscuous mode [ 407.547233][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.548653][ T1149] veth1_vlan: left promiscuous mode [ 407.551195][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.552682][ T1149] veth0_vlan: left promiscuous mode [ 407.555312][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.559140][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.561981][T22760] program syz.3.4464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.737071][T22765] __nla_validate_parse: 4 callbacks suppressed [ 407.737083][T22765] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4466'. [ 408.574488][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 408.686181][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 409.530201][T22772] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4469'. [ 409.665964][ T5298] Bluetooth: hci2: command tx timeout [ 409.685006][ T40] audit: type=1326 audit(1742437000.024:78794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22787 comm="syz.3.4473" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5159f8d169 code=0x0 [ 409.743164][T22789] IPVS: Error connecting to the multicast addr [ 409.765242][T22703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.776261][T22703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.779637][T22703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.789542][T22703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.837960][T22703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.858991][T22703] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.883795][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.886097][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.897337][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.899373][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.921063][T22804] can: request_module (can-proto-4) failed. [ 409.927014][T22804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=22804 comm=syz.0.4478 [ 409.981293][T22703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.003912][T22703] veth0_vlan: entered promiscuous mode [ 410.010542][T22703] veth1_vlan: entered promiscuous mode [ 410.022211][T22703] veth0_macvtap: entered promiscuous mode [ 410.026108][T22703] veth1_macvtap: entered promiscuous mode [ 410.036027][T22703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.039112][T22703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.043910][T22703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.049237][T22703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.053293][T22703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.057853][T22703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.062863][T22703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.066297][T22703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.069278][T22703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.075075][T22703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.107497][T22814] random: crng reseeded on system resumption [ 410.274101][T13224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.281489][T13224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.297274][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.300489][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.501599][T22842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4488'. [ 410.504552][T22842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4488'. [ 410.516286][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4488'. [ 411.161694][T22855] xt_hashlimit: overflow, try lower: 241/0 [ 411.371807][T22864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4495'. [ 411.597195][T22878] netlink: zone id is out of range [ 411.598793][T22878] netlink: zone id is out of range [ 411.600444][T22878] netlink: zone id is out of range [ 411.602890][T22878] netlink: zone id is out of range [ 411.606294][T22878] netlink: zone id is out of range [ 411.607809][T22878] netlink: zone id is out of range [ 411.609312][T22878] netlink: zone id is out of range [ 411.610785][T22878] netlink: zone id is out of range [ 411.613412][T22878] netlink: zone id is out of range [ 411.614885][T22878] netlink: zone id is out of range [ 411.835619][T22908] cgroup: subsys name conflicts with all [ 412.677601][T13224] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.918905][T22925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 412.920636][T22925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.922320][T22925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.927067][T22925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.087075][T22936] netlink: 'syz.3.4517': attribute type 4 has an invalid length. [ 414.105174][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.108091][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.113518][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.115871][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.119185][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.121295][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.206494][T22945] chnl_net:caif_netlink_parms(): no params data found [ 414.271503][T22945] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.273630][T22945] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.275554][T22945] bridge_slave_0: entered allmulticast mode [ 414.277590][T22945] bridge_slave_0: entered promiscuous mode [ 414.280075][T22945] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.280354][T22969] netlink: 209672 bytes leftover after parsing attributes in process `syz.3.4521'. [ 414.282058][T22945] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.284940][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.288331][T22945] bridge_slave_1: entered allmulticast mode [ 414.291702][T22945] bridge_slave_1: entered promiscuous mode [ 414.305607][T22958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=22958 comm=syz.3.4521 [ 414.309291][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4521'. [ 414.319859][T22945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.335219][T22945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.361617][T22945] team0: Port device team_slave_0 added [ 414.366699][T22945] team0: Port device team_slave_1 added [ 414.389751][T22945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.395259][T22945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.403151][T22945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.407045][T22945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.409003][T22945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.418381][T22945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.447344][T22945] hsr_slave_0: entered promiscuous mode [ 414.449361][T22945] hsr_slave_1: entered promiscuous mode [ 414.451189][T22945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.453286][T22945] Cannot create hsr debugfs directory [ 414.478556][T22977] tipc: Enabling of bearer rejected, failed to enable media [ 414.539336][ T40] audit: type=1400 audit(1742437004.561:78795): avc: denied { unmount } for pid=19694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 414.607778][T22997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1106 sclass=netlink_route_socket pid=22997 comm=syz.0.4530 [ 414.615951][T22997] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 414.685729][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4533'. [ 414.730462][T23012] Cannot find add_set index 4 as target [ 414.732146][T23012] Cannot find add_set index 4 as target [ 414.734673][T23012] Cannot find add_set index 4 as target [ 414.736383][T23012] Cannot find add_set index 4 as target [ 414.738029][T23012] Cannot find add_set index 4 as target [ 414.739688][T23012] Cannot find add_set index 4 as target [ 414.741301][T23012] Cannot find add_set index 4 as target [ 414.742940][T23012] Cannot find add_set index 4 as target [ 414.744741][T23012] Cannot find add_set index 4 as target [ 414.746495][T23012] Cannot find add_set index 4 as target [ 414.761019][T23014] mmap: syz.3.4536 (23014): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 414.779605][T23017] netlink: 'syz.6.4537': attribute type 3 has an invalid length. [ 414.805624][T13224] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.811612][T23026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4538'. [ 414.814729][T23026] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4538'. [ 414.818739][T23026] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4538'. [ 414.844806][T23031] xt_hashlimit: size too large, truncated to 1048576 [ 414.894401][T13224] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.930434][ T40] audit: type=1400 audit(1742437004.935:78796): avc: denied { recv } for pid=23028 comm="syz.0.4539" saddr=10.0.2.2 src=45922 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.938772][ T40] audit: type=1400 audit(1742437004.935:78797): avc: denied { recv } for pid=5931 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=40290 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 414.970205][T13224] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.104113][T13224] bridge_slave_1: left allmulticast mode [ 415.105722][T13224] bridge_slave_1: left promiscuous mode [ 415.107448][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.114456][T13224] bridge_slave_0: left allmulticast mode [ 415.116557][T13224] bridge_slave_0: left promiscuous mode [ 415.119558][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.133266][T23048] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 415.150228][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 415.150238][ T5298] Bluetooth: hci1: command 0x0419 tx timeout [ 415.332340][ T7020] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 415.535315][ T7020] usb 5-1: Using ep0 maxpacket: 8 [ 415.537936][ T7020] usb 5-1: config index 0 descriptor too short (expected 5138, got 18) [ 415.540073][ T7020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.542460][ T7020] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 415.567639][ T7020] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 415.569858][ T7020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.582535][ T7020] usb 5-1: Product: syz [ 415.583614][ T7020] usb 5-1: Manufacturer: syz [ 415.584797][ T7020] usb 5-1: SerialNumber: syz [ 415.600438][ T7020] usb 5-1: config 0 descriptor?? [ 415.743220][T13224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.747193][T13224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.752979][T13224] bond0 (unregistering): Released all slaves [ 415.771449][T23096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4550'. [ 415.867474][ T40] audit: type=1400 audit(1742437005.805:78798): avc: denied { name_bind } for pid=23044 comm="syz.0.4544" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 415.874384][ T6143] usb 5-1: USB disconnect, device number 9 [ 415.950952][ T40] audit: type=1400 audit(1742437005.880:78799): avc: denied { mounton } for pid=23098 comm="syz.3.4551" path="/344/file0" dev="pstore" ino=2509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 415.961715][ T40] audit: type=1400 audit(1742437005.899:78800): avc: denied { read } for pid=23098 comm="syz.3.4551" lport=44049 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 416.023163][T23104] cgroup2: Unknown parameter 'mm9ܤmnra8[/C' [ 416.069889][T23107] sp0: Synchronizing with TNC [ 416.161182][T13224] hsr_slave_0: left promiscuous mode [ 416.163349][T13224] hsr_slave_1: left promiscuous mode [ 416.165295][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.167557][T13224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.170888][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.172953][T13224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.208850][T13224] veth1_macvtap: left promiscuous mode [ 416.210523][T13224] veth0_macvtap: left promiscuous mode [ 416.212095][T13224] veth1_vlan: left promiscuous mode [ 416.213615][T13224] veth0_vlan: left promiscuous mode [ 416.226864][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4555'. [ 416.337780][ T5298] Bluetooth: hci2: command tx timeout [ 416.510790][ T5298] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.349788][T13224] team0 (unregistering): Port device team_slave_1 removed [ 417.474961][T13224] team0 (unregistering): Port device team_slave_0 removed [ 418.307728][T23125] tmpfs: Unknown parameter 'oswߣ' [ 418.349498][T22945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.359788][T22945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.366554][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 418.385407][T22945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.387696][T23125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4559'. [ 418.389221][T22945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.499239][T22945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.508994][T22945] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.515473][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.517623][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.538817][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.541311][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.553090][ T40] audit: type=1400 audit(1742437008.321:78801): avc: denied { egress } for pid=8622 comm="kworker/2:8" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 418.559074][ T40] audit: type=1400 audit(1742437008.321:78802): avc: denied { sendto } for pid=8622 comm="kworker/2:8" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 418.560534][ T5298] Bluetooth: hci2: command tx timeout [ 418.609319][T22945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.700483][T22945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.716641][T22945] veth0_vlan: entered promiscuous mode [ 418.720570][T22945] veth1_vlan: entered promiscuous mode [ 418.732706][T22945] veth0_macvtap: entered promiscuous mode [ 418.737192][T22945] veth1_macvtap: entered promiscuous mode [ 418.743789][T22945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.747043][T22945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.750753][T22945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.753996][T22945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.757437][T22945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.760838][T22945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.767389][T22945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.769974][T22945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.772413][T22945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.775312][T22945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.829574][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.831664][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.848635][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.852080][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.070649][ T40] audit: type=1400 audit(1742437008.798:78803): avc: denied { setcheckreqprot } for pid=23173 comm="syz.3.4574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 419.320660][ T40] audit: type=1400 audit(1742437009.042:78804): avc: denied { getopt } for pid=23184 comm="syz.3.4577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.383194][T23185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.489758][T23193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.495717][T23192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.671301][T23207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23207 comm=syz.3.4583 [ 419.757183][T23209] loop9: detected capacity change from 0 to 7 [ 419.760789][T23209] buffer_io_error: 251 callbacks suppressed [ 419.760801][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.764692][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.766753][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.771654][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.774314][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.777134][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.780684][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.783028][T23209] ldm_validate_partition_table(): Disk read failed. [ 419.784776][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.786879][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.788962][T23209] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.791783][T23209] Dev loop9: unable to read RDB block 0 [ 419.793308][T23209] loop9: unable to read partition table [ 419.794758][T23209] loop9: partition table beyond EOD, truncated [ 419.796308][T23209] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 419.796308][T23209] U) failed (rc=-5) [ 419.801064][T23209] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 419.803464][T23209] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 419.839980][T23212] netlink: 'syz.0.4585': attribute type 1 has an invalid length. [ 419.850808][T23212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.853697][T23212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=23212 comm=syz.0.4585 [ 419.944680][T23218] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.953131][T23218] hugetlbfs: syz.3.4587 (23218): Using mlock ulimits for SHM_HUGETLB is obsolete [ 420.053805][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.068941][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.072426][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.075481][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.079463][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.082379][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.085395][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.088324][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.090896][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.093109][T23224] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 420.158474][T23228] __nla_validate_parse: 4 callbacks suppressed [ 420.158484][T23228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4590'. [ 420.256819][T23230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'. [ 420.261263][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4591'. [ 420.381768][ T5951] Bluetooth: hci3: Malformed LE Event: 0x0d [ 420.692600][T23254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4597'. [ 422.238124][ T5298] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 422.246076][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 422.642680][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.754744][ T5298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.760440][ T5298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.765243][ T5298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.778408][ T5298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.787247][ T5298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 422.791572][ T5298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.813751][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.907603][T23260] chnl_net:caif_netlink_parms(): no params data found [ 422.913748][T23270] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4601'. [ 422.991700][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.025656][T23280] netlink: 'syz.3.4603': attribute type 1 has an invalid length. [ 423.029683][T23260] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.030108][T23280] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4603'. [ 423.031693][T23260] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.037422][T23260] bridge_slave_0: entered allmulticast mode [ 423.040276][T23260] bridge_slave_0: entered promiscuous mode [ 423.042882][T23260] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.045168][T23260] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.047453][T23260] bridge_slave_1: entered allmulticast mode [ 423.050709][T23260] bridge_slave_1: entered promiscuous mode [ 423.106557][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.115243][T23260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.119188][T23260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.150707][T23260] team0: Port device team_slave_0 added [ 423.154042][T23260] team0: Port device team_slave_1 added [ 423.178384][T23260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.180679][T23260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.188042][T23260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.192996][T23260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.195790][T23260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.206764][T23260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.241406][T23260] hsr_slave_0: entered promiscuous mode [ 423.243886][T23260] hsr_slave_1: entered promiscuous mode [ 423.245944][T23260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.248297][T23260] Cannot create hsr debugfs directory [ 423.287621][ T1149] bridge_slave_1: left allmulticast mode [ 423.289272][ T1149] bridge_slave_1: left promiscuous mode [ 423.290888][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.295082][ T1149] bridge_slave_0: left allmulticast mode [ 423.297585][ T1149] bridge_slave_0: left promiscuous mode [ 423.299353][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.679515][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.685152][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.690996][ T1149] bond0 (unregistering): Released all slaves [ 423.816510][T23291] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4607'. [ 423.862465][ T40] audit: type=1400 audit(1742437013.346:78805): avc: denied { bind } for pid=23296 comm="syz.0.4608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 423.871074][T23297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23297 comm=syz.0.4608 [ 424.042539][T23307] tmpfs: Unknown parameter 'usrquotaVЉ9.-]H⨴%U83Ҫ SHߖGIwGΖ޺Ç{C:' [ 424.068952][ T1149] hsr_slave_0: left promiscuous mode [ 424.071457][ T1149] hsr_slave_1: left promiscuous mode [ 424.073912][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.077029][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.081246][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.084090][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.131007][ T1149] veth1_macvtap: left promiscuous mode [ 424.132949][ T1149] veth0_macvtap: left promiscuous mode [ 424.134933][ T1149] veth1_vlan: left promiscuous mode [ 424.136929][ T1149] veth0_vlan: left promiscuous mode [ 424.379434][T23312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4612'. [ 424.986300][ T5951] Bluetooth: hci2: command tx timeout [ 425.162791][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 425.286380][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 425.451512][T23325] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4615'. [ 425.505690][T23327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4615'. [ 426.529768][T23260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.533891][T23260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.538737][T23260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.540960][ T40] audit: type=1400 audit(1742437015.853:78806): avc: denied { setopt } for pid=23347 comm="syz.0.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 426.547917][T23347] delete_channel: no stack [ 426.548349][T23260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.592619][T23260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.600877][T23260] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.606383][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.608313][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.615767][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.618487][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.636495][T23260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.639380][T23260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.684377][T23357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4622'. [ 426.716839][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4623'. [ 426.717211][T23260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.743526][T23260] veth0_vlan: entered promiscuous mode [ 426.751913][T23260] veth1_vlan: entered promiscuous mode [ 426.759899][T23365] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4625'. [ 426.764118][T23260] veth0_macvtap: entered promiscuous mode [ 426.768344][T23260] veth1_macvtap: entered promiscuous mode [ 426.773020][T23369] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4626'. [ 426.789295][T23260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.792055][T23260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.795517][T23260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.800791][T23260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.805702][T23260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.808998][T23260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.813319][T23260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.816047][T23260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.818497][T23260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.820820][T23260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.872764][ T7065] hid (null): unknown global tag 0xe [ 426.875122][ T7065] hid-generic 0004:0007:0096.000C: unknown global tag 0xe [ 426.881807][ T7065] hid-generic 0004:0007:0096.000C: item 0 0 1 14 parsing failed [ 426.884210][ T7065] hid-generic 0004:0007:0096.000C: probe with driver hid-generic failed with error -22 [ 427.199068][ T5951] Bluetooth: hci2: command tx timeout [ 427.584423][T23385] netlink: 'syz.3.4630': attribute type 39 has an invalid length. [ 427.673256][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.688012][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.710025][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.715417][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.762264][T23395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4633'. [ 427.788544][T23390] netlink: 'syz.6.4631': attribute type 1 has an invalid length. [ 427.790732][T23390] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.4631'. [ 427.855862][ T40] audit: type=1400 audit(1742437017.079:78807): avc: denied { ioctl } for pid=23399 comm="syz.0.4636" path="socket:[143766]" dev="sockfs" ino=143766 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 427.858379][T23400] overlay: ./file1 is not a directory [ 428.281747][T23460] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 428.567014][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4651'. [ 428.569721][T23505] netlink: 'syz.6.4651': attribute type 1 has an invalid length. [ 428.572372][T23505] netlink: 'syz.6.4651': attribute type 2 has an invalid length. [ 428.575882][ T40] audit: type=1400 audit(1742437017.752:78808): avc: denied { connect } for pid=23504 comm="syz.6.4651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.090544][T23551] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 429.322293][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.636004][ T6016] usb 11-1: new full-speed USB device number 41 using dummy_hcd [ 429.819016][ T6016] usb 11-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 429.821982][ T6016] usb 11-1: config 1 interface 0 has no altsetting 0 [ 429.825532][ T6016] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 429.827950][ T6016] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.830240][ T6016] usb 11-1: Product: syz [ 429.831387][ T6016] usb 11-1: Manufacturer: syz [ 429.832737][ T6016] usb 11-1: SerialNumber: syz [ 429.835452][T23560] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 430.867929][T23567] Invalid ELF header type: 0 != 1 [ 430.948873][ T40] audit: type=1804 audit(1742437019.969:78809): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4668" name="/newroot/202/file0" dev="tmpfs" ino=1112 res=1 errno=0 [ 430.960449][T23576] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 430.965984][T23576] ref_ctr increment failed for inode: 0x458 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a6f1400 [ 430.967804][ T40] audit: type=1804 audit(1742437019.969:78810): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4668" name="/newroot/202/file0" dev="tmpfs" ino=1112 res=1 errno=0 [ 430.969136][ T5298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.972446][ T5298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.986592][ T5298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.990363][ T5298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.998377][ T5298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.000730][ T5298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.010591][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4668'. [ 431.013248][T23581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4668'. [ 431.015824][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4668'. [ 431.098150][T23577] chnl_net:caif_netlink_parms(): no params data found [ 431.121460][ T6018] IPVS: starting estimator thread 0... [ 431.130010][T23590] mkiss: ax0: crc mode is auto. [ 431.171043][T23577] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.173124][T23577] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.175236][T23577] bridge_slave_0: entered allmulticast mode [ 431.175954][ T40] audit: type=1400 audit(1742437020.194:78811): avc: denied { create } for pid=23599 comm="syz.0.4673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 431.177783][T23577] bridge_slave_0: entered promiscuous mode [ 431.185217][T23577] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.187310][T23577] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.189318][T23577] bridge_slave_1: entered allmulticast mode [ 431.191412][T23577] bridge_slave_1: entered promiscuous mode [ 431.229329][T23592] IPVS: using max 37 ests per chain, 88800 per kthread [ 431.234221][T23577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.242373][T23577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.256760][ T5298] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 431.258984][ T5298] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 431.279724][T23577] team0: Port device team_slave_0 added [ 431.299543][ T40] audit: type=1400 audit(1742437020.306:78812): avc: denied { write } for pid=23606 comm="syz.3.4675" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 431.303304][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.315731][T23577] team0: Port device team_slave_1 added [ 431.334667][T23577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.336933][T23577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.344031][T23577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.348024][T23577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.350001][T23577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.357105][T23577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.387767][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.403922][T23577] hsr_slave_0: entered promiscuous mode [ 431.405869][T23577] hsr_slave_1: entered promiscuous mode [ 431.407657][T23577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.409762][T23577] Cannot create hsr debugfs directory [ 431.473535][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.549921][ T1149] bridge_slave_1: left allmulticast mode [ 431.551523][ T1149] bridge_slave_1: left promiscuous mode [ 431.553157][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.556069][ T1149] bridge_slave_0: left allmulticast mode [ 431.557627][ T1149] bridge_slave_0: left promiscuous mode [ 431.559289][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.970671][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.974470][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.979959][ T1149] bond0 (unregistering): Released all slaves [ 432.357628][ T1149] hsr_slave_0: left promiscuous mode [ 432.359593][ T1149] hsr_slave_1: left promiscuous mode [ 432.361585][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.363930][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.366657][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.369339][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.410846][ T1149] veth1_macvtap: left promiscuous mode [ 432.413002][ T1149] veth0_macvtap: left promiscuous mode [ 432.414986][ T1149] veth1_vlan: left promiscuous mode [ 432.417533][ T1149] veth0_vlan: left promiscuous mode [ 432.527091][ T6016] usb 11-1: USB disconnect, device number 41 [ 433.185316][ T5298] Bluetooth: hci2: command tx timeout [ 433.341777][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 433.472719][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 433.728532][ T40] audit: type=1400 audit(1742437022.569:78813): avc: denied { getopt } for pid=23635 comm="syz.6.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.320767][T23641] __nla_validate_parse: 2 callbacks suppressed [ 434.320783][T23641] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4683'. [ 434.525716][T23577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.532579][T23577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.550229][T23577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.556730][T23577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.586289][T23652] netlink: 'syz.6.4686': attribute type 1 has an invalid length. [ 434.617073][T23577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.625152][T23577] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.630321][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.632612][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.637527][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.639935][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.760589][T23577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.775620][T23577] veth0_vlan: entered promiscuous mode [ 434.779517][T23577] veth1_vlan: entered promiscuous mode [ 434.789434][T23577] veth0_macvtap: entered promiscuous mode [ 434.792393][T23577] veth1_macvtap: entered promiscuous mode [ 434.797943][T23577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.801075][T23577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.804271][T23577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.809276][T23577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.812248][T23577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.815281][T23577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.819821][T23577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.823921][T23577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.826393][T23577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.828835][T23577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.903379][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.905891][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.920663][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.923087][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.034748][ T6016] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 435.036871][T23667] net_ratelimit: 54 callbacks suppressed [ 435.036904][T23667] openvswitch: netlink: Actions may not be safe on all matching packets [ 435.038022][ T40] audit: type=1400 audit(1742437023.804:78814): avc: denied { write } for pid=23666 comm="syz.3.4690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.126137][ T40] audit: type=1326 audit(1742437023.879:78815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.3.4693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 435.133453][ T40] audit: type=1326 audit(1742437023.879:78816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.3.4693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 435.141147][ T40] audit: type=1326 audit(1742437023.888:78817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.3.4693" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 435.142869][T23673] program syz.3.4693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.147836][ T40] audit: type=1326 audit(1742437023.888:78818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.3.4693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 435.187409][T23676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4694'. [ 435.189930][T23676] netem: invalid attributes len -9 [ 435.191319][T23676] netem: change failed [ 435.220350][T23678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23678 comm=syz.3.4695 [ 435.239421][ T6016] usb 11-1: config 0 has an invalid interface number: 89 but max is 0 [ 435.241850][ T6016] usb 11-1: config 0 has no interface number 0 [ 435.243576][ T6016] usb 11-1: config 0 interface 89 has no altsetting 0 [ 435.247206][ T6016] usb 11-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=9b.9d [ 435.250375][ T6016] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.252622][ T6016] usb 11-1: Product: syz [ 435.253863][ T6016] usb 11-1: Manufacturer: syz [ 435.255202][ T6016] usb 11-1: SerialNumber: syz [ 435.257376][ T6016] usb 11-1: config 0 descriptor?? [ 435.356609][T23687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4698'. [ 435.360105][T23687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4698'. [ 435.563581][ T6016] qmi_wwan 11-1:0.89: probe with driver qmi_wwan failed with error -22 [ 435.567125][ T6016] usb 11-1: USB disconnect, device number 42 [ 436.346954][T23708] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4703'. [ 436.480541][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 436.480553][ T40] audit: type=1326 audit(1742437024.159:78849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 436.499745][ T40] audit: type=1326 audit(1742437024.159:78850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 436.506163][ T40] audit: type=1326 audit(1742437024.159:78851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 436.514388][ T40] audit: type=1326 audit(1742437024.159:78852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 436.520831][ T40] audit: type=1326 audit(1742437024.159:78853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 436.537142][ T40] audit: type=1326 audit(1742437024.159:78854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5159f8d169 code=0x7ffc0000 [ 436.543892][ T40] audit: type=1326 audit(1742437024.159:78855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5159f84127 code=0x7ffc0000 [ 436.549996][ T40] audit: type=1326 audit(1742437024.159:78856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5159f29359 code=0x7ffc0000 [ 436.556172][ T40] audit: type=1326 audit(1742437024.159:78857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5159f84127 code=0x7ffc0000 [ 436.558284][T23724] overlayfs: missing 'lowerdir' [ 436.562336][ T40] audit: type=1326 audit(1742437024.159:78858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.4704" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5159f29359 code=0x7ffc0000 [ 436.661942][T23726] kvm: pic: non byte write [ 436.701904][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4708'. [ 436.711928][T23730] program syz.0.4708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.400989][T23750] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4713'. [ 437.435633][ T1176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.447984][T23750] macvtap1: entered promiscuous mode [ 437.450083][T23750] bond0: entered promiscuous mode [ 437.455766][T23750] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 437.459958][T23750] team0: Device macvtap1 failed to register rx_handler [ 437.465090][T23750] bond0: left promiscuous mode [ 438.156898][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.066300][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.066300][T23755] [ 439.069087][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.071645][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.071645][T23755] [ 439.076646][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.077264][T23757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 439.079838][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.079838][T23755] [ 439.084644][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.088163][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.088163][T23755] [ 439.090913][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.093338][T23756] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 439.093675][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.093675][T23755] [ 439.098624][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.101141][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.101141][T23755] [ 439.103929][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.106559][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.106559][T23755] [ 439.113325][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.115744][T23756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4716'. [ 439.116068][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.116068][T23755] [ 439.121246][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.123784][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.123784][T23755] [ 439.126670][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.137257][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.137257][T23755] [ 439.139058][ T1176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.140780][T23755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.145638][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.145638][T23755] [ 439.148672][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.148672][T23755] [ 439.151484][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.151484][T23755] [ 439.154374][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.154374][T23755] [ 439.157276][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.157276][T23755] [ 439.160212][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.160212][T23755] [ 439.164065][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.164065][T23755] [ 439.166844][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.166844][T23755] [ 439.169640][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.169640][T23755] [ 439.172928][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.172928][T23755] [ 439.175790][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.175790][T23755] [ 439.178530][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.178819][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.178819][T23755] [ 439.183366][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.185823][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.185823][T23755] [ 439.188693][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.188693][T23755] [ 439.189637][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.191744][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.191744][T23755] [ 439.192122][T23759] could not allocate digest TFM handle sha224-ce [ 439.196319][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.196689][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 439.198276][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.198276][T23755] [ 439.200397][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.202130][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.202130][T23755] [ 439.210697][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.210697][T23755] [ 439.213423][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.213423][T23755] [ 439.216792][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.216792][T23755] [ 439.219690][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.219690][T23755] [ 439.222557][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.222557][T23755] [ 439.225426][T23755] CIFS mount error: No usable UNC path provided in device string! [ 439.225426][T23755] [ 439.230603][ T1176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.328228][T23774] kvm: pic: non byte write [ 439.473747][ T1176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.481115][T23767] chnl_net:caif_netlink_parms(): no params data found [ 439.492256][T23788] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.495580][T23788] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.498060][T23788] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.500570][T23788] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.504385][T23788] geneve2: entered promiscuous mode [ 439.505964][T23788] geneve2: entered allmulticast mode [ 439.616255][T23767] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.621281][T23767] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.623371][T23767] bridge_slave_0: entered allmulticast mode [ 439.625524][T23767] bridge_slave_0: entered promiscuous mode [ 439.634573][T23767] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.638435][T23767] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.642431][T23767] bridge_slave_1: entered allmulticast mode [ 439.644778][T23767] bridge_slave_1: entered promiscuous mode [ 439.685120][T23767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.688923][T23767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.710597][ T1176] bridge_slave_1: left allmulticast mode [ 439.712247][ T1176] bridge_slave_1: left promiscuous mode [ 439.713913][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.720001][ T1176] bridge_slave_0: left allmulticast mode [ 439.721602][ T1176] bridge_slave_0: left promiscuous mode [ 439.723198][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.732745][T23806] exFAT-fs (nullb0): invalid boot record signature [ 439.736084][T23806] exFAT-fs (nullb0): failed to read boot sector [ 439.741058][T23806] exFAT-fs (nullb0): failed to recognize exfat type [ 439.879206][ T63] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 440.039168][ T63] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.042339][ T63] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.045440][ T63] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.050144][ T63] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.052666][ T63] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.055850][ T63] usb 11-1: config 0 descriptor?? [ 440.084962][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.088907][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.092350][ T1176] bond0 (unregistering): Released all slaves [ 440.116507][T23767] team0: Port device team_slave_0 added [ 440.119542][T23767] team0: Port device team_slave_1 added [ 440.139024][T23767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.141115][T23767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.148651][T23767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.153794][T23767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.156071][T23767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.164651][T23767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.226772][T23767] hsr_slave_0: entered promiscuous mode [ 440.228653][T23767] hsr_slave_1: entered promiscuous mode [ 440.230448][T23767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.232495][T23767] Cannot create hsr debugfs directory [ 440.363066][T23821] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4732'. [ 440.417747][ T1176] hsr_slave_0: left promiscuous mode [ 440.420087][ T1176] hsr_slave_1: left promiscuous mode [ 440.422310][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.425226][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.428258][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.430657][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.473037][ T1176] veth1_macvtap: left promiscuous mode [ 440.474572][ T1176] veth0_macvtap: left promiscuous mode [ 440.476287][ T1176] veth1_vlan: left promiscuous mode [ 440.478269][ T1176] veth0_vlan: left promiscuous mode [ 440.488839][ T63] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 440.492229][ T63] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 440.497363][ T63] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 440.889871][ T6016] usb 11-1: USB disconnect, device number 43 [ 441.401235][ T5951] Bluetooth: hci2: command tx timeout [ 441.450104][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 441.556388][T23834] netlink: 'syz.6.4736': attribute type 3 has an invalid length. [ 441.559403][T23834] netlink: 'syz.6.4736': attribute type 1 has an invalid length. [ 441.562064][T23834] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4736'. [ 441.595390][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 441.666882][T23841] kvm: pic: non byte write [ 442.055341][T23851] Can't find a SQUASHFS superblock on nullb0 [ 442.112467][T23853] cgroup: Unknown subsys name 'cpuset' [ 442.124623][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4742'. [ 442.127064][T23853] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4742'. [ 442.455444][T23853] vxcan3: entered promiscuous mode [ 442.457454][T23853] vxcan3: entered allmulticast mode [ 442.579949][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'. [ 442.648334][T23869] kvm: pic: non byte write [ 442.699267][T23875] sock: sock_timestamping_bind_phc: sock not bind to device [ 442.825893][T23767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.841466][T23767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.853695][T23767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.857488][T23767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.890331][T23767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.898496][T23767] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.902270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.904308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.908825][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.910852][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.024059][T23767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.045935][T23767] veth0_vlan: entered promiscuous mode [ 443.047024][T23892] nfs: Unknown parameter 'B_oOa -udp' [ 443.050229][T23767] veth1_vlan: entered promiscuous mode [ 443.071673][T23767] veth0_macvtap: entered promiscuous mode [ 443.077359][T23767] veth1_macvtap: entered promiscuous mode [ 443.089326][T23767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.092313][T23767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.095790][T23767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.104527][T23767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.108470][T23767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.115210][T23767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.120099][T23767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.123643][T23767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.126364][T23767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.129010][T23767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.132066][T23899] netlink: 'syz.0.4754': attribute type 2 has an invalid length. [ 443.174083][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 443.174093][ T40] audit: type=1400 audit(1742437030.417:78890): avc: denied { getopt } for pid=23893 comm="syz.3.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 443.182398][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.184559][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.197986][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.200324][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.241697][T23905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.375964][T23909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4757'. [ 443.615712][T23921] netlink: 'syz.6.4759': attribute type 4 has an invalid length. [ 443.615839][T23920] netlink: 'syz.0.4761': attribute type 1 has an invalid length. [ 443.621087][T23920] netlink: 'syz.0.4761': attribute type 2 has an invalid length. [ 443.655315][T23923] 9pnet: Unknown protocol version 9p2000.uS:D® [ 443.655315][T23923] \f [ 443.718245][T23924] Invalid source name [ 443.719875][T23924] UBIFS error (pid: 23924): cannot open "./file0", error -22 [ 444.010874][T23928] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 444.112924][T23935] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -40 [ 444.123036][T23935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4766'. [ 444.207876][T23937] kvm: pic: non byte write [ 444.541886][ T63] kernel read not supported for file /zero (pid: 63 comm: kworker/3:1) [ 444.544890][ T63] kernel read not supported for file /zero (pid: 63 comm: kworker/3:1) [ 444.854825][ T40] audit: type=1400 audit(1742437031.979:78891): avc: denied { read } for pid=23949 comm="syz.6.4771" lport=15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 444.959240][T23970] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 444.975086][T23970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4777'. [ 445.251265][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 445.297743][T23996] openvswitch: netlink: Message has 1275 unknown bytes. [ 445.300307][T23996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.319880][T23993] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4784'. [ 445.327682][T23993] macvtap1: entered promiscuous mode [ 445.678558][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.685238][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.688411][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.741476][T24014] kvm: pic: non byte write [ 447.414634][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.485974][T24021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=24021 comm=syz.6.4791 [ 447.494196][T24021] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4791'. [ 447.505380][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.518576][T24020] geneve2: entered promiscuous mode [ 447.520056][T24020] geneve2: entered allmulticast mode [ 447.549744][T24025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4793'. [ 447.592174][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.601833][ T5298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.607101][ T5298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.609835][ T5298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.612335][ T5298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.614738][ T5298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 447.618250][ T5298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.626703][ T5298] Bluetooth: hci1: Malformed Event: 0x02 [ 447.739677][T24050] netlink: 'syz.6.4798': attribute type 15 has an invalid length. [ 447.739883][T24051] overlayfs: failed to resolve './file1': -2 [ 447.741911][T24050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4798'. [ 447.746435][T24034] chnl_net:caif_netlink_parms(): no params data found [ 447.838462][ T1149] bridge_slave_1: left allmulticast mode [ 447.840236][ T1149] bridge_slave_1: left promiscuous mode [ 447.841949][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.848040][ T1149] bridge_slave_0: left allmulticast mode [ 447.849630][ T1149] bridge_slave_0: left promiscuous mode [ 447.851267][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.207461][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.211777][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.215530][ T1149] bond0 (unregistering): Released all slaves [ 448.233764][T24034] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.235996][T24034] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.240953][T24034] bridge_slave_0: entered allmulticast mode [ 448.243192][T24034] bridge_slave_0: entered promiscuous mode [ 448.245858][T24034] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.247924][T24034] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.250030][T24034] bridge_slave_1: entered allmulticast mode [ 448.252659][T24034] bridge_slave_1: entered promiscuous mode [ 448.274478][T24034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.278385][T24034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.333964][T24034] team0: Port device team_slave_0 added [ 448.338170][T24034] team0: Port device team_slave_1 added [ 448.396744][T24034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.399216][T24034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.408174][T24034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.415101][T24034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.417582][T24034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.428172][T24034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.490539][T24034] hsr_slave_0: entered promiscuous mode [ 448.492575][T24034] hsr_slave_1: entered promiscuous mode [ 448.494745][T24034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.497182][T24034] Cannot create hsr debugfs directory [ 448.549583][ T1149] hsr_slave_0: left promiscuous mode [ 448.552543][ T1149] hsr_slave_1: left promiscuous mode [ 448.554828][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.557900][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.562620][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.565430][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.625622][ T1149] veth1_macvtap: left promiscuous mode [ 448.627639][ T1149] veth0_macvtap: left promiscuous mode [ 448.629531][ T1149] veth1_vlan: left promiscuous mode [ 448.631524][ T1149] veth0_vlan: left promiscuous mode [ 448.759240][T24079] ax25_connect(): syz.3.4803 uses autobind, please contact jreuter@yaina.de [ 448.774136][ T40] audit: type=1400 audit(1742437035.645:78892): avc: denied { audit_control } for pid=24078 comm="syz.0.4804" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 448.780348][T24079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4803'. [ 449.530687][T24073] ------------[ cut here ]------------ [ 449.538546][T24073] refcount_t: decrement hit 0; leaking memory. [ 449.541702][T24073] WARNING: CPU: 0 PID: 24073 at lib/refcount.c:31 refcount_warn_saturate+0x1ed/0x210 [ 449.551443][T24073] Modules linked in: [ 449.553309][T24073] CPU: 0 UID: 0 PID: 24073 Comm: syz.3.4803 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 449.554414][ T40] audit: type=1400 audit(1742437036.384:78893): avc: denied { write } for pid=5933 comm="syz-executor" path="pipe:[3813]" dev="pipefs" ino=3813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 449.559204][T24073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.569704][T24073] RIP: 0010:refcount_warn_saturate+0x1ed/0x210 [ 449.572053][T24073] Code: 8b e8 37 4e b5 fc 90 0f 0b 90 90 e9 c3 fe ff ff e8 48 20 f5 fc c6 05 43 26 86 0b 01 90 48 c7 c7 00 17 d3 8b e8 14 4e b5 fc 90 <0f> 0b 90 90 e9 a0 fe ff ff 48 89 ef e8 92 39 58 fd e9 44 fe ff ff [ 449.579280][T24073] RSP: 0018:ffffc90004757c18 EFLAGS: 00010282 [ 449.581543][T24073] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 449.584420][T24073] RDX: ffff888026f84880 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 449.587839][T24073] RBP: ffff88802aa2e64c R08: 0000000000000001 R09: 0000000000000000 [ 449.590751][T24073] R10: 0000000000000001 R11: 0000000000000002 R12: 1ffff920008eaf88 [ 449.593734][T24073] R13: ffff88802aa2e64c R14: 0000000000000000 R15: ffff88802aa2e000 [ 449.596840][T24073] FS: 000055559545f500(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 449.600084][T24073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.602552][T24073] CR2: 00007fb31ce6bf98 CR3: 000000005e116000 CR4: 0000000000352ef0 [ 449.605492][T24073] DR0: fffffffffffffffc DR1: 0000000000000006 DR2: 0200000000000000 [ 449.608589][T24073] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 449.611470][T24073] Call Trace: [ 449.612770][T24073] [ 449.613847][T24073] ? __warn+0xea/0x3c0 [ 449.615358][T24073] ? preempt_schedule_notrace+0x62/0xe0 [ 449.617565][T24073] ? refcount_warn_saturate+0x1ed/0x210 [ 449.619633][T24073] ? report_bug+0x3c0/0x580 [ 449.621385][T24073] ? handle_bug+0x54/0xa0 [ 449.623035][T24073] ? exc_invalid_op+0x17/0x50 [ 449.624902][T24073] ? asm_exc_invalid_op+0x1a/0x20 [ 449.626918][T22407] ALSA: mixer_oss: invalid OSS volume '' [ 449.627073][T24073] ? __warn_printk+0x199/0x350 [ 449.630984][T24073] ? __warn_printk+0x1a6/0x350 [ 449.632619][T24073] ? refcount_warn_saturate+0x1ed/0x210 [ 449.634172][T24073] ? refcount_warn_saturate+0x1ec/0x210 [ 449.635730][T24073] ref_tracker_free+0x710/0x820 [ 449.637102][T24073] ? __pfx_ref_tracker_free+0x10/0x10 [ 449.638585][T24073] ? ax25_destroy_socket+0x50c/0x630 [ 449.640028][T24073] ax25_release+0x33f/0xa10 [ 449.641303][T24073] __sock_release+0xb0/0x270 [ 449.642613][T24073] ? __pfx_sock_close+0x10/0x10 [ 449.644002][T24073] sock_close+0x1c/0x30 [ 449.645198][T24073] __fput+0x3ff/0xb70 [ 449.646346][T24073] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.647806][T24073] task_work_run+0x14e/0x250 [ 449.649210][T24073] ? __pfx_task_work_run+0x10/0x10 [ 449.650630][T24073] ? __pfx___do_sys_close_range+0x10/0x10 [ 449.652214][T24073] syscall_exit_to_user_mode+0x27b/0x2a0 [ 449.653808][T24073] do_syscall_64+0xda/0x250 [ 449.655117][T24073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.656839][T24073] RIP: 0033:0x7f5159f8d169 [ 449.658121][T24073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.663536][T24073] RSP: 002b:00007ffd8b73c578 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 449.665892][T24073] RAX: 0000000000000000 RBX: 00007f515a1a7ba0 RCX: 00007f5159f8d169 [ 449.668118][T24073] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 449.670379][T24073] RBP: 00007f515a1a7ba0 R08: 0000000000000300 R09: 0000001e8b73c86f [ 449.672534][T24073] R10: 00007f515a1a7ac0 R11: 0000000000000246 R12: 000000000006c378 [ 449.674608][T24073] R13: 00007f515a1a6320 R14: ffffffffffffffff R15: 00007ffd8b73c690 [ 449.676754][T24073] [ 449.677647][T24073] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 449.679680][T24073] CPU: 0 UID: 0 PID: 24073 Comm: syz.3.4803 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 449.682684][T24073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.685603][T24073] Call Trace: [ 449.686544][T24073] [ 449.687369][T24073] dump_stack_lvl+0x3d/0x1f0 [ 449.688628][T24073] panic+0x71d/0x800 [ 449.689672][T24073] ? __pfx_panic+0x10/0x10 [ 449.690943][T24073] ? show_trace_log_lvl+0x29d/0x3d0 [ 449.692436][T24073] ? check_panic_on_warn+0x1f/0xb0 [ 449.693864][T24073] ? refcount_warn_saturate+0x1ed/0x210 [ 449.695373][T24073] check_panic_on_warn+0xab/0xb0 [ 449.696797][T24073] __warn+0xf6/0x3c0 [ 449.697922][T24073] ? preempt_schedule_notrace+0x62/0xe0 [ 449.699480][T24073] ? refcount_warn_saturate+0x1ed/0x210 [ 449.701056][T24073] report_bug+0x3c0/0x580 [ 449.702291][T24073] handle_bug+0x54/0xa0 [ 449.703486][T24073] exc_invalid_op+0x17/0x50 [ 449.704802][T24073] asm_exc_invalid_op+0x1a/0x20 [ 449.706223][T24073] RIP: 0010:refcount_warn_saturate+0x1ed/0x210 [ 449.707950][T24073] Code: 8b e8 37 4e b5 fc 90 0f 0b 90 90 e9 c3 fe ff ff e8 48 20 f5 fc c6 05 43 26 86 0b 01 90 48 c7 c7 00 17 d3 8b e8 14 4e b5 fc 90 <0f> 0b 90 90 e9 a0 fe ff ff 48 89 ef e8 92 39 58 fd e9 44 fe ff ff [ 449.713192][T24073] RSP: 0018:ffffc90004757c18 EFLAGS: 00010282 [ 449.714897][T24073] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 449.717118][T24073] RDX: ffff888026f84880 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 449.719222][T24073] RBP: ffff88802aa2e64c R08: 0000000000000001 R09: 0000000000000000 [ 449.721434][T24073] R10: 0000000000000001 R11: 0000000000000002 R12: 1ffff920008eaf88 [ 449.723632][T24073] R13: ffff88802aa2e64c R14: 0000000000000000 R15: ffff88802aa2e000 [ 449.725844][T24073] ? __warn_printk+0x199/0x350 [ 449.727205][T24073] ? __warn_printk+0x1a6/0x350 [ 449.728571][T24073] ? refcount_warn_saturate+0x1ec/0x210 [ 449.730142][T24073] ref_tracker_free+0x710/0x820 [ 449.731531][T24073] ? __pfx_ref_tracker_free+0x10/0x10 [ 449.733073][T24073] ? ax25_destroy_socket+0x50c/0x630 [ 449.734579][T24073] ax25_release+0x33f/0xa10 [ 449.735875][T24073] __sock_release+0xb0/0x270 [ 449.737206][T24073] ? __pfx_sock_close+0x10/0x10 [ 449.738578][T24073] sock_close+0x1c/0x30 [ 449.739753][T24073] __fput+0x3ff/0xb70 [ 449.740905][T24073] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.742311][T24073] task_work_run+0x14e/0x250 [ 449.743609][T24073] ? __pfx_task_work_run+0x10/0x10 [ 449.744994][T24073] ? __pfx___do_sys_close_range+0x10/0x10 [ 449.746593][T24073] syscall_exit_to_user_mode+0x27b/0x2a0 [ 449.748178][T24073] do_syscall_64+0xda/0x250 [ 449.749469][T24073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.751080][T24073] RIP: 0033:0x7f5159f8d169 [ 449.752346][T24073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.757546][T24073] RSP: 002b:00007ffd8b73c578 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 449.759866][T24073] RAX: 0000000000000000 RBX: 00007f515a1a7ba0 RCX: 00007f5159f8d169 [ 449.762106][T24073] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 449.764312][T24073] RBP: 00007f515a1a7ba0 R08: 0000000000000300 R09: 0000001e8b73c86f [ 449.766518][T24073] R10: 00007f515a1a7ac0 R11: 0000000000000246 R12: 000000000006c378 [ 449.768640][T24073] R13: 00007f515a1a6320 R14: ffffffffffffffff R15: 00007ffd8b73c690 [ 449.770717][T24073] [ 449.772179][T24073] Kernel Offset: disabled [ 449.773482][T24073] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:17:22 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c635 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90004757598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=000000000000003a R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055559545f500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb31ce6bf98 CR3=000000005e116000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000006 DR2=0200000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe83cb2d80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff2dd8d98 RBX=fffffbfff2dd8d99 RCX=ffffffff819680d2 RDX=fffffbfff2dd8d99 RSI=0000000000000008 RDI=ffffffff96ec6cc0 RBP=fffffbfff2dd8d98 RSP=ffffc90003307578 R8 =0000000000000000 R9 =fffffbfff2dd8d98 R10=ffffffff96ec6cc7 R11=0000000000000003 R12=ffffed1005c1a15d R13=ffff88802e0d0000 R14=0000000000000003 R15=ffff88802e0d0b68 RIP=ffffffff821d04c1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f83908d7d60 CR3=00000000321d4000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000006 DR2=0200000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f838fd7c6a3 00007f838fd7c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe03b24f20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b15cbea 000055558b15cb20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b0e0490 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b0e6138 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b0ea308 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07f6f81000148004 0100000408060601 7580000000000001 ffffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0174080004100014 100006016cf00010 0002859008000100 000608060601239c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000711800408 81c285a408000100 000608060601239a 2080808081100011 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0030c8004119003 00100011800307f6 f810001480040100 0004080606017580 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff fffffffffffff508 14b60300020014b4 0300040014b0031f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000430ceb RBX=0000000000000002 RCX=ffffffff8b578469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd369a0 RBP=ffffed1003ad1488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d68a440 R14=ffffffff90626a10 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000ffff000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a17c488 00007f515a17c480 00007f515a17c478 00007f515a17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515acdd100 00007f515a17c440 00007f515a170004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a17c498 00007f515a17c490 00007f515a17c488 00007f515a17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd81876afd8fad74 05150a38ca30fbba dc6c80a71f6e758d e44f0fbc61315900 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 53c456598950f424 02ae780f50c550f2 211c1ebd4bf1a1b0 5224c538bb30cb02 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20d7586818b890fd b762b2b058f280a9 e5a60a023183f6d4 de3c891e1a715f91 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0b7507bf4d7b2c 7e61068681d0478c 5bdd6ef66bb3e35d a2f9b897692dcdc6 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8ccb022fa7f4bbde c24a4898dd7839ca 84d259033c1a1ceb 50d49b04e16ab75f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000000f0 RCX=ffffffff8199bd6a RDX=ffff88801eaf2440 RSI=ffffffff8199bd56 RDI=0000000000000001 RBP=1ffff920000f0f76 RSP=ffffc90000787ba0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff888026f84880 R15=ffffc90000787c68 RIP=ffffffff8199bd58 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36281c CR3=00000000233f0000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e617077 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559300f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6920f43300f0000 400035320f059d64 80380f4766855ac7 0f3ec0220feed60f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5593cdd100 00007f559317c440 00007f559317c458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f559317c498 00007f559317c490 00007f559317c488 00007f559317c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000