last executing test programs: 22m41.647983887s ago: executing program 3 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffff9, 0x0, 0x1, @void, @value, @void, @value}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x20000, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002000040"]) 22m40.225530249s ago: executing program 3 (id=156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 22m39.640949243s ago: executing program 3 (id=159): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44e200, 0x90) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x1}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000380)=ANY=[], 0x46) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000180)='nodecompose'}, 0x30) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001a000100000000000000000002000000000000000000000005001b0006000000080004"], 0x3c}}, 0x0) 22m31.715490344s ago: executing program 3 (id=173): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400c40000000000dd0a000000000000730191d9c48a000063d0"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x10, 0x70bd2e, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x8000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b2b2399bcc1a88e81bf7ebde4ed151c7a526e2b483cd4931e04b2ac562fb56ac03dcd5af9125328ec60700e8627d5a06b6123028375d7af4200fdde9cf940ef3f0dc3297839ba23a1dd06393d63fc034bf5c", @ANYRES16=r3, @ANYBLOB="000200000000fcdbdf25030000000c0004000000008000000000"], 0xffffffffffffff55}, 0x1, 0x0, 0x0, 0x94}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) futex(0x0, 0x6, 0x1, &(0x7f0000000280), 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/79, 0x4f}], 0x1, 0x59dc, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24010000160001000000000000000000ac141400000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010102000000000000000000000000000000003200000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000005000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000f8ff000000000000000000b1a000002c000b000a010101000000000000000000000000200100000000000000000000000000010000000000000000"], 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x40) setpriority(0x2, 0x0, 0x8001) 22m30.147143233s ago: executing program 3 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) symlink(0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1413, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 22m27.973823532s ago: executing program 3 (id=182): open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000000080)={'macvlan0\x00', @ifru_names='team_slave_0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f00000000c0)='bond_slave_1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x7, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRESDEC, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES8, @ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0xa, 0xe4, &(0x7f0000000700)=""/228, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) 22m12.646084151s ago: executing program 32 (id=182): open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000000080)={'macvlan0\x00', @ifru_names='team_slave_0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f00000000c0)='bond_slave_1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x7, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRESDEC, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES8, @ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0xa, 0xe4, &(0x7f0000000700)=""/228, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) 17m20.864481486s ago: executing program 5 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x880000, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) io_setup(0x81, &(0x7f0000000180)=0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000340)='p', 0x300}]) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066ffffff1f200000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000500)=0x15) syz_usb_connect(0x3, 0x30, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0xf8, 0x7, 0x3, [@generic={0x3, 0x24, "df"}]}}]}}]}}]}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r8, 0x0, 0xffffffff00000018) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, r11, r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r11, 0x0, 0x2, 0x4}}, 0x20) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000007010040000000000600000000000004b20100"/40]) 17m15.525200495s ago: executing program 5 (id=1017): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) write$nci(r0, &(0x7f0000000080)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x80, {0xfe, 0x2, "7582fa79083e712a825b3982fe33f1c368662f331f9c3354b5f7794182ce0b3f891d379312f90e4f964fe62ca23641ea8d23174044174e4e738251005b58a408316ea0f00edeaaf0edb36476798ba3def555c6b3cdc782fb1039e99f057f196559b437af55be3e53749a4a46a9576e1c3122870e1fa8c9b00c79556ddd7af9d19ab273518a61ae95f61094cdc78d20e247af3ed07e9c902bc2881da7b0b3df67b87b39544e3babb40e8501380cb7"}}, 0xb3) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000840)={0x0, 0x0, r2, 0x0}) r4 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r4) keyctl$read(0xb, r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0xfffffffd, 0x808, 0x0, 0x3, [0x0], [0x10, 0x0, 0x0, 0x3], [0x428e050d], [0x0, 0x402]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={r5}) 17m15.122713819s ago: executing program 5 (id=1020): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 17m14.822948183s ago: executing program 5 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) (fail_nth: 9) 17m12.715169321s ago: executing program 5 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x880000, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) io_setup(0x81, &(0x7f0000000180)=0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000340)='p', 0x300}]) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066ffffff1f200000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000500)=0x15) syz_usb_connect(0x3, 0x30, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0xf8, 0x7, 0x3, [@generic={0x3, 0x24, "df"}]}}]}}]}}]}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r8, 0x0, 0xffffffff00000018) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, r11, r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r11, 0x0, 0x2, 0x4}}, 0x20) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000007010040000000000600000000000004b20100"/40]) 17m11.451664091s ago: executing program 5 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="00009500000000feff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private2, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47feb3", 0x0, 0x32, 0x0, @mcast1, @remote, [], "72210d8e282cfc26"}}}}}}}, 0x0) r3 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef40d00fb010511000b000a000d000000ba80000012010000000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x48810) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x944}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x16, 0xa01, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x4) memfd_secret(0x0) 17m11.431626414s ago: executing program 33 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="00009500000000feff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private2, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47feb3", 0x0, 0x32, 0x0, @mcast1, @remote, [], "72210d8e282cfc26"}}}}}}}, 0x0) r3 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef40d00fb010511000b000a000d000000ba80000012010000000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x48810) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x944}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x16, 0xa01, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x4) memfd_secret(0x0) 16m44.331750781s ago: executing program 6 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 16m43.19612707s ago: executing program 6 (id=1121): timerfd_create(0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000001840)) 16m42.326927598s ago: executing program 6 (id=1125): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x4000000000007ff]}, 0x8, 0x800) io_setup(0x206, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xab, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xcf, r2, 0x0, 0x0, 0x7, 0x0, 0x7, r2}]) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="f8a4bf1b12816d3dd7605315dbaab65a7505", 0x12}, {&(0x7f0000000480)="bfa47c2ec25654a4db5ee92060ce6b15104c04ce40c804afa44dc246f099e019e0427264073c8faf2b30f6fa502dd1e4795b104641d169d9a09207f23d2451a09773634b11ebb0d0ea1f6b0c0024bb0d0ef0100912872c6f82bb9fd4d7052280619c15e58b127392fae4acbfb8d28788a40e3fa0b5629d78fc5cb8da566d99f9ac19f7ba94dc245d475fcf4bf84e56201b31dbf5f3a1ed1df1337906c26f4a0e7aa084c64852b1f39b2c47dd22712f21ab2bb8c9baeadc0d7d162fc30e0ac078417d7e681446830d2814a1cfcd7485c11c838004ba52925241253c56c37fdb2766d43139dfe5169b4ebed156606cc71d3ba2468ea92f691f92e30ba9", 0xfc}], 0x2, &(0x7f0000000380)=[{0x30, 0x109, 0xffff, "8510b15aa91a0b45c5a39f643c19b54da8db6be56eb51d73bd04e7f9"}], 0x30}, 0x40000) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2b, 0x800, 0x6f) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x53946}]}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ff02000000000000", @ANYRES32], 0xec}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x44, r7, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}]}, 0x44}}, 0x20004020) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 16m40.367314976s ago: executing program 6 (id=1131): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x22, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="5800000000000000290000003b0000002f07100000000000c91000000000000000000000ffff0a010100010100c910fe8000000000000000000000000000bb04010401040000000005027fff010800000000000000000000280000000000000029000000050000003202020100000000fe8000000000000098000000000000bb"], 0xfffffffffffffe44}, 0x20000080) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00') 16m37.909291023s ago: executing program 6 (id=1137): socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x67}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x1}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) r6 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000001c0)={0x1, 0xe93}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) landlock_restrict_self(r7, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) 16m34.994893181s ago: executing program 6 (id=1144): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x4a041, 0x0) io_setup(0x3ff, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001840)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40) 16m33.96880475s ago: executing program 34 (id=1144): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x4a041, 0x0) io_setup(0x3ff, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001840)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40) 2m50.69212589s ago: executing program 0 (id=3684): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6, 0x10000, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2m49.280130811s ago: executing program 0 (id=3686): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400c40000000000dd0a000000000000730191d9c48a000063d0"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x10, 0x70bd2e, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x8000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b2b2399bcc1a88e81bf7ebde4ed151c7a526e2b483cd4931e04b2ac562fb56ac03dcd5af9125328ec60700e8627d5a06b6123028375d7af4200fdde9cf940ef3f0dc3297839ba23a1dd06393d63fc034bf5c", @ANYRES16=r3, @ANYBLOB="000200000000fc"], 0xffffffffffffff55}, 0x1, 0x0, 0x0, 0x94}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) futex(0x0, 0x6, 0x1, &(0x7f0000000280), 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/79, 0x4f}], 0x1, 0x59dc, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24010000160001000000000000000000ac141400000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010102000000000000000000000000000000003200000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000005000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000f8ff000000000000000000b1a000002c000b000a010101000000000000000000000000200100000000000000000000000000010000000000000000"], 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x40) setpriority(0x2, 0x0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) 2m47.386244885s ago: executing program 0 (id=3689): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x2, 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffef83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0xd, 0x1, "de"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x3, 0x101142) memfd_secret(0x80000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{'udp\x00'}]}) 2m43.839130924s ago: executing program 0 (id=3693): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) io_uring_setup(0x6112, &(0x7f00000008c0)={0x0, 0x9e9, 0x829, 0x0, 0x234}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) 2m42.237735869s ago: executing program 0 (id=3696): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6, 0x10000, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2m39.384452666s ago: executing program 0 (id=3701): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43fab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="e0d8010004a7010017002400186564f438cf560eb19e69527f074ae627a2bc00"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc055) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000089500000000000000d3395c874c7332217fdf7d3779aee10bf90ae95367e56b84bcbc9f6b6cf0890bd75c8c09e0a62de77555f72b1d68c703b1eb5e6bce380b3a9fed711123ef9c24090dfa21463f2d98fdab894837c908b113b926101fb7381354fd0fadc1d6cca95de1b596b38b14f7bef232a2db07f21fc74635b806bdd1e556d2dc9ce47192f39eeca128999eca24ba6b48a9330066d5dfb5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000001, 0x0, 0x106, 0xa}}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) 2m24.051675202s ago: executing program 35 (id=3701): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43fab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="e0d8010004a7010017002400186564f438cf560eb19e69527f074ae627a2bc00"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc055) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000089500000000000000d3395c874c7332217fdf7d3779aee10bf90ae95367e56b84bcbc9f6b6cf0890bd75c8c09e0a62de77555f72b1d68c703b1eb5e6bce380b3a9fed711123ef9c24090dfa21463f2d98fdab894837c908b113b926101fb7381354fd0fadc1d6cca95de1b596b38b14f7bef232a2db07f21fc74635b806bdd1e556d2dc9ce47192f39eeca128999eca24ba6b48a9330066d5dfb5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000001, 0x0, 0x106, 0xa}}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) 2m20.30003794s ago: executing program 1 (id=3651): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x8c8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000"], 0x34}}, 0x0) 1m43.06106923s ago: executing program 1 (id=3651): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x8c8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000"], 0x34}}, 0x0) 1m20.371490786s ago: executing program 1 (id=3651): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x8c8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000"], 0x34}}, 0x0) 59.566843026s ago: executing program 1 (id=3651): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x8c8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000"], 0x34}}, 0x0) 36.774315349s ago: executing program 1 (id=3651): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x8c8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000"], 0x34}}, 0x0) 19.0266598s ago: executing program 1 (id=3651): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x8c8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000"], 0x34}}, 0x0) 13.032008931s ago: executing program 2 (id=4035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) open_by_handle_at(0xffffffffffffffff, 0x0, 0x9e4b) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) 11.197781549s ago: executing program 2 (id=4037): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) io_uring_setup(0x6112, &(0x7f00000008c0)={0x0, 0x9e9, 0x829, 0x0, 0x234}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0xc}) r9 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) 9.514836339s ago: executing program 8 (id=4040): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000800000000000000010000060400000005"], 0x0, 0x34, 0x0, 0x8, 0x2000000, 0x0, @void, @value}, 0x28) (fail_nth: 6) 8.616178735s ago: executing program 8 (id=4041): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r3, 0x1, 0x0, 0x0, {0x6}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl(r1, 0x8b1a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8.380102411s ago: executing program 2 (id=4042): keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000240)=0x9, 0x4) 8.339404046s ago: executing program 8 (id=4043): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000480)=""/167) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xfdff) 7.636197347s ago: executing program 4 (id=4045): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='cpu.idle\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="cee64a21d44b66ea8c6b6ecf76a3d2972b7eb7fd753ff62571b37e9c05bfb4a858695e5deb45b34588179eb0ed6b1d6f6c04037149e4fa9be52f993fbddffe2cba8b8700c5969e8167ca3e9f93d0bf01dde95afac173a530db4f86e0310970f49d7cfb16044f06543e72d8f2f8ee9695f8f0aaf3ff750c2d51df9461975edd1dca5bdb7f747ae7f2a0000ce5e5e22e9d0c832dff9e1c6b3dde5da4e7b73d2a5f600d6ea64deae70d80ac7d5f6467c5691b449957", @ANYRES32=r4, @ANYBLOB='~\x00'/20, @ANYRES32=r4, @ANYBLOB="0200120000000400000022000000008000000000000000000000000044f30dfa48be9e4fa7643c2ff0d725ffe9653593bc67e028dc8faeea7a8131c9f7582b50325c302e57c53ab21e10970bf92ef2923f241acf415c9f"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf250b00000044000580"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SCSI_RESET(r7, 0x2284, 0x1000000000000) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 7.072036246s ago: executing program 8 (id=4047): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r5, 0x400455c8, 0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000005440)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x21, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x8c}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.596905417s ago: executing program 4 (id=4048): io_setup(0xeb0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xda, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x23, 0x805, 0x0) write$cgroup_pid(r4, 0x0, 0x4000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000002fe316b07d2985d1d84ddb5aa6e7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r12, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) poll(&(0x7f00000001c0)=[{r12}, {r10}, {r11, 0x28}, {r5, 0x8}, {r8, 0x401}, {r5, 0x301}, {r10, 0x20}], 0x7, 0x2) 5.47421925s ago: executing program 7 (id=4049): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 5.240048985s ago: executing program 7 (id=4050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101, 0x3}) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB='v:'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x0, &(0x7f0000000280)=0x8) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) dup(r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9ef131a5", @ANYRES16=r7, @ANYBLOB="01040000000000000000120000000800070002000000180001801400020076657468305f746f5f626f6e64000000"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000006800010000000000000000000a00000000000000100008800c0001000002002000000000060007000800000008000500", @ANYRES32=r3], 0x38}}, 0x0) 4.990450965s ago: executing program 4 (id=4051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x200) 4.689531515s ago: executing program 4 (id=4052): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) io_uring_setup(0x6112, &(0x7f00000008c0)={0x0, 0x9e9, 0x829, 0x0, 0x234}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0xc}) r9 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) 4.607925171s ago: executing program 2 (id=4053): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r2, 0x1, 0x0, 0x0, {0x6}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl(r0, 0x8b1a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.310581244s ago: executing program 2 (id=4054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.102773575s ago: executing program 2 (id=4055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4], 0x4000, 0x200201}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x14, r4, 0x5, 0x100000, 0x0, {0x22}}, 0x14}}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x4ff, 0x32, 0x65, 0x65, 0x33}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0x145, "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"}, &(0x7f0000000100)=0x169) r7 = syz_usb_connect_ath9k(0x3, 0xffffffffffffff7a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e462, [{{0x9, 0x2, 0x40}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) 4.075452163s ago: executing program 7 (id=4056): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, &(0x7f0000000000)=0x7705f8b29856cc42) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000010) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, r7, {0x10}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000a00), 0x40000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000a40)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x300, 0x6, 0x1000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000008"]) 3.190429088s ago: executing program 4 (id=4057): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="00200000d27c3e7c2993424b4000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) select(0x40, &(0x7f0000000300)={0xd, 0x6, 0x1000, 0x7, 0x0, 0x6, 0x8, 0x6}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000}}, 0x3ff}, 0x90) bind$bt_hci(r3, &(0x7f0000000000), 0x6) r5 = socket(0x29, 0xa, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) ptrace(0x11, r7) r8 = socket(0x1d, 0x2, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000200)=@generic={0x3, 0x9, 0xfffffffffffffffb}) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r6, 0x3}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) io_uring_setup(0x396b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000002}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r3, 0x400448dc, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200200000002010400000000000000000a000000040001800400038004000280"], 0x20}}, 0x4004) 2.66629404s ago: executing program 7 (id=4058): r0 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2000000000000314, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) gettid() ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @sliced={0xf, [0x9, 0x0, 0x9, 0x6, 0x4, 0xfff, 0x1, 0x258, 0x400, 0x1000, 0x9, 0x3, 0x1, 0x1, 0x28, 0xe, 0x3, 0x53c8, 0x3, 0x77ab, 0x101, 0x2, 0xaa, 0x6, 0x8, 0x9, 0x7, 0x6, 0xd6a, 0xffff, 0x1ff, 0xc, 0x70, 0xea8b, 0x2, 0x33c, 0x9, 0x4, 0x5, 0x1, 0x1, 0x58e, 0x4, 0xf6f, 0x0, 0x6, 0x3, 0xf616], 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r7 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}, 0x400}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000500)={@empty, r8}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000002580)=@newchain={0x2000, 0x64, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xfff2}, {0xffe0, 0x1}, {0xc684e3987740e7da, 0xffe0}}, [@f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x4}}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x40}]}]}}, @f_rsvp={{0x9}, {0x854, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_POLICE={0x840, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x400, 0xeca4, 0x0, 0x8000, 0x7fffffff, 0x27e00000, 0x9, 0x10, 0x7, 0x2e, 0x4, 0x5, 0x5, 0x9, 0xfff, 0x9e, 0x8000, 0x0, 0x5, 0x7, 0x3, 0x5, 0x3ff, 0xaa0, 0x6, 0xfcef, 0x0, 0x7, 0x3, 0xd, 0x8, 0x1c, 0x7ff, 0x7, 0x7, 0xdc, 0xb8, 0x7, 0x4, 0x5734, 0x3, 0x9b2, 0x57, 0x7a4a, 0x1, 0x4, 0x9, 0x17f, 0x8, 0xe, 0x885, 0x4, 0x10, 0x1, 0x3, 0xfffffff9, 0x80000000, 0x9, 0x200, 0x6, 0x400, 0xc, 0x5, 0x96, 0xe4, 0xfffffffa, 0x7, 0x9, 0x7, 0x100, 0xfffffff9, 0x4, 0x8, 0x40, 0x10000, 0x3, 0x4, 0x31e, 0x7, 0x80000001, 0x9d, 0x8001, 0x4, 0x96f0, 0x1, 0xfffffff9, 0x0, 0x4, 0xd6, 0x4, 0x1, 0x2, 0x400, 0x5, 0x7, 0x2, 0x100, 0x8, 0x9, 0x6, 0x80000000, 0x10001, 0x2, 0x2, 0x8, 0x9, 0xfffffff9, 0x7fff, 0x99c, 0x8, 0x5, 0x31, 0x4, 0x4, 0x8, 0x3, 0x84c4, 0xc, 0x1, 0x4, 0x7909170e, 0x10000, 0x7, 0x7, 0x82, 0x58ad, 0x4, 0x6, 0x2, 0x0, 0x80000001, 0xd, 0x0, 0x100, 0x7f, 0x4, 0x7fffffff, 0x5, 0xc673, 0x2, 0xffffffff, 0xf0, 0x2, 0xa, 0x8, 0x1, 0x7fffffff, 0x8a6d, 0x9, 0x0, 0x0, 0x100, 0x7, 0x3, 0xfffffff6, 0x9, 0x3, 0x7fff, 0x11e, 0xbe, 0x8001, 0x7, 0x4, 0x5, 0x7, 0x8, 0x200, 0xfffffffd, 0x7ff, 0x3, 0x5, 0x9, 0x0, 0xa, 0x100, 0x200, 0x4, 0xfffffffc, 0x5, 0x8c8, 0x0, 0x5, 0x800, 0x2, 0x5, 0x1ff, 0x8ba, 0x9d, 0x3, 0x1, 0x5912, 0x8e, 0x7ff, 0x5, 0x2, 0x2, 0xef5, 0xfffffff7, 0xf50, 0xa, 0x6, 0x7, 0x7, 0x1, 0xffffffb8, 0x14bc, 0x0, 0x2, 0xc, 0x400, 0x6, 0x1, 0x7, 0x6, 0xfffffff7, 0x7, 0x4, 0xe, 0xbd5, 0x1, 0xcc, 0x2, 0x1, 0xd9, 0x10000, 0xfffff801, 0x6, 0x5, 0xfffffff8, 0x3, 0x4, 0x10, 0x4, 0x9, 0x2d3, 0x0, 0x0, 0x1, 0x1000, 0x5, 0x2, 0x6, 0xf4, 0x1, 0x2, 0x0, 0x7, 0xfffffff9, 0x7fff, 0x67, 0x5, 0xab, 0xea7, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xc20c, 0xffffffff, 0x7fffffff, 0x725, 0x0, 0x8000, 0x1, 0x3, 0x7f, 0x9, 0x4, 0x8001, 0x10, 0x5cbd, 0xfffe0000, 0x1, 0x1, 0x7, 0xb6b, 0x8, 0x9, 0x6, 0xf2f, 0x4, 0x3, 0x10001, 0x3ff, 0xf35, 0xb, 0xa6, 0x59dddd29, 0x9, 0xe, 0x9, 0x8, 0x957, 0x0, 0x8, 0xe644, 0x8000, 0x1, 0x80000000, 0x1, 0xb8, 0x0, 0x2, 0x2, 0x7, 0x2, 0x2, 0x8, 0x2, 0x80000000, 0x5e711ab4, 0x10000, 0x200, 0x7, 0x5, 0xf, 0x7, 0x9, 0x5, 0x8, 0x27, 0x10001, 0x8000, 0x9, 0x1ff, 0x1, 0x5, 0x2, 0xeb, 0x0, 0x5, 0x1, 0x7f, 0x1, 0x1, 0x6, 0x9, 0xb16, 0x8, 0xdbda, 0xfff, 0x9, 0x9, 0xf, 0x0, 0x1, 0x5, 0xffffffff, 0x2, 0x3, 0x56f, 0x4, 0x101, 0xc305, 0x7ff, 0x9, 0xd, 0x7, 0x6, 0x5, 0x278, 0xfff, 0x401, 0x7, 0x0, 0xb4ce, 0xffffffff, 0x4, 0x7, 0xffffffff, 0x8, 0x1, 0xe8, 0x3, 0xffffff7f, 0x88, 0x2, 0x9, 0x9, 0xfffffff8, 0x7, 0xffffffff, 0x80, 0x80000000, 0xbae, 0x3, 0x3, 0xbaa, 0x7ff, 0x7fffffff, 0x9, 0xcc, 0x4, 0x2, 0x800, 0x7, 0x80, 0x1, 0x8, 0x3, 0x1000, 0x6dea, 0x3ff, 0x6861, 0x8, 0x7, 0x7, 0x2, 0x4, 0x100, 0x7e9, 0x3, 0x5, 0x3, 0x3, 0x1, 0x9, 0xfe000000, 0x4, 0x7ff, 0x1, 0xfffffffa, 0x1, 0x5, 0x7, 0x43b, 0x2, 0x1, 0xe, 0x5, 0x9, 0xfff, 0xfffffffb, 0xaa82, 0x42, 0x5, 0x9, 0xcd5, 0x6, 0x7, 0xf0d, 0x100, 0x8, 0xb, 0x0, 0x8, 0x4, 0x2, 0x7ae5, 0x6, 0x2, 0x6c, 0x5b5f, 0xfffffff9, 0xd, 0x6, 0x7, 0xb, 0x9, 0x1, 0x81, 0x7f, 0x6, 0x80000001, 0xe, 0x4, 0x6, 0x6, 0x2, 0x5, 0x4, 0x6, 0x6, 0x101, 0x5, 0x2, 0xd, 0x2, 0x9, 0x9, 0x1, 0x2, 0xaf8, 0xffff0001, 0xffffffff, 0x0, 0x6, 0x5, 0x401, 0xe3, 0x5, 0x28, 0x0, 0x7fffffff, 0xfd5, 0x4, 0xffffffff, 0x8000007, 0x2, 0x10000, 0xfe, 0x400, 0xfffff800, 0xf8, 0x6, 0x3, 0x4, 0x3, 0x4, 0x10000, 0x8, 0x1380, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6120}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @f_rsvp={{0x9}, {0x1ac, 0x2, [@TCA_RSVP_ACT={0x160, 0x6, [@m_mirred={0x15c, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x83, 0xffffffffffffffff, 0x7, 0xfff}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x1580, 0x0, 0x3, 0x7}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x8, 0x8, 0x7fffffff, 0x5}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x401, 0xffffffffffffffff, 0x7}, 0x2, r11}}]}, {0xaf, 0x6, "85a605d3748cd960ddfeee5a0aba45baad43bc8651fbe52bcf1a66f57ba3e344a16b9fe5d19528593896bbcce8de6f2ee306d0b7f0d5cb61e2d39b120845da11c0516cbbe46710f9953b575625705a6c40f230f2f713ecd355f7afe7685529d177aaec6bbad8d37e38cad014676e3983d33e989da88b84abb9fd32aeecc3e70ff1c6cf21a9fbd4781c146812626d812375b370a9d21cf599884f7c14995f57e0288bbc88e9f211382c4df0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7ff, 0x3, 0x4}, {0x9, 0x5, 0x4000000}, 0x5c, 0x7, 0x2}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0xd}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_rsvp={{0x9}, {0x8e0, 0x2, [@TCA_RSVP_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x3, 0x8, 0x69, 0x63, {0x9, 0x1, 0x8001, 0xb, 0x5, 0x2}, {0x0, 0x1, 0xc2e7, 0x8006, 0x6, 0x8}, 0x9, 0x1, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]}, @TCA_RSVP_POLICE={0x888, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x59e}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x4, 0x9, 0x5, {0xf7, 0x0, 0x0, 0x8c, 0x8, 0x5}, {0xc, 0x2, 0xbb6f, 0x80, 0xe8, 0x8}, 0x800, 0x2179, 0xd}}, @TCA_POLICE_RATE={0x404, 0x2, [0x48b, 0x0, 0x0, 0xaec0, 0x9, 0x6, 0x8, 0x7, 0x1, 0xb2371b2, 0x2, 0xfffffff8, 0x6, 0x80000001, 0xd, 0x7, 0x1, 0x0, 0xfffffdfd, 0x6, 0x3, 0x5, 0x6, 0xe, 0x0, 0x8000, 0x40, 0x7, 0x75d7, 0x3, 0x1, 0x5, 0xc, 0x2, 0x7, 0x8, 0x0, 0xffff, 0x7, 0x7, 0xffff8000, 0x6, 0x1, 0xeb, 0x3, 0x3, 0x0, 0x2, 0x2bb, 0x2, 0xed, 0x7fffffff, 0x8, 0x6034, 0x1ff, 0xd, 0x4, 0x7, 0x9, 0x2, 0x0, 0x5, 0x7ff, 0x10, 0x5, 0x10, 0x3, 0x8000, 0x6, 0x58, 0xa, 0x3ff, 0x2, 0x8, 0xdb, 0x2, 0xb, 0x81, 0xc, 0x8, 0x1, 0x9, 0x401, 0xa5d3, 0x0, 0x2, 0x3ff, 0x9, 0x8, 0x0, 0x100, 0x0, 0x7, 0xcd36, 0x6, 0x9, 0x81, 0x5, 0x925a, 0x10, 0x1000, 0x81, 0x5, 0xff, 0x3, 0xa, 0xffff, 0x2, 0x7, 0xb48, 0x1, 0x0, 0x34, 0xffffff70, 0x3799, 0x3c48, 0x0, 0xce, 0x0, 0x4, 0xe006, 0xf, 0x0, 0x7, 0x2, 0x97, 0x800, 0x3, 0x8, 0xfffffffd, 0x7, 0xffff0000, 0x40, 0x81, 0x28b77caa, 0x10001, 0x2, 0x1, 0x0, 0x80000001, 0x7, 0x400000, 0xfffff7ab, 0x1, 0x14, 0x2, 0x8, 0xfffffffb, 0x401, 0xffff, 0xd45, 0x4, 0x6, 0x3, 0x40000003, 0x9d, 0x6b7b, 0x48, 0x7, 0x2, 0x3, 0x7f000, 0x7ff, 0x800, 0x4, 0x483be4ad, 0x80, 0x0, 0x40, 0x400, 0x5, 0x6, 0x2, 0x9, 0x1, 0x10001, 0x8, 0x4, 0x200000, 0xfffffffa, 0x0, 0x525, 0x6, 0x6b, 0x0, 0x0, 0x3, 0x2, 0x287, 0x3, 0x9, 0x80000000, 0x24a, 0xed0e, 0x9, 0x9, 0x7fff, 0xd5, 0x285b, 0x2, 0x9, 0xc, 0x5d, 0xffffffff, 0xfffffc00, 0x7, 0x9, 0x8, 0x5, 0x6, 0x7, 0x3, 0xd, 0xff, 0x6, 0x501ff633, 0x9, 0x9, 0xf7b8, 0x9, 0x3, 0x1, 0x8001, 0x8001, 0x83be, 0x8, 0x10, 0x2, 0x7, 0x1, 0xfffffffa, 0x2, 0x6, 0x100, 0x400, 0x9, 0x5, 0x80000000, 0x5, 0xe64, 0x0, 0x5, 0x0, 0x2, 0x200, 0x7fffffff, 0x1, 0x2, 0x8, 0x6, 0x4, 0x80000000, 0x6, 0x2, 0x10001, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0xfa, 0x200, 0x40, 0x8, 0x7, 0x10000, 0xb7, 0x101, 0x1000000, 0x7ff, 0x248, 0x9ea, 0x7, 0xaba, 0xf, 0xfa0, 0x0, 0xfffffffe, 0x2, 0x1, 0x6, 0x8, 0x8000, 0xb, 0x10001, 0x38000000, 0x6, 0xffff8001, 0x7fffffff, 0x81, 0xfffff000, 0x29b, 0x7, 0x49, 0xe2, 0x4, 0x7, 0x3, 0x40, 0x80, 0xc, 0x9, 0x91d2, 0x2, 0x8, 0x5, 0xe973, 0x0, 0x200, 0x200, 0x1, 0x7, 0x1, 0x3d, 0x0, 0x7, 0x81, 0x7, 0x7, 0x4f88, 0xffffffff, 0xc, 0x6ef8, 0x1, 0x1, 0x60000, 0x80000001, 0x0, 0x3, 0x98b2, 0x2, 0x7f3, 0x8, 0x2, 0x5, 0x9fa, 0x8, 0x8, 0x0, 0x6, 0x4, 0x182c, 0xfffffffd, 0xffffff00, 0x1, 0x1069, 0x0, 0x8, 0x7, 0x3, 0x0, 0x7, 0x3, 0x9, 0xfff, 0x1, 0x10001, 0x10, 0x3, 0x4, 0x0, 0x7, 0x0, 0x5, 0x10000, 0x8001, 0xc6, 0xc, 0x4, 0x9ca8, 0xfffffff0, 0x4, 0xec92, 0x3, 0x8, 0xc696, 0x13a5, 0x3, 0xc727, 0xfffffffb, 0x8, 0x7fffffff, 0x7, 0xd67, 0x6, 0x5, 0x9, 0x1, 0x3, 0x956, 0x5, 0x0, 0x81, 0x3, 0x3c8, 0x5, 0x0, 0x5, 0xe, 0x5, 0xa, 0xc6f, 0x9f4, 0xb, 0x8, 0x80000001, 0x200, 0x40, 0x8, 0x4, 0x3, 0x2, 0x6, 0x9, 0x3, 0x7fff, 0x1, 0x8001, 0x4c, 0xe, 0x3, 0x4, 0x5, 0x16e, 0xfff, 0x28e, 0xe, 0x3, 0x10, 0x0, 0x4, 0x4, 0x7, 0x3, 0x4, 0x1, 0xf, 0x8, 0xb7a, 0x200, 0x8, 0x29bd46dd, 0x1, 0x4, 0x800000, 0xfff, 0x3, 0x8, 0x0, 0xffffffff, 0x1ff, 0x100, 0x8, 0x9, 0x6, 0x1, 0x3, 0xff, 0xaed, 0x1e71, 0x80, 0x0, 0xc, 0xfff, 0x800, 0x6, 0x8, 0x9, 0x1ca, 0xf3, 0x1, 0xf0f, 0x998f, 0xd4, 0x8, 0x1, 0x6, 0xaf9, 0x0, 0x101, 0x3, 0x4, 0x0, 0xd56b, 0x5, 0x3, 0xc1da, 0x2, 0x0, 0x10, 0x0, 0xfffffff8, 0x0, 0x5, 0xc91, 0x3, 0x7, 0xe, 0x1000, 0x238, 0x4, 0x5, 0xfc000000, 0x4, 0x1, 0x6, 0x6, 0x5, 0x400, 0x6, 0x1, 0x7fffffff, 0x73b, 0xfffff801]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}]}, @TCA_RSVP_CLASSID={0x8}]}}, @f_rsvp={{0x9}, {0xc44, 0x2, [@TCA_RSVP_POLICE={0xfffffffffffffe91, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x0, 0xfff, 0xd2, 0x5, 0x6, 0x60e, 0x6, 0x3, 0xffff, 0x218, 0xf3d000, 0x8, 0x3, 0x80000000, 0x2, 0x4, 0x40, 0x6, 0xc, 0x2eb, 0x7, 0x7, 0x549, 0x5, 0x1, 0x6, 0x101, 0x9, 0x9, 0x2, 0x1, 0x3, 0xa5, 0xa5, 0xcf7, 0x1, 0x8, 0x2, 0x4, 0x24, 0x4, 0x2, 0x101, 0x9, 0x9, 0x67, 0x38, 0x99bc281, 0xb825, 0x7, 0xe, 0x5, 0x1, 0x9, 0x4, 0x2, 0x0, 0x6, 0x7, 0x5, 0x0, 0x7, 0x3, 0xe, 0x6, 0x8, 0xfffff0d2, 0xfffffff2, 0x9, 0x9, 0x5, 0x0, 0x4, 0x1, 0x2, 0x0, 0x2950, 0xf0, 0x2, 0x2d, 0x7fff, 0x0, 0xc, 0x2, 0x1ff, 0x2, 0x8001, 0x8, 0x5, 0x0, 0xc069, 0x9b, 0xd, 0x7, 0x8, 0x4, 0x5, 0x5190c42f, 0xa, 0x7, 0x3, 0x4, 0xfffffffb, 0xacb, 0x6, 0x9, 0x3, 0xffff, 0x5860, 0x1, 0x3, 0x5, 0x8, 0x9, 0x10000, 0x0, 0xff, 0xff, 0x8001, 0x1, 0x8002, 0x7ff, 0x7, 0x5, 0x4, 0xfff, 0x4, 0x200, 0x6, 0x1ff, 0x67b, 0xe, 0xe28, 0x2, 0x1, 0x3, 0x7fff, 0x7, 0xd, 0x80000000, 0x2, 0xfffffffd, 0x0, 0xc, 0x4, 0x1, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2, 0x0, 0x982a, 0x5c0dfc88, 0x1df3deb6, 0x9, 0x6, 0xd6, 0xfffffff9, 0x4200000, 0x10, 0x4, 0x3, 0x1ff, 0xf, 0x8001, 0xffff, 0x5, 0x926, 0x7, 0xb, 0x2, 0x5, 0x1, 0x8001, 0xad, 0xe, 0x3, 0x3, 0x1, 0x2, 0x9, 0x8, 0x8a5, 0x80000001, 0x6, 0x3, 0x72, 0x1, 0x1b2, 0xb, 0xfff, 0x81, 0x6, 0xfffffffd, 0x40, 0x8, 0x10000, 0x5, 0x3, 0xeaa1, 0x3c5d5f8e, 0x8, 0x10001, 0x8, 0x4, 0xc, 0x3, 0x4, 0xb, 0x3, 0x9, 0x2, 0x3000, 0x4, 0x1, 0x4, 0xb, 0x1f7dcaa5, 0x5, 0x10001, 0x3, 0x9, 0xfffffff8, 0x10001, 0x7, 0x0, 0x9, 0x4, 0x240000, 0x8, 0x7ff, 0x2, 0xe1, 0x0, 0x1000, 0x1, 0xffffffff, 0x59, 0x3, 0x9, 0x6, 0x3, 0x7, 0x8, 0x7, 0xfffffff9, 0x800, 0x3, 0x3, 0x7, 0xa638, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x8, 0xf819, 0x0, 0xc, 0x4, 0x54, 0x6, 0x3, 0x0, 0x8, 0x0, 0x1, 0x6, 0x9, 0x80000001, 0x3, 0x8, 0x7fff, 0x2, 0x0, 0xc5a0, 0x5, 0x8, 0xfffffffe, 0x7ff, 0xfffffffa, 0xf, 0x12000000, 0x1, 0x6, 0x7847, 0xf, 0x7fffffff, 0x3, 0x0, 0x2, 0x4, 0x1, 0x101, 0x800, 0x8, 0xff, 0x7, 0x2, 0x7, 0xffffcc9c, 0x0, 0x6, 0x8, 0xf4, 0x8, 0x1ff, 0x5, 0xa, 0x1, 0x4, 0x2, 0x0, 0x7fff, 0x0, 0x55, 0x0, 0x2, 0x5, 0x0, 0x7f, 0x10, 0x6, 0xb6f8, 0x3, 0x9, 0x8, 0xffffffff, 0x5, 0x6, 0x9, 0x6, 0xbce, 0x8, 0xffffffff, 0x9, 0x9, 0x1, 0xffff, 0x9, 0x0, 0x4, 0x5, 0x4, 0x7ff, 0x2, 0x7, 0x337, 0xfffffffc, 0x80, 0x2, 0x5, 0xc, 0x3, 0x1, 0xa, 0x1, 0x7, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x6, 0x3, 0x2, 0x400, 0xc52, 0xfffffc01, 0x7, 0x6, 0xf6a, 0x8, 0x8, 0x4b45, 0x2, 0x5, 0xfa800000, 0x8, 0x50cc, 0x1, 0x7, 0xe, 0x4, 0x835, 0x3ff, 0x8000, 0xc5aa, 0x5, 0x1ff, 0x2, 0x7, 0x0, 0xe, 0x3ff, 0x9, 0x1, 0x4, 0x6, 0x1, 0x80000000, 0x1, 0x1, 0xfffffffa, 0x53, 0x8e1c, 0x4, 0x6, 0x8f3, 0x6, 0x1ff, 0x200, 0x3, 0xff, 0x1, 0xfffffffa, 0x3, 0x7, 0x10001, 0x18, 0x4, 0x2, 0x4, 0x7fff, 0x5e3, 0x8, 0x0, 0x7, 0x5, 0x5, 0x80, 0x9c, 0x9, 0x7, 0x3ff, 0x31, 0x2, 0x3, 0x3ff, 0x1, 0x2, 0x175, 0x9, 0x30c, 0x2, 0x3, 0x7, 0xfa, 0xfffffffc, 0x80, 0x1, 0x200, 0xd, 0x80000000, 0x1ff, 0x60000000, 0x6, 0x1, 0x0, 0xfffffffd, 0x7ca90c3e, 0x100, 0x5ab, 0xff, 0x1, 0x0, 0x7, 0x7f, 0x3, 0x1ff, 0x9, 0x1000, 0x400, 0x8, 0x4, 0xfffff87a, 0x8e71, 0x579, 0x3fe0000, 0xba, 0xffff, 0x400, 0x8, 0xad, 0x3, 0x8, 0xfffffffd, 0x3, 0x2, 0x7, 0x4, 0x10, 0xfffffffe, 0x1a57, 0xad2, 0x1, 0x54, 0x800, 0x0, 0x6, 0x7, 0x9, 0x5, 0x5, 0x7fffffff, 0x401, 0x6, 0xfffffffd, 0x6f90]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x7fff, 0x8, 0x5, 0x2, 0x4, 0x100, 0x10000, 0x95aa, 0x0, 0xc6d, 0xffffffff, 0x1000, 0xfffffffe, 0x200, 0x7, 0xb, 0x4, 0x4, 0x6d9e, 0x1, 0x8, 0xd, 0x1, 0x9, 0x3, 0x4, 0x2, 0x9, 0x10, 0x80, 0x74, 0xf8, 0x9, 0x40, 0x3, 0x8, 0x9, 0x5, 0x2, 0x8, 0x7, 0x1, 0xff, 0x7ff, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x6, 0x5, 0x7, 0x4, 0x4, 0x10, 0x10001, 0x8, 0x5, 0x2, 0x1, 0x6, 0x8, 0x7fff, 0x2, 0x14000, 0x2, 0x81, 0x4, 0xeec4, 0x7, 0xef, 0x7ff, 0x7, 0x80000000, 0xd916, 0xffffffff, 0x8, 0x8000, 0xf, 0x38000000, 0x3, 0x401, 0x6cd3fc80, 0x4, 0x7, 0x1, 0x880, 0x5, 0x9, 0x1, 0x7fffffff, 0x1, 0x1, 0x401, 0x6ce5, 0x3f800000, 0x7, 0x1000, 0x4, 0x0, 0x4, 0xce, 0x7, 0x167, 0x0, 0x3, 0x0, 0x3, 0xbc09, 0x80, 0x400, 0x3, 0x4, 0xfa6c, 0x8000, 0x7ff, 0x5, 0x34e, 0x284, 0x1, 0xfffffffe, 0x9, 0x6, 0x314, 0x1, 0x800, 0xb4000000, 0x9, 0x736, 0x80000001, 0x2ee, 0x9, 0x9409, 0x1, 0x264e, 0x2, 0x0, 0x0, 0x8, 0x4, 0x5, 0x8, 0x7, 0x5, 0x4, 0x3, 0x10714337, 0x200, 0x80000001, 0x9, 0xb, 0x2, 0x1, 0x5, 0x80000001, 0xf18, 0x0, 0x3, 0x5, 0x1, 0x7, 0xc, 0x2, 0x100, 0x5, 0x3, 0x2, 0x3ff, 0xfffffffe, 0x0, 0x6, 0x80, 0x0, 0x7, 0x81, 0x101, 0x0, 0xa, 0x4, 0x6, 0x27, 0x7, 0x0, 0x0, 0xd, 0x4, 0x8, 0x401, 0x2, 0x5, 0x3, 0x79c8, 0xa64, 0x0, 0x5, 0x7, 0x9712, 0x1, 0x0, 0x8001, 0x7, 0xc, 0x101, 0x5, 0x5, 0x3, 0x1, 0x2, 0x7ff, 0x7fc, 0x4, 0x6, 0x1, 0xc1, 0x400, 0x75, 0x9, 0x100, 0xf, 0x0, 0x20000008, 0x80, 0x0, 0x7fe0000, 0x6, 0x3ff, 0x87, 0x101, 0x5b, 0x7, 0x1000, 0x8, 0x8, 0x3, 0xf, 0x7fffffff, 0x8001, 0x80000, 0x80b4, 0x2, 0xba, 0x6, 0xffff, 0x6, 0xc116, 0x1, 0x1ff, 0x3, 0x3, 0xa695, 0x3, 0x1, 0x4, 0x8000, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}]}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xd10, 0x80000001, 0x3}, {0xd, 0x454, 0x9}, 0x2f, 0x2, 0x4}}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xe31d}]}}]}, 0x2000}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="ecc31b33e3db531e4b5ea24c56aa8ad6ec918d5b75014e963046a7bd5a79302feb999ebf329fdb876d0c8e5c19b56438a78654894eb83de9385501dbf75567a9e8dfd0be584fcbb0c3bd9d", 0x4b) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.638468965s ago: executing program 8 (id=4059): r0 = socket(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(0x0, 0x48141, 0x0) fcntl$getflags(r5, 0x401) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, 0x0, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xe38d7cb34f855d36}, 0xbeee7b6c4f05b496) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000600)=r1}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x9f}, @cb_func={0x18, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xa8}, @generic={0x4e, 0x5, 0x3, 0x4, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0xa1100000, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @xdp=0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x1, 0x9}, 0x10, r8, r1, 0x9, &(0x7f0000000680)=[r5, r9, r11, r1, r1, r0, r1, r1, r5], &(0x7f00000006c0)=[{0x0, 0x4, 0xa, 0xb}, {0x0, 0x2, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x4}, {0x1, 0x5, 0xc, 0x3}, {0x3, 0x4, 0xd, 0x8}, {0x2, 0x2, 0xf, 0x9}, {0x3, 0x5, 0xc, 0x8}, {0x2, 0x1, 0x2, 0xb}, {0x4, 0x2, 0xc, 0x1}], 0x10, 0x8, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000780)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20b80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r12, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x121}}, './file1\x00'}) 1.243497926s ago: executing program 7 (id=4060): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'mXe\xd6'}, {0x20, '-lBR'}]}, 0x15) capget(&(0x7f0000000380)={0x20071026}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000012980)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.226925731s ago: executing program 8 (id=4061): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdir(0x0, 0x4f) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00') sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c00010000000000000000000400008014"], 0x28}], 0x1}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fallocate(r8, 0x0, 0x68d0, 0x1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x24001080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.000591131s ago: executing program 4 (id=4062): io_setup(0xeb0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xda, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x23, 0x805, 0x0) write$cgroup_pid(r4, 0x0, 0x4000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000002fe316b07d2985d1d84ddb5aa6e7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r12, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) poll(&(0x7f00000001c0)=[{r12}, {r10}, {r11, 0x28}, {r5, 0x8}, {r8, 0x401}, {r5, 0x301}, {r10, 0x20}], 0x7, 0x2) 0s ago: executing program 7 (id=4063): keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000240)=0x9, 0x4) kernel console output (not intermixed with test programs): 233][ T8321] bridge_slave_1: left allmulticast mode [ 1293.840986][ T8321] bridge_slave_1: left promiscuous mode [ 1293.849040][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.932824][ T8321] bridge_slave_0: left allmulticast mode [ 1293.964163][ T8321] bridge_slave_0: left promiscuous mode [ 1293.976830][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.224029][T17744] Bluetooth: hci1: command tx timeout [ 1297.303350][T17744] Bluetooth: hci1: command tx timeout [ 1297.643318][T17154] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1297.733770][T19204] tmpfs: Bad value for 'mpol' [ 1298.333491][T17154] usb 1-1: Using ep0 maxpacket: 8 [ 1298.339037][ T8321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.381907][ T8321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.409876][ T8321] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1298.435954][ T8321] bond0 (unregistering): Released all slaves [ 1298.505270][T17154] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1298.514389][T17154] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1298.538485][T17154] usb 1-1: can't read configurations, error -71 [ 1298.615862][T17155] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1298.706965][T19135] chnl_net:caif_netlink_parms(): no params data found [ 1298.815206][T17155] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1298.835357][T17155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.927220][T19217] netlink: 'syz.7.3673': attribute type 11 has an invalid length. [ 1298.934120][T17155] usb 5-1: config 0 descriptor?? [ 1299.614173][T19219] netlink: 'syz.2.3674': attribute type 11 has an invalid length. [ 1299.663282][T17744] Bluetooth: hci1: command tx timeout [ 1299.882030][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1299.882048][ T29] audit: type=1326 audit(1734382183.076:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1299.937832][ T29] audit: type=1326 audit(1734382183.116:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1299.959822][ T29] audit: type=1326 audit(1734382183.126:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1299.985395][ T29] audit: type=1326 audit(1734382183.126:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.007813][ T29] audit: type=1326 audit(1734382183.126:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.345907][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.569606][ T29] audit: type=1326 audit(1734382183.126:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.597383][T19135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.608485][T19135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.616682][ T29] audit: type=1326 audit(1734382183.126:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.641684][T19135] bridge_slave_0: entered allmulticast mode [ 1300.653048][T19135] bridge_slave_0: entered promiscuous mode [ 1300.688902][ T29] audit: type=1326 audit(1734382183.136:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.723455][T19135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.742741][T17154] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1300.743486][T19135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.774237][T19135] bridge_slave_1: entered allmulticast mode [ 1300.776957][ T29] audit: type=1326 audit(1734382183.136:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.811842][ T29] audit: type=1326 audit(1734382183.156:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19221 comm="syz.7.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1300.919632][T19135] bridge_slave_1: entered promiscuous mode [ 1300.949528][T17154] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1301.433253][T17154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.142848][T17155] usb 5-1: can't set first interface for hiFace device. [ 1302.149895][T17155] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1302.170468][T17155] usb 5-1: USB disconnect, device number 80 [ 1302.211300][T17154] usb 3-1: config 0 descriptor?? [ 1303.608825][ T8321] hsr_slave_0: left promiscuous mode [ 1304.319449][ T8321] hsr_slave_1: left promiscuous mode [ 1304.334689][ T8321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.569276][ T8321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.868485][ T8321] veth1_macvtap: left promiscuous mode [ 1304.874442][ T8321] veth0_macvtap: left promiscuous mode [ 1304.880257][ T8321] veth1_vlan: left promiscuous mode [ 1304.885774][ T8321] veth0_vlan: left promiscuous mode [ 1306.253561][T17154] usb 3-1: can't set first interface for hiFace device. [ 1306.260845][T17154] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1306.308117][T17154] usb 3-1: USB disconnect, device number 82 [ 1307.452216][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1307.452235][ T29] audit: type=1800 audit(1734382190.616:3947): pid=19280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3688" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1307.570859][T19286] netlink: 'syz.0.3686': attribute type 11 has an invalid length. [ 1309.023682][T16584] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1309.202306][T16584] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1309.258875][T16584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.298419][T16584] usb 1-1: config 0 descriptor?? [ 1309.338046][T16584] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1309.716255][ T8321] team0 (unregistering): Port device team_slave_1 removed [ 1309.846459][ T8321] team0 (unregistering): Port device team_slave_0 removed [ 1310.568576][T19293] wireguard1: entered promiscuous mode [ 1310.574427][T19293] wireguard1: entered allmulticast mode [ 1310.588753][T19135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.638137][T19135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.856233][T19135] team0: Port device team_slave_0 added [ 1310.897353][T19135] team0: Port device team_slave_1 added [ 1311.712803][T16584] gp8psk: usb in 137 operation failed. [ 1311.730024][T16584] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1311.793327][T16584] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1311.896960][T16584] usb 1-1: USB disconnect, device number 81 [ 1313.913085][T19135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.920740][T19135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.946632][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.953432][T19135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.965642][T19135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.972634][T19135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.998705][T19135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.655296][T19135] hsr_slave_0: entered promiscuous mode [ 1314.684547][T19135] hsr_slave_1: entered promiscuous mode [ 1314.705177][T19135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.712953][T19135] Cannot create hsr debugfs directory [ 1316.004712][T19339] netlink: 'syz.2.3699': attribute type 11 has an invalid length. [ 1316.671675][T19348] (syz.2.3702,19348,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1316.681588][T19348] (syz.2.3702,19348,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1318.400692][T19359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1318.603321][T16584] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1318.880410][T16584] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1318.889855][T16584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.925128][T16584] usb 5-1: config 0 descriptor?? [ 1319.205219][T19135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1319.283722][T19135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.308963][T19135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.349580][T19135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1320.559499][T19135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.607782][T19135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.722324][T19135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1320.732873][T19135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1320.778431][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.785611][ T8306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.794404][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.801540][ T8306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.089835][T19135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.653019][T16584] usb 5-1: can't set first interface for hiFace device. [ 1322.660119][T16584] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1322.687213][T16584] usb 5-1: USB disconnect, device number 81 [ 1323.275396][T19391] netlink: 'syz.4.3713': attribute type 11 has an invalid length. [ 1323.958254][T19135] veth0_vlan: entered promiscuous mode [ 1324.017766][T19135] veth1_vlan: entered promiscuous mode [ 1324.040391][T19135] veth0_macvtap: entered promiscuous mode [ 1324.049799][T19135] veth1_macvtap: entered promiscuous mode [ 1324.102830][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.113596][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.123524][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.134035][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.144023][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.154876][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.164828][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.175745][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.186809][T19135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.197691][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.208218][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.218114][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.228642][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.238573][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.249046][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.259006][T19135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.457688][T19135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.476501][T19135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.285319][T19135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.303248][T19135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.594050][T19406] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3716'. [ 1326.045999][T19135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.063265][T19135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.302688][ T8321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.344298][ T8321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.182960][ T8310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.197266][ T8310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.583635][T19416] netlink: 'syz.7.3720': attribute type 11 has an invalid length. [ 1329.942858][T19439] proc: Bad value for 'gid' [ 1330.013568][ T1203] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1330.021875][ T1203] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1330.047324][ T1203] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.09 Device [syz0] on syz1 [ 1330.167660][T19443] netlink: 'syz.7.3726': attribute type 11 has an invalid length. [ 1330.344206][ T1203] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1330.839395][T19448] Bluetooth: hci1: Frame reassembly failed (-84) [ 1330.854963][T19448] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3727'. [ 1331.449019][ T1203] usb 5-1: device descriptor read/64, error -71 [ 1331.729184][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1331.736463][ T1203] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1331.758462][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1331.767961][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1331.776355][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1331.787987][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1331.804777][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1332.015556][ T1203] usb 5-1: device descriptor read/64, error -71 [ 1332.105557][T19453] chnl_net:caif_netlink_parms(): no params data found [ 1332.125032][ T1203] usb usb5-port1: attempt power cycle [ 1333.023433][ T1203] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1333.254300][T19453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.255443][ T1203] usb 5-1: device descriptor read/8, error -71 [ 1333.271998][T19453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.279839][T19453] bridge_slave_0: entered allmulticast mode [ 1333.287344][T19453] bridge_slave_0: entered promiscuous mode [ 1333.296126][T19453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.303315][T19453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.311076][T19453] bridge_slave_1: entered allmulticast mode [ 1333.463438][T17744] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1333.610071][T19453] bridge_slave_1: entered promiscuous mode [ 1333.871650][T17744] Bluetooth: hci2: command tx timeout [ 1334.736996][T19453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.922889][T19453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.233004][T19453] team0: Port device team_slave_0 added [ 1335.252763][T19453] team0: Port device team_slave_1 added [ 1335.713438][ T1203] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1335.943447][T17744] Bluetooth: hci2: command tx timeout [ 1336.003562][T19486] wireguard3: entered promiscuous mode [ 1336.009096][T19486] wireguard3: entered allmulticast mode [ 1336.052451][T19453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.059852][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.086079][T19453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.098788][T19453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.106472][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.125207][ T1203] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1336.132742][T19453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.185183][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.334627][ T1203] usb 5-1: config 0 descriptor?? [ 1336.409469][ T1203] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1336.415912][ T8312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.908323][ T8312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.960286][T19453] hsr_slave_0: entered promiscuous mode [ 1336.977165][T16056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1336.993971][T19453] hsr_slave_1: entered promiscuous mode [ 1337.010710][T19453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1337.018530][T19453] Cannot create hsr debugfs directory [ 1337.028191][T16056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1337.050729][T16056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1337.069960][T16056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1337.079820][T16056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1337.090900][T16056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1337.113702][ T8312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.227267][ T8312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.797180][T19504] netlink: 'syz.2.3738': attribute type 11 has an invalid length. [ 1338.037427][ T1203] gp8psk: usb in 137 operation failed. [ 1338.045550][T16056] Bluetooth: hci2: command tx timeout [ 1338.047203][ T1203] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1338.082073][ T1203] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1338.173900][ T1203] usb 5-1: USB disconnect, device number 86 [ 1338.385829][ T8312] bridge_slave_1: left allmulticast mode [ 1338.391703][ T8312] bridge_slave_1: left promiscuous mode [ 1338.405009][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.544096][ T29] audit: type=1326 audit(1734382221.746:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1338.568330][ T8312] bridge_slave_0: left allmulticast mode [ 1338.574100][ T8312] bridge_slave_0: left promiscuous mode [ 1338.605015][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.323635][T19519] (syz.4.3739,19519,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1339.334247][T19519] (syz.4.3739,19519,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1339.347280][T16056] Bluetooth: hci1: command tx timeout [ 1339.543016][ T29] audit: type=1326 audit(1734382221.746:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1339.567740][ T29] audit: type=1326 audit(1734382222.736:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.221977][T16056] Bluetooth: hci2: command tx timeout [ 1340.252907][ T29] audit: type=1326 audit(1734382222.736:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.293374][ T29] audit: type=1326 audit(1734382222.736:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.315028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.341761][ T29] audit: type=1326 audit(1734382223.406:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.413261][ T29] audit: type=1326 audit(1734382223.406:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.434922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.469642][ T29] audit: type=1326 audit(1734382223.406:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.492048][ T29] audit: type=1326 audit(1734382223.456:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1340.514301][ T29] audit: type=1326 audit(1734382223.456:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19513 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1341.389561][T16056] Bluetooth: hci1: command tx timeout [ 1341.784424][T19530] random: crng reseeded on system resumption [ 1342.577007][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3747'. [ 1342.968621][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.989851][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.008180][T19547] Process accounting resumed [ 1343.155845][ T8312] bond0 (unregistering): Released all slaves [ 1343.187751][T19544] netlink: 'syz.2.3748': attribute type 2 has an invalid length. [ 1343.466850][T16056] Bluetooth: hci1: command tx timeout [ 1344.307498][T19495] chnl_net:caif_netlink_parms(): no params data found [ 1344.346538][T19453] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1344.383848][T19453] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1344.426482][T19453] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1345.089158][T19453] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1345.157379][T19567] mmap: syz.4.3755 (19567): VmData 37580800 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 1345.272857][T19495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.293693][T19495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.351418][T19495] bridge_slave_0: entered allmulticast mode [ 1345.364298][T19495] bridge_slave_0: entered promiscuous mode [ 1345.372178][T19495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.420207][T19495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.501332][T19495] bridge_slave_1: entered allmulticast mode [ 1345.540733][T19495] bridge_slave_1: entered promiscuous mode [ 1345.546827][T16056] Bluetooth: hci1: command tx timeout [ 1345.661463][T19495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.046877][T19495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.519457][T19495] team0: Port device team_slave_0 added [ 1346.527782][T19495] team0: Port device team_slave_1 added [ 1346.682492][T19495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.693818][T19495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.719750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.779493][T19495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.570536][T19453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.611660][T19495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.623214][T19495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.649149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.964712][T19495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.279000][T19495] hsr_slave_0: entered promiscuous mode [ 1348.298727][T19495] hsr_slave_1: entered promiscuous mode [ 1348.453424][T19495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1348.461195][T19495] Cannot create hsr debugfs directory [ 1348.507032][T19453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.604986][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.612108][ T8319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.623586][T16519] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1349.621829][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.629038][ T8319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.693250][T16519] usb 3-1: Using ep0 maxpacket: 16 [ 1349.773501][T16519] usb 3-1: device descriptor read/all, error -71 [ 1349.834674][T19453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1349.856439][T19453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.158590][T19615] wireguard4: entered promiscuous mode [ 1353.164174][T19615] wireguard4: entered allmulticast mode [ 1353.200219][T19618] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1353.547493][T19453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.707249][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1355.707290][ T29] audit: type=1326 audit(1734382238.876:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1356.326246][ T29] audit: type=1326 audit(1734382238.876:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1356.388335][T19453] veth0_vlan: entered promiscuous mode [ 1356.401892][T19453] veth1_vlan: entered promiscuous mode [ 1356.432629][T19453] veth0_macvtap: entered promiscuous mode [ 1356.442069][T19453] veth1_macvtap: entered promiscuous mode [ 1356.458128][ T29] audit: type=1326 audit(1734382238.886:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1356.490762][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.520132][ T29] audit: type=1326 audit(1734382238.886:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1356.533303][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.692641][ T29] audit: type=1326 audit(1734382238.886:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1356.693164][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.725517][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.735878][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.746568][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.756671][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.767455][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.783276][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.923663][ T29] audit: type=1326 audit(1734382238.886:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1356.958592][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.015622][ T29] audit: type=1326 audit(1734382238.886:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1357.037438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.129527][T19453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.194144][ T29] audit: type=1326 audit(1734382238.886:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1357.299926][ T29] audit: type=1326 audit(1734382238.886:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1357.433472][ T29] audit: type=1326 audit(1734382238.886:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19658 comm="syz.2.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1357.554359][T19675] wireguard5: entered promiscuous mode [ 1357.560128][T19675] wireguard5: entered allmulticast mode [ 1357.579091][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.594950][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.607302][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.643521][T16519] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1357.678484][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.734397][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.757003][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.768256][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.793042][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.803049][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.813633][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.824765][T19453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.831933][T16519] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1357.834930][T19453] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.849913][T19453] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.853283][T16519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.873356][T19453] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.882394][T19453] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.889756][T16519] usb 5-1: config 0 descriptor?? [ 1357.915160][T16519] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1358.004194][T19495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1358.026622][T19495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1358.071820][T19495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1358.098845][T19495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1358.649208][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.662965][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.741925][T19495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.768384][ T8315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.788208][ T8315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.810526][T19495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.884922][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.892143][ T8306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.911382][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.918632][ T8306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.336067][T19495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.400988][T19495] veth0_vlan: entered promiscuous mode [ 1359.417335][T19495] veth1_vlan: entered promiscuous mode [ 1359.485758][T19495] veth0_macvtap: entered promiscuous mode [ 1359.514120][T19495] veth1_macvtap: entered promiscuous mode [ 1359.563038][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.591319][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.607452][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.620497][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.648518][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.659298][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.669483][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.680573][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.777934][T16519] gp8psk: usb in 137 operation failed. [ 1359.805421][T16519] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1359.954847][T16519] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1360.052382][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.124443][T16519] usb 5-1: USB disconnect, device number 88 [ 1360.386102][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.415481][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.455197][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.508902][T19495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.575824][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.590331][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.600654][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.611262][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.621576][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.648658][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1360.719250][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1361.169973][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.190415][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.212192][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.663925][T19708] virtio-fs: tag <(null)> not found [ 1361.823404][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.203351][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.213884][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.223114][T19495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.235657][T19495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.246948][T19495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.256883][T19495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.265727][T19495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.274932][T19495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.283909][T19495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.436181][T19713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1363.274061][T19718] FAULT_INJECTION: forcing a failure. [ 1363.274061][T19718] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.295911][T19718] CPU: 0 UID: 0 PID: 19718 Comm: syz.2.3786 Not tainted 6.13.0-rc3-syzkaller #0 [ 1363.304994][T19718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1363.315069][T19718] Call Trace: [ 1363.318359][T19718] [ 1363.321299][T19718] dump_stack_lvl+0x241/0x360 [ 1363.326004][T19718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1363.331222][T19718] ? __pfx__printk+0x10/0x10 [ 1363.335844][T19718] should_fail_ex+0x3b0/0x4e0 [ 1363.340541][T19718] should_failslab+0xac/0x100 [ 1363.345239][T19718] ? skb_clone+0x20c/0x390 [ 1363.349670][T19718] kmem_cache_alloc_noprof+0x70/0x380 [ 1363.355061][T19718] skb_clone+0x20c/0x390 [ 1363.359328][T19718] __netlink_deliver_tap+0x3cc/0x7f0 [ 1363.364640][T19718] ? netlink_deliver_tap+0x2e/0x1b0 [ 1363.369849][T19718] netlink_deliver_tap+0x19d/0x1b0 [ 1363.374973][T19718] netlink_unicast+0x7c4/0x990 [ 1363.379765][T19718] ? __pfx_netlink_unicast+0x10/0x10 [ 1363.385067][T19718] ? __virt_addr_valid+0x45f/0x530 [ 1363.390190][T19718] ? __phys_addr_symbol+0x2f/0x70 [ 1363.395228][T19718] ? __check_object_size+0x47a/0x730 [ 1363.400539][T19718] netlink_sendmsg+0x8e4/0xcb0 [ 1363.405329][T19718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.410637][T19718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.415929][T19718] __sock_sendmsg+0x221/0x270 [ 1363.420626][T19718] ____sys_sendmsg+0x52a/0x7e0 [ 1363.425412][T19718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1363.430708][T19718] ? __fget_files+0x2a/0x410 [ 1363.435318][T19718] ? __fget_files+0x2a/0x410 [ 1363.439926][T19718] __sys_sendmsg+0x269/0x350 [ 1363.444533][T19718] ? __pfx_lock_release+0x10/0x10 [ 1363.449576][T19718] ? __pfx___sys_sendmsg+0x10/0x10 [ 1363.454713][T19718] ? __pfx_vfs_write+0x10/0x10 [ 1363.459525][T19718] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1363.465868][T19718] ? do_syscall_64+0x100/0x230 [ 1363.470653][T19718] ? do_syscall_64+0xb6/0x230 [ 1363.475354][T19718] do_syscall_64+0xf3/0x230 [ 1363.479872][T19718] ? clear_bhb_loop+0x35/0x90 [ 1363.484561][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.490477][T19718] RIP: 0033:0x7ff2bad85d19 [ 1363.494913][T19718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.514542][T19718] RSP: 002b:00007ff2bbc63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.522977][T19718] RAX: ffffffffffffffda RBX: 00007ff2baf75fa0 RCX: 00007ff2bad85d19 [ 1363.530971][T19718] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1363.538959][T19718] RBP: 00007ff2bbc63090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.546950][T19718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.554939][T19718] R13: 0000000000000000 R14: 00007ff2baf75fa0 R15: 00007ffd8fa93a48 [ 1363.562941][T19718] [ 1363.876329][T19715] wireguard6: entered promiscuous mode [ 1363.882990][T19715] wireguard6: entered allmulticast mode [ 1363.963340][ T1203] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1364.087450][ T8306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.133960][ T8306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.156446][ T8306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.168498][ T8306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.639792][T19728] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 1365.547959][T19727] (syz.7.3787,19727,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1365.557784][T19727] (syz.7.3787,19727,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1365.893887][ T1203] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1365.901686][ T1203] usb 5-1: can't read configurations, error -71 [ 1367.510497][T19745] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1368.069377][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3796'. [ 1368.935068][T19763] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3798'. [ 1369.817230][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 1369.933566][ T5877] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1370.096970][ T5877] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1370.123293][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.156622][ T5877] usb 5-1: config 0 descriptor?? [ 1371.636883][T19780] (syz.8.3802,19780,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1371.646724][T19780] (syz.8.3802,19780,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1372.802556][ T5877] usb 5-1: can't set first interface for hiFace device. [ 1372.809765][ T5877] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1372.833963][ T5877] usb 5-1: USB disconnect, device number 91 [ 1373.692548][T19807] (syz.2.3807,19807,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1373.702381][T19807] (syz.2.3807,19807,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1375.039120][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1375.190311][T17744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1375.202795][T17744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1375.212590][T17744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1375.227094][T17744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1375.244784][T17744] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1375.253220][T17744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1376.029645][T19817] chnl_net:caif_netlink_parms(): no params data found [ 1376.941446][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1376.941465][ T29] audit: type=1326 audit(1734382260.096:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1376.969859][ T29] audit: type=1326 audit(1734382260.096:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1376.992919][ T29] audit: type=1326 audit(1734382260.106:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.393343][T17744] Bluetooth: hci1: command tx timeout [ 1377.413306][ T29] audit: type=1326 audit(1734382260.106:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.453479][ T29] audit: type=1326 audit(1734382260.106:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.502513][ T29] audit: type=1326 audit(1734382260.116:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.524826][ T29] audit: type=1326 audit(1734382260.116:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.546853][ T29] audit: type=1326 audit(1734382260.116:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.568740][ T29] audit: type=1326 audit(1734382260.116:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1377.590375][ T29] audit: type=1326 audit(1734382260.116:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19835 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1378.199383][T19817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.356838][T19853] Bluetooth: hci6: Frame reassembly failed (-84) [ 1378.371896][T19853] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3816'. [ 1378.963415][T19817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.970673][T19817] bridge_slave_0: entered allmulticast mode [ 1379.450657][T19817] bridge_slave_0: entered promiscuous mode [ 1379.463345][T16056] Bluetooth: hci1: command tx timeout [ 1379.484084][T19817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.491240][T19817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.551055][T19817] bridge_slave_1: entered allmulticast mode [ 1379.577013][T19817] bridge_slave_1: entered promiscuous mode [ 1379.726114][T19817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.775388][T19817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.907203][T19861] FAULT_INJECTION: forcing a failure. [ 1379.907203][T19861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.926677][T19817] team0: Port device team_slave_0 added [ 1379.935405][T19817] team0: Port device team_slave_1 added [ 1379.951717][T19861] CPU: 1 UID: 0 PID: 19861 Comm: syz.4.3819 Not tainted 6.13.0-rc3-syzkaller #0 [ 1379.960790][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1379.970856][T19861] Call Trace: [ 1379.974142][T19861] [ 1379.977101][T19861] dump_stack_lvl+0x241/0x360 [ 1379.981816][T19861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1379.987041][T19861] ? __pfx__printk+0x10/0x10 [ 1379.991660][T19861] ? __pfx_lock_release+0x10/0x10 [ 1379.996718][T19861] should_fail_ex+0x3b0/0x4e0 [ 1380.001407][T19861] _copy_from_iter+0x1e9/0x1c20 [ 1380.006265][T19861] ? __virt_addr_valid+0x183/0x530 [ 1380.011407][T19861] ? __alloc_skb+0x28f/0x440 [ 1380.016013][T19861] ? __pfx__copy_from_iter+0x10/0x10 [ 1380.021316][T19861] ? __virt_addr_valid+0x183/0x530 [ 1380.026438][T19861] ? __virt_addr_valid+0x183/0x530 [ 1380.031539][T19861] ? __virt_addr_valid+0x45f/0x530 [ 1380.036640][T19861] ? __phys_addr_symbol+0x2f/0x70 [ 1380.041659][T19861] ? __check_object_size+0x47a/0x730 [ 1380.046938][T19861] netlink_sendmsg+0x73d/0xcb0 [ 1380.051723][T19861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1380.057030][T19861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1380.062345][T19861] __sock_sendmsg+0x221/0x270 [ 1380.067035][T19861] ____sys_sendmsg+0x52a/0x7e0 [ 1380.071808][T19861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1380.077095][T19861] ? __fget_files+0x2a/0x410 [ 1380.081687][T19861] ? __fget_files+0x2a/0x410 [ 1380.086289][T19861] __sys_sendmsg+0x269/0x350 [ 1380.090891][T19861] ? __pfx_lock_release+0x10/0x10 [ 1380.095959][T19861] ? __pfx___sys_sendmsg+0x10/0x10 [ 1380.101079][T19861] ? __pfx_vfs_write+0x10/0x10 [ 1380.105861][T19861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1380.112185][T19861] ? do_syscall_64+0x100/0x230 [ 1380.116950][T19861] ? do_syscall_64+0xb6/0x230 [ 1380.121629][T19861] do_syscall_64+0xf3/0x230 [ 1380.126133][T19861] ? clear_bhb_loop+0x35/0x90 [ 1380.130806][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.136698][T19861] RIP: 0033:0x7feff6b85d19 [ 1380.141108][T19861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1380.160710][T19861] RSP: 002b:00007feff79a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1380.169123][T19861] RAX: ffffffffffffffda RBX: 00007feff6d75fa0 RCX: 00007feff6b85d19 [ 1380.177093][T19861] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1380.185058][T19861] RBP: 00007feff79a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.193027][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.200994][T19861] R13: 0000000000000000 R14: 00007feff6d75fa0 R15: 00007ffe94fc0168 [ 1380.208979][T19861] [ 1380.212012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.230166][T19863] ebt_limit: overflow, try lower: 0/0 [ 1380.263711][T19817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.273361][T19817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.303740][ T5828] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1380.318409][T19817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.355417][T19817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.362406][T19817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.368837][T19863] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1380.389263][T19817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.473304][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 1380.485270][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1380.504951][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1380.527619][T19817] hsr_slave_0: entered promiscuous mode [ 1380.546881][ T5828] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1380.556953][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.557326][T19817] hsr_slave_1: entered promiscuous mode [ 1380.565156][ T5828] usb 3-1: Product: syz [ 1380.565175][ T5828] usb 3-1: Manufacturer: syz [ 1380.565193][ T5828] usb 3-1: SerialNumber: syz [ 1380.729030][T19817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1380.729904][ T5828] usb 3-1: config 0 descriptor?? [ 1380.737004][T19817] Cannot create hsr debugfs directory [ 1381.044056][T17744] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1381.250383][ T5828] usb 3-1: USB disconnect, device number 85 [ 1381.308128][T19883] netlink: 'syz.7.3823': attribute type 11 has an invalid length. [ 1381.373026][T19885] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 1381.774132][T17744] Bluetooth: hci1: command tx timeout [ 1382.091647][T19893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1382.735383][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3827'. [ 1383.227397][T19817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.797022][T17744] Bluetooth: hci1: command tx timeout [ 1383.860644][T19817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.192295][T19817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.375781][T19817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.650572][T19817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1384.678513][T19817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1384.801071][T19817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1384.865785][T19817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.061892][T19817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.145865][T19817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.240586][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.247861][ T8310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.022922][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.030140][ T8306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.171911][T19817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1386.193275][T19817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1387.612199][T19936] netlink: 'syz.7.3838': attribute type 11 has an invalid length. [ 1388.617293][T19817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.646844][T19817] veth0_vlan: entered promiscuous mode [ 1388.657176][T19817] veth1_vlan: entered promiscuous mode [ 1388.681301][T19817] veth0_macvtap: entered promiscuous mode [ 1388.690377][T19817] veth1_macvtap: entered promiscuous mode [ 1388.704558][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.715167][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.856981][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.868739][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.878646][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.889123][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.899316][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.023968][T19953] Bluetooth: hci6: Frame reassembly failed (-84) [ 1389.038931][T19953] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3842'. [ 1389.538550][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.597507][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.629994][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.682303][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.712215][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.733345][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.763290][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.776324][T19817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.785930][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.796458][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.806375][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.817076][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.827160][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.837842][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.847737][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.858240][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.868466][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.879300][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.889502][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.900241][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.910732][T19817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.923606][T19817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.936909][T19817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.947344][T19817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.956205][T19817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.964992][T19817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.973766][T19817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.314284][T19958] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3844'. [ 1391.196980][ T8319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.213229][ T8319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.260472][ T8319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.308950][ T8319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.623556][T16056] Bluetooth: hci6: command 0xfc11 tx timeout [ 1391.631688][T17744] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1392.017069][T19977] netlink: 'syz.8.3850': attribute type 11 has an invalid length. [ 1393.217231][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3853'. [ 1393.396962][T19988] fuse: Bad value for 'fd' [ 1395.365310][T20008] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1395.382065][T20008] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1395.514559][ T79] IPVS: starting estimator thread 0... [ 1395.603592][T20012] IPVS: using max 22 ests per chain, 52800 per kthread [ 1397.516704][T20031] wireguard7: entered promiscuous mode [ 1397.522311][T20031] wireguard7: entered allmulticast mode [ 1397.713374][ T5905] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1397.866578][ T5905] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1397.888262][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.909313][T16056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1397.929286][T16056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1397.947675][T16056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1397.949077][ T5905] usb 5-1: config 0 descriptor?? [ 1397.982899][T16056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1398.003311][T16056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1398.015621][T16056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1398.065242][ T5905] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1398.832948][T20039] chnl_net:caif_netlink_parms(): no params data found [ 1398.954841][T20056] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3870'. [ 1399.723285][ T5905] gp8psk: usb in 137 operation failed. [ 1399.728863][ T5905] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1399.745390][ T5905] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1399.766135][ T5905] usb 5-1: USB disconnect, device number 92 [ 1400.006180][T20064] netlink: 'syz.4.3872': attribute type 11 has an invalid length. [ 1400.580653][T16056] Bluetooth: hci1: command tx timeout [ 1400.875703][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.882839][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.943783][T20039] bridge_slave_0: entered allmulticast mode [ 1400.950855][T20039] bridge_slave_0: entered promiscuous mode [ 1401.009528][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.300620][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.308785][T20039] bridge_slave_1: entered allmulticast mode [ 1401.318073][T20039] bridge_slave_1: entered promiscuous mode [ 1401.666161][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.724632][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.858542][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1401.898031][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1402.236724][T20039] team0: Port device team_slave_0 added [ 1402.366665][T20039] team0: Port device team_slave_1 added [ 1402.705734][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.712755][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.753677][T16056] Bluetooth: hci1: command tx timeout [ 1402.783285][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.923937][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.931367][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.957301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1402.981425][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.175824][T20105] No source specified [ 1403.193810][T20039] hsr_slave_0: entered promiscuous mode [ 1403.200498][T20039] hsr_slave_1: entered promiscuous mode [ 1403.240705][T20039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.263267][T20039] Cannot create hsr debugfs directory [ 1404.122029][T20039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.295162][T20039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.440713][T20039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.595277][T20039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.895442][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3891'. [ 1404.965507][T16056] Bluetooth: hci1: command tx timeout [ 1405.890577][T20039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1405.900412][T20141] FAULT_INJECTION: forcing a failure. [ 1405.900412][T20141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.086315][T20039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1406.096491][T20141] CPU: 0 UID: 0 PID: 20141 Comm: syz.4.3892 Not tainted 6.13.0-rc3-syzkaller #0 [ 1406.105561][T20141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1406.115634][T20141] Call Trace: [ 1406.118926][T20141] [ 1406.121878][T20141] dump_stack_lvl+0x241/0x360 [ 1406.126589][T20141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.131811][T20141] ? __pfx__printk+0x10/0x10 [ 1406.136428][T20141] ? snprintf+0xda/0x120 [ 1406.140696][T20141] should_fail_ex+0x3b0/0x4e0 [ 1406.145398][T20141] _copy_to_user+0x31/0xb0 [ 1406.149839][T20141] simple_read_from_buffer+0xca/0x150 [ 1406.155238][T20141] proc_fail_nth_read+0x1e9/0x250 [ 1406.160291][T20141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1406.165861][T20141] ? rw_verify_area+0x55e/0x6f0 [ 1406.170730][T20141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1406.176305][T20141] vfs_read+0x1fc/0xb70 [ 1406.180501][T20141] ? __pfx___mutex_lock+0x10/0x10 [ 1406.185553][T20141] ? __pfx_vfs_read+0x10/0x10 [ 1406.190254][T20141] ? __fget_files+0x2a/0x410 [ 1406.194867][T20141] ? __fget_files+0x395/0x410 [ 1406.199564][T20141] ? __fget_files+0x2a/0x410 [ 1406.204179][T20141] ksys_read+0x18f/0x2b0 [ 1406.208435][T20141] ? __pfx_ksys_read+0x10/0x10 [ 1406.213216][T20141] ? do_syscall_64+0x100/0x230 [ 1406.217998][T20141] ? do_syscall_64+0xb6/0x230 [ 1406.222683][T20141] do_syscall_64+0xf3/0x230 [ 1406.227202][T20141] ? clear_bhb_loop+0x35/0x90 [ 1406.231885][T20141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.237779][T20141] RIP: 0033:0x7feff6b8472c [ 1406.242192][T20141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1406.261798][T20141] RSP: 002b:00007feff7988030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1406.270213][T20141] RAX: ffffffffffffffda RBX: 00007feff6d76080 RCX: 00007feff6b8472c [ 1406.278184][T20141] RDX: 000000000000000f RSI: 00007feff79880a0 RDI: 0000000000000004 [ 1406.286156][T20141] RBP: 00007feff7988090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.294124][T20141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.302095][T20141] R13: 0000000000000001 R14: 00007feff6d76080 R15: 00007ffe94fc0168 [ 1406.310076][T20141] [ 1406.316262][T20039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1406.330827][T20039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1406.632459][T20147] wireguard5: entered promiscuous mode [ 1406.638199][T20147] wireguard5: entered allmulticast mode [ 1406.983683][T16056] Bluetooth: hci1: command tx timeout [ 1407.097809][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.144174][T20152] ax25_connect(): syz.2.3895 uses autobind, please contact jreuter@yaina.de [ 1407.165203][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.176691][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.183842][ T8325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.211785][T20155] binfmt_misc: register: failed to install interpreter file ./file0 [ 1407.227669][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.234858][ T8321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.255000][T20156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3895'. [ 1407.294032][T20152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3895'. [ 1408.628372][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.764876][T20039] veth0_vlan: entered promiscuous mode [ 1408.795118][T20039] veth1_vlan: entered promiscuous mode [ 1408.921951][T20039] veth0_macvtap: entered promiscuous mode [ 1409.101992][T20039] veth1_macvtap: entered promiscuous mode [ 1409.170776][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.224257][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.277205][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.327187][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.364527][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.441452][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.473493][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.543658][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.582410][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.628963][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.651010][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1409.651030][ T29] audit: type=1326 audit(1734382292.846:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.677302][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.678986][ T29] audit: type=1326 audit(1734382292.846:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.712494][ T29] audit: type=1326 audit(1734382292.906:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.723132][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.734299][ T29] audit: type=1326 audit(1734382292.906:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.734340][ T29] audit: type=1326 audit(1734382292.906:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.734373][ T29] audit: type=1326 audit(1734382292.906:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.734405][ T29] audit: type=1326 audit(1734382292.906:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.734439][ T29] audit: type=1326 audit(1734382292.906:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.734472][ T29] audit: type=1326 audit(1734382292.906:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20175 comm="syz.4.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1409.787775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.854219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.023768][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.035085][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.046495][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.057207][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.073141][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.100252][T20178] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3903'. [ 1410.134059][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.157742][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.179132][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.195996][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.206130][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.216964][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.233906][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.254763][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.276584][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.323382][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.343271][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.406508][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.592648][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.613379][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.673361][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.723382][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.904150][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.915220][T20039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.924063][T20039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.933097][T20039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.942307][T20039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.559300][ T8310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.583844][ T8310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.685296][ T8321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.708147][ T8321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.258249][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3915'. [ 1416.089078][T20248] Bluetooth: hci1: Frame reassembly failed (-84) [ 1416.117545][T13279] Bluetooth: hci1: Frame reassembly failed (-84) [ 1418.388562][T16056] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1418.396887][T17744] Bluetooth: hci1: command 0xfc11 tx timeout [ 1419.071149][T20273] netlink: 'syz.7.3926': attribute type 11 has an invalid length. [ 1419.136198][T17744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1419.148919][T17744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1419.159442][T17744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1419.172417][T17744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1419.183276][T17744] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1419.193130][T17744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1419.226544][T20276] smk_cipso_doi:693 remove rc = -2 [ 1419.232326][T20276] smk_cipso_doi:706 cipso add rc = -17 [ 1419.774625][T12765] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1420.173361][T12765] usb 3-1: Using ep0 maxpacket: 32 [ 1420.190204][T12765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.263277][T12765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.283319][T12765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1420.296466][T12765] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1420.305659][T12765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.317540][T12765] usb 3-1: config 0 descriptor?? [ 1420.802319][T20269] chnl_net:caif_netlink_parms(): no params data found [ 1421.137016][T20269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.157114][T20269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.203876][T20269] bridge_slave_0: entered allmulticast mode [ 1421.211328][T20269] bridge_slave_0: entered promiscuous mode [ 1421.415494][T17744] Bluetooth: hci1: command tx timeout [ 1421.506728][T20269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.934411][T12765] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001C/input/input35 [ 1421.949636][T20269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.964037][T20269] bridge_slave_1: entered allmulticast mode [ 1421.971941][T20269] bridge_slave_1: entered promiscuous mode [ 1422.076170][T12765] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001C/input/input36 [ 1422.126650][T12765] kye 0003:0458:5011.001C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1422.263963][T20307] fuse: Bad value for 'rootmode' [ 1422.840077][T12765] usb 3-1: USB disconnect, device number 86 [ 1422.874556][T20269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.936150][T20269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.226112][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.885478][T20315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1423.999627][T16056] Bluetooth: hci1: command tx timeout [ 1424.858636][T20269] team0: Port device team_slave_0 added [ 1424.907286][T20269] team0: Port device team_slave_1 added [ 1425.362425][T20269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.397293][T20269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.536010][T20269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.582109][T20269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.608516][T20269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.644988][ T29] audit: type=1326 audit(1734382308.836:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.667890][ T29] audit: type=1326 audit(1734382308.836:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.689738][ T29] audit: type=1326 audit(1734382308.836:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.722555][T20269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.791119][ T29] audit: type=1326 audit(1734382308.836:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.817871][ T29] audit: type=1326 audit(1734382308.836:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.847531][ T29] audit: type=1326 audit(1734382308.836:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.870312][ T29] audit: type=1326 audit(1734382308.846:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.893333][ T29] audit: type=1326 audit(1734382308.846:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.916023][ T29] audit: type=1326 audit(1734382308.846:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1425.938290][ T29] audit: type=1326 audit(1734382308.846:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20318 comm="syz.8.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601785d19 code=0x7ffc0000 [ 1426.024515][T16056] Bluetooth: hci1: command tx timeout [ 1426.107848][T20269] hsr_slave_0: entered promiscuous mode [ 1426.156835][T20269] hsr_slave_1: entered promiscuous mode [ 1426.173886][T20269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.185032][T20269] Cannot create hsr debugfs directory [ 1427.925615][T20269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.103685][T16056] Bluetooth: hci1: command tx timeout [ 1428.286488][T20269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.105317][T20269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.419329][T20269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.848769][T20375] netlink: 'syz.4.3950': attribute type 11 has an invalid length. [ 1430.728929][T20269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1431.580768][T20269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1431.876774][T20269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1431.920465][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1431.920485][ T29] audit: type=1326 audit(1734382315.116:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1431.970302][ T29] audit: type=1326 audit(1734382315.116:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1432.063472][ T29] audit: type=1326 audit(1734382315.116:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1432.109185][T20269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1432.152602][ T29] audit: type=1326 audit(1734382315.116:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1432.363108][ T29] audit: type=1326 audit(1734382315.116:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1432.863965][T16519] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1432.871661][T20394] wireguard8: entered promiscuous mode [ 1432.877252][T20394] wireguard8: entered allmulticast mode [ 1432.901944][ T29] audit: type=1326 audit(1734382315.116:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1432.987262][T20269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.994287][ T29] audit: type=1326 audit(1734382315.116:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1433.035344][T20269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.050597][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.057800][ T8325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.121896][ T29] audit: type=1326 audit(1734382315.116:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1433.143584][ C1] vkms_vblank_simulate: vblank timer overrun [ 1433.151847][T20269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1433.162327][ T29] audit: type=1326 audit(1734382315.116:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1433.162371][ T29] audit: type=1326 audit(1734382315.116:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20388 comm="syz.7.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1433.206253][T20269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1433.224345][T13915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.231558][T13915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.332365][T16519] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1433.346982][T16519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.372214][T16519] usb 5-1: config 0 descriptor?? [ 1433.417734][T16519] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1433.571746][T20269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.693423][T20269] veth0_vlan: entered promiscuous mode [ 1433.713959][T20269] veth1_vlan: entered promiscuous mode [ 1433.786908][T20269] veth0_macvtap: entered promiscuous mode [ 1433.810481][T20269] veth1_macvtap: entered promiscuous mode [ 1434.021913][T20413] netlink: 'syz.8.3959': attribute type 11 has an invalid length. [ 1434.360076][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.393333][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.413242][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.435515][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.457210][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.480961][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.533903][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.573281][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.614064][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.648243][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.671169][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.803661][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.816234][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.829028][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.898443][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.962579][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.385806][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.413270][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.516946][T20269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.567397][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.643660][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.678036][T20422] netlink: 'syz.8.3962': attribute type 11 has an invalid length. [ 1435.748682][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.836041][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.847561][T16519] gp8psk: usb in 137 operation failed. [ 1435.853357][T16519] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1435.863454][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.864161][T16519] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1436.004494][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.174925][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.218370][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.268235][T16519] usb 5-1: USB disconnect, device number 93 [ 1436.275118][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.286444][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.300036][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.311370][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.321271][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.331850][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.342448][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.747779][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.874044][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.912482][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.934839][T20269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.982518][T20269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.016494][T20269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.046784][T20269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.103346][T20269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.508177][ T8325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.555053][ T8325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.591033][ T8306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.603662][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1437.603681][ T29] audit: type=1326 audit(1734382320.806:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1437.633565][ T8306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.666849][ T29] audit: type=1326 audit(1734382320.806:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1437.743830][ T29] audit: type=1326 audit(1734382320.806:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1437.805373][ T29] audit: type=1326 audit(1734382320.806:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1437.856279][ T29] audit: type=1326 audit(1734382320.806:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1437.909144][ T29] audit: type=1326 audit(1734382320.806:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1437.979663][ T29] audit: type=1326 audit(1734382320.806:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1438.049893][ T29] audit: type=1326 audit(1734382320.806:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1438.129804][ T29] audit: type=1326 audit(1734382320.806:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1438.159877][ T29] audit: type=1326 audit(1734382320.806:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20438 comm="syz.2.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1438.321063][T20456] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3972'. [ 1438.701017][T20464] wireguard6: entered promiscuous mode [ 1438.714610][T20464] wireguard6: entered allmulticast mode [ 1440.244469][T20476] netlink: 'syz.4.3978': attribute type 11 has an invalid length. [ 1441.509102][T17744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1441.676690][T17744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1441.687549][T17744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1441.699893][T17744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1441.711020][T17744] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1441.723536][T17744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1442.184565][T20480] chnl_net:caif_netlink_parms(): no params data found [ 1442.430369][T20480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.463529][T20480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.483610][T20480] bridge_slave_0: entered allmulticast mode [ 1442.499228][T20480] bridge_slave_0: entered promiscuous mode [ 1442.507169][T20480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.514904][T20480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.523520][T20480] bridge_slave_1: entered allmulticast mode [ 1442.534446][T20480] bridge_slave_1: entered promiscuous mode [ 1442.587309][T20480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.607005][T20480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.674062][T20480] team0: Port device team_slave_0 added [ 1442.696117][T20480] team0: Port device team_slave_1 added [ 1442.754805][T20480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.779247][T20480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.816431][T20480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.834190][T20480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.841345][T20480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.869080][T20480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.945692][T20480] hsr_slave_0: entered promiscuous mode [ 1443.026022][T20480] hsr_slave_1: entered promiscuous mode [ 1443.032472][T20480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.044819][T20480] Cannot create hsr debugfs directory [ 1443.945295][T17744] Bluetooth: hci1: command tx timeout [ 1444.536046][T20480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.714950][T20480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.843898][T20527] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1444.962700][T20480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.040694][T20531] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1445.120262][T20480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.545399][T20536] wireguard9: entered promiscuous mode [ 1445.552312][T20536] wireguard9: entered allmulticast mode [ 1445.613320][ T79] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1445.793853][ T79] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1445.813118][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.830597][ T79] usb 5-1: config 0 descriptor?? [ 1445.855149][ T79] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1445.879043][T20480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1445.916019][T20480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1445.941526][T20480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1445.997268][T20480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1446.024780][T17744] Bluetooth: hci1: command tx timeout [ 1447.070300][T20480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.088642][T20480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.103130][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.110320][ T8306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.148125][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.155325][ T8306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.389430][T20480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1447.798413][T20480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1447.886917][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1447.886937][ T29] audit: type=1326 audit(1734382331.086:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1447.926639][T20480] veth0_vlan: entered promiscuous mode [ 1447.949716][T20480] veth1_vlan: entered promiscuous mode [ 1447.966557][ T29] audit: type=1326 audit(1734382331.086:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.015961][T20480] veth0_macvtap: entered promiscuous mode [ 1448.067611][ T29] audit: type=1326 audit(1734382331.086:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.104520][T17744] Bluetooth: hci1: command tx timeout [ 1448.215425][ T79] gp8psk: usb in 137 operation failed. [ 1448.221418][ T79] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1448.236430][ T79] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1448.281473][T20480] veth1_macvtap: entered promiscuous mode [ 1448.320638][ T29] audit: type=1326 audit(1734382331.086:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.331635][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.589017][ T29] audit: type=1326 audit(1734382331.086:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.611281][ T29] audit: type=1326 audit(1734382331.116:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.653734][ T29] audit: type=1326 audit(1734382331.116:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.693328][ T29] audit: type=1326 audit(1734382331.116:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.743295][ T29] audit: type=1326 audit(1734382331.116:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.783346][ T29] audit: type=1326 audit(1734382331.116:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20566 comm="syz.7.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a09585d19 code=0x7ffc0000 [ 1448.846616][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.856547][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.875714][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.889103][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.900024][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.910306][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.920803][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.930719][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.941211][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.951110][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.961635][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.971859][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.982488][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.992730][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.003639][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.014048][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.024586][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.034495][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.045121][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.057071][T20480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.260057][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.270774][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.280708][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.291190][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.301047][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.311925][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.322086][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.332552][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.342434][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.353125][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.362982][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.373583][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.383552][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.394187][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.404127][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.414934][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.425031][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.435526][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.445408][T20480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.455862][T20480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.468515][T20480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.477811][T20480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.486608][T20480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.495822][T20480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.504939][T20480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.664525][ T1203] usb 5-1: USB disconnect, device number 94 [ 1449.989118][ T8325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.015678][ T8325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.044598][T20592] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1450.110708][T13279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.145536][T13279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.259789][T17744] Bluetooth: hci1: command tx timeout [ 1453.095415][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1453.095433][ T29] audit: type=1326 audit(1734382336.296:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.155812][ T29] audit: type=1326 audit(1734382336.296:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.194538][ T29] audit: type=1326 audit(1734382336.296:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.216200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.292619][ T29] audit: type=1326 audit(1734382336.296:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.377505][ T29] audit: type=1326 audit(1734382336.296:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.399204][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.468217][ T29] audit: type=1326 audit(1734382336.296:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.490222][ T29] audit: type=1326 audit(1734382336.296:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.511875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.518800][ T29] audit: type=1326 audit(1734382336.296:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.540557][ T29] audit: type=1326 audit(1734382336.296:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1453.562218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.569626][ T29] audit: type=1326 audit(1734382336.296:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20616 comm="syz.4.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1454.058778][T20631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1454.868918][T20632] wireguard7: entered promiscuous mode [ 1454.895148][T20632] wireguard7: entered allmulticast mode [ 1456.353343][T17744] Bluetooth: hci2: command 0x0406 tx timeout [ 1457.183451][T12765] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1457.345561][T12765] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1457.363261][T12765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.383777][T12765] usb 3-1: config 0 descriptor?? [ 1458.804387][T20673] netlink: 'syz.4.4024': attribute type 11 has an invalid length. [ 1459.769946][T20678] FAULT_INJECTION: forcing a failure. [ 1459.769946][T20678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.067771][T16056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1460.073415][T20678] CPU: 0 UID: 0 PID: 20678 Comm: syz.8.4026 Not tainted 6.13.0-rc3-syzkaller #0 [ 1460.084013][T20678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1460.094071][T20678] Call Trace: [ 1460.097348][T20678] [ 1460.100279][T20678] dump_stack_lvl+0x241/0x360 [ 1460.104969][T20678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1460.110168][T20678] ? __pfx__printk+0x10/0x10 [ 1460.114759][T20678] ? __pfx_lock_release+0x10/0x10 [ 1460.119780][T20678] ? __lock_acquire+0x1397/0x2100 [ 1460.124805][T20678] should_fail_ex+0x3b0/0x4e0 [ 1460.129483][T20678] _copy_from_user+0x2f/0xc0 [ 1460.134079][T20678] kstrtouint_from_user+0xc6/0x190 [ 1460.139186][T20678] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1460.144906][T20678] ? __pfx_lock_acquire+0x10/0x10 [ 1460.149931][T20678] proc_fail_nth_write+0xaa/0x2d0 [ 1460.154957][T20678] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1460.160850][T20678] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1460.166490][T20678] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1460.172130][T20678] vfs_write+0x2a3/0xd30 [ 1460.176381][T20678] ? __pfx_vfs_write+0x10/0x10 [ 1460.181147][T20678] ? __fget_files+0x2a/0x410 [ 1460.185739][T20678] ? __fget_files+0x395/0x410 [ 1460.190410][T20678] ? __fget_files+0x2a/0x410 [ 1460.195045][T20678] ksys_write+0x18f/0x2b0 [ 1460.199378][T20678] ? __pfx_ksys_write+0x10/0x10 [ 1460.204227][T20678] ? do_syscall_64+0x100/0x230 [ 1460.208998][T20678] ? do_syscall_64+0xb6/0x230 [ 1460.213679][T20678] do_syscall_64+0xf3/0x230 [ 1460.218184][T20678] ? clear_bhb_loop+0x35/0x90 [ 1460.222856][T20678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.228751][T20678] RIP: 0033:0x7ff6017847cf [ 1460.233162][T20678] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1460.252768][T20678] RSP: 002b:00007ff602619030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1460.261181][T20678] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6017847cf [ 1460.269154][T20678] RDX: 0000000000000001 RSI: 00007ff6026190a0 RDI: 0000000000000005 [ 1460.277128][T20678] RBP: 00007ff602619090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.285098][T20678] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1460.293062][T20678] R13: 0000000000000000 R14: 00007ff601975fa0 R15: 00007ffc877db788 [ 1460.301044][T20678] [ 1460.536605][T16056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1460.553072][T16056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1460.569034][T16056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1461.080603][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4025'. [ 1461.222699][T12765] usb 3-1: can't set first interface for hiFace device. [ 1461.237466][T12765] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1461.254233][T12765] usb 3-1: USB disconnect, device number 87 [ 1461.281520][T16056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1461.343405][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1461.949179][T20696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4028'. [ 1462.480119][T20679] chnl_net:caif_netlink_parms(): no params data found [ 1463.224153][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1463.224171][ T29] audit: type=1326 audit(1734382346.426:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1463.254607][ T29] audit: type=1326 audit(1734382346.426:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1463.367882][ T29] audit: type=1326 audit(1734382346.426:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1463.558690][ T29] audit: type=1326 audit(1734382346.426:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1463.615254][T20679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.697280][T20679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.707798][ T5836] Bluetooth: hci1: command tx timeout [ 1463.803459][ T29] audit: type=1326 audit(1734382346.426:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1463.867441][T20679] bridge_slave_0: entered allmulticast mode [ 1464.002486][ T29] audit: type=1326 audit(1734382346.426:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1464.056532][T20679] bridge_slave_0: entered promiscuous mode [ 1464.112562][ T29] audit: type=1326 audit(1734382346.426:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1464.136716][T20679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.152299][T20679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.160590][ T29] audit: type=1326 audit(1734382346.426:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1464.216176][T20679] bridge_slave_1: entered allmulticast mode [ 1464.223419][T20679] bridge_slave_1: entered promiscuous mode [ 1464.262186][ T29] audit: type=1326 audit(1734382346.426:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1464.294363][ T29] audit: type=1326 audit(1734382346.426:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20711 comm="syz.2.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2bad85d19 code=0x7ffc0000 [ 1464.461385][T20730] wireguard0: entered promiscuous mode [ 1464.468549][T20730] wireguard0: entered allmulticast mode [ 1464.556305][T20679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.579260][T20679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.805224][T20679] team0: Port device team_slave_0 added [ 1464.824467][T20679] team0: Port device team_slave_1 added [ 1465.040580][T20679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1465.125096][T20736] netlink: 'syz.7.4038': attribute type 1 has an invalid length. [ 1465.694844][T20679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.721108][T20679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1465.734468][T20679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.741437][T20679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.767525][T20679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.815535][ T5836] Bluetooth: hci1: command tx timeout [ 1466.079170][T20743] FAULT_INJECTION: forcing a failure. [ 1466.079170][T20743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.529706][T20743] CPU: 0 UID: 0 PID: 20743 Comm: syz.8.4040 Not tainted 6.13.0-rc3-syzkaller #0 [ 1466.538793][T20743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1466.548865][T20743] Call Trace: [ 1466.552161][T20743] [ 1466.555104][T20743] dump_stack_lvl+0x241/0x360 [ 1466.559809][T20743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1466.565026][T20743] ? __pfx__printk+0x10/0x10 [ 1466.569641][T20743] ? btf_check_sec_info+0x379/0x4f0 [ 1466.574863][T20743] should_fail_ex+0x3b0/0x4e0 [ 1466.579566][T20743] _copy_to_user+0x31/0xb0 [ 1466.584006][T20743] btf_new_fd+0x515/0xd30 [ 1466.588360][T20743] ? __pfx_btf_new_fd+0x10/0x10 [ 1466.593229][T20743] ? bpf_btf_load+0xcf/0x1a0 [ 1466.597835][T20743] __sys_bpf+0x6ef/0x810 [ 1466.602098][T20743] ? __pfx___sys_bpf+0x10/0x10 [ 1466.606888][T20743] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1466.612890][T20743] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1466.619241][T20743] ? do_syscall_64+0x100/0x230 [ 1466.624035][T20743] __x64_sys_bpf+0x7c/0x90 [ 1466.628471][T20743] do_syscall_64+0xf3/0x230 [ 1466.632997][T20743] ? clear_bhb_loop+0x35/0x90 [ 1466.637692][T20743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.643604][T20743] RIP: 0033:0x7ff601785d19 [ 1466.648031][T20743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1466.667654][T20743] RSP: 002b:00007ff602619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1466.676092][T20743] RAX: ffffffffffffffda RBX: 00007ff601975fa0 RCX: 00007ff601785d19 [ 1466.684078][T20743] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 0000000000000012 [ 1466.692062][T20743] RBP: 00007ff602619090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.700047][T20743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.708030][T20743] R13: 0000000000000001 R14: 00007ff601975fa0 R15: 00007ffc877db788 [ 1466.716028][T20743] [ 1466.957578][T20745] : entered promiscuous mode [ 1467.285701][T20679] hsr_slave_0: entered promiscuous mode [ 1467.326729][T20679] hsr_slave_1: entered promiscuous mode [ 1467.432901][T20679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1467.509708][T20679] Cannot create hsr debugfs directory [ 1467.874075][ T5836] Bluetooth: hci1: command tx timeout [ 1468.177591][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1468.366976][T20768] netlink: 'syz.7.4046': attribute type 11 has an invalid length. [ 1468.844729][T20679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.426726][T20679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.996774][ T5836] Bluetooth: hci1: command tx timeout [ 1470.587553][T20782] Bluetooth: hci6: Frame reassembly failed (-84) [ 1470.595169][T20782] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4047'. [ 1470.658025][ T8306] Bluetooth: hci6: Frame reassembly failed (-84) [ 1470.963103][T20679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.206878][T20679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.664340][T20679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1471.800691][T20679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1471.947541][T20805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1471.975948][T20679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1472.815420][ T5836] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1472.902038][T20679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1473.030570][T20679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.275088][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1473.275133][ T29] audit: type=1326 audit(1734382356.426:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20808 comm="syz.4.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1473.357503][T20815] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1473.366894][T20815] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1474.073425][T16584] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1474.082301][ T29] audit: type=1326 audit(1734382356.426:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20808 comm="syz.4.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1474.311583][T20679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.350932][ T29] audit: type=1326 audit(1734382356.426:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20808 comm="syz.4.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7feff6b85d19 code=0x7ffc0000 [ 1474.500920][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.510071][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.569277][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.576458][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.665719][T16584] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 1474.680233][T16584] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1474.729592][T16584] usb 3-1: can't read configurations, error -22 [ 1475.334042][T16584] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1475.352044][T20679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1475.703557][ T30] INFO: task syz.0.3701:19352 blocked for more than 144 seconds. [ 1475.711589][ T30] Not tainted 6.13.0-rc3-syzkaller #0 [ 1475.780177][T20826] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1475.975025][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1475.983798][ T30] task:syz.0.3701 state:D stack:22768 pid:19352 tgid:19344 ppid:16994 flags:0x00004004 [ 1475.994069][ T30] Call Trace: [ 1475.997366][ T30] [ 1476.000311][ T30] __schedule+0x17fb/0x4be0 [ 1476.113912][ T30] ? __pfx___schedule+0x10/0x10 [ 1476.118933][ T30] ? __pfx_lock_release+0x10/0x10 [ 1476.126913][ T30] ? schedule+0x90/0x320 [ 1476.131216][ T30] schedule+0x14b/0x320 [ 1476.135680][ T30] schedule_timeout+0xb0/0x290 [ 1476.142452][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1476.148004][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1476.154330][ T30] ? wait_for_completion+0x2fe/0x620 [ 1476.159669][ T30] ? wait_for_completion+0x2fe/0x620 [ 1476.165137][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.170369][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1476.175650][ T30] ? wait_for_completion+0x2fe/0x620 [ 1476.180967][ T30] wait_for_completion+0x355/0x620 [ 1476.186265][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1476.191943][ T30] ? remove_client_context+0xc0/0x1e0 [ 1476.197455][ T30] disable_device+0x1c7/0x360 [ 1476.202166][ T30] ? __pfx_disable_device+0x10/0x10 [ 1476.207669][ T30] __ib_unregister_device+0x2ac/0x3d0 [ 1476.213078][ T30] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1476.219155][ T30] ib_unregister_device_and_put+0xb9/0xf0 [ 1476.225037][ T30] nldev_dellink+0x2c6/0x310 [ 1476.229658][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 1476.238780][ T30] ? cap_capable+0x1b4/0x250 [ 1476.263817][ T30] ? cap_capable+0x1b4/0x250 [ 1476.268579][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 1476.283321][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1476.288048][ T30] ? security_capable+0x7e/0x2d0 [ 1476.293023][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 1476.313504][ T30] rdma_nl_rcv+0x6dd/0x9e0 [ 1476.318000][ T30] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1476.323117][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1476.371507][ T30] netlink_unicast+0x7f6/0x990 [ 1476.382021][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1476.392367][ T30] ? __virt_addr_valid+0x45f/0x530 [ 1476.403338][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 1476.408409][ T30] ? __check_object_size+0x47a/0x730 [ 1476.423400][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1476.433435][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.438781][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.453297][ T30] __sock_sendmsg+0x221/0x270 [ 1476.458006][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1476.462770][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1476.470494][ T30] ? __fget_files+0x2a/0x410 [ 1476.475495][ T30] ? __fget_files+0x2a/0x410 [ 1476.480116][ T30] __sys_sendmsg+0x269/0x350 [ 1476.485041][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1476.626339][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1476.640851][ T30] ? do_syscall_64+0x100/0x230 [ 1476.653343][ T30] ? do_syscall_64+0xb6/0x230 [ 1476.663575][ T30] do_syscall_64+0xf3/0x230 [ 1476.673337][ T30] ? clear_bhb_loop+0x35/0x90 [ 1476.687591][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.700002][ T30] RIP: 0033:0x7f9b33185d19 [ 1476.710982][ T30] RSP: 002b:00007f9b33f1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.729070][ T30] RAX: ffffffffffffffda RBX: 00007f9b33376080 RCX: 00007f9b33185d19 [ 1476.748864][ T30] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 000000000000000c [ 1476.771689][ T30] RBP: 00007f9b33201a20 R08: 0000000000000000 R09: 0000000000000000 [ 1476.788919][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.810235][ T30] R13: 0000000000000000 R14: 00007f9b33376080 R15: 00007ffd4dbbf178 [ 1476.826807][ T30] [ 1476.829916][ T30] [ 1476.829916][ T30] Showing all locks held in the system: [ 1476.838183][ T30] 1 lock held by khungtaskd/30: [ 1476.843062][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1476.854016][ T30] 2 locks held by getty/5574: [ 1476.860224][ T30] #0: ffff88814ddcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1476.870119][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1476.880341][ T30] 3 locks held by kworker/0:7/5877: [ 1476.885587][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1476.896681][ T30] #1: ffffc90004177d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1476.907763][ T30] #2: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1476.918250][ T30] 3 locks held by kworker/u8:13/8306: [ 1476.923851][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1476.936123][ T30] #1: ffffc90003ec7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1476.947292][ T30] #2: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1476.956451][ T30] 3 locks held by kworker/u8:15/8310: [ 1476.963906][ T30] #0: ffff888030605148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1476.975661][ T30] #1: ffffc90003d67d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1477.003427][ T30] #2: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 1477.012932][ T30] 4 locks held by kworker/u8:16/8312: [ 1477.018476][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1477.029470][ T30] #1: ffffc90003d37d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1477.040199][ T30] #2: ffffffff8fc94010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 1477.049914][ T30] #3: ffff88807e2006b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 1477.062685][ T30] 3 locks held by kworker/u8:22/8325: [ 1477.068492][ T30] 3 locks held by kworker/u8:1/13915: [ 1477.076599][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1477.088638][ T30] #1: ffffc9000c357d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1477.100421][ T30] #2: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1477.110477][ T30] 2 locks held by syz.0.3701/19352: [ 1477.115754][ T30] #0: ffffffff9a735ff8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0 [ 1477.125930][ T30] #1: ffff88807e2006b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0 [ 1477.137779][ T30] 1 lock held by syz-executor/20679: [ 1477.143082][ T30] #0: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 1477.152616][ T30] 1 lock held by syz.2.4055/20800: [ 1477.157953][ T30] #0: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1477.169330][ T30] 2 locks held by syz.4.4062/20836: [ 1477.174582][ T30] #0: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1477.183651][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 1477.194614][ T30] 1 lock held by syz.4.4062/20837: [ 1477.199756][ T30] #0: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1477.209301][ T30] 1 lock held by syz.7.4063/20841: [ 1477.214452][ T30] #0: ffffffff8fca04c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x9e8/0x3640 [ 1477.224552][ T30] [ 1477.226995][ T30] ============================================= [ 1477.226995][ T30] [ 1477.249698][ T30] NMI backtrace for cpu 0 [ 1477.254070][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller #0 [ 1477.262858][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1477.272941][ T30] Call Trace: [ 1477.276239][ T30] [ 1477.279191][ T30] dump_stack_lvl+0x241/0x360 [ 1477.283910][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.289141][ T30] ? __pfx__printk+0x10/0x10 [ 1477.293772][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1477.298743][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1477.304224][ T30] ? _printk+0xd5/0x120 [ 1477.308406][ T30] ? __pfx__printk+0x10/0x10 [ 1477.313027][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1477.317916][ T30] ? __pfx__printk+0x10/0x10 [ 1477.322535][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1477.327582][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1477.333596][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1477.339612][ T30] watchdog+0xff6/0x1040 [ 1477.343898][ T30] ? watchdog+0x1ea/0x1040 [ 1477.348347][ T30] ? __pfx_watchdog+0x10/0x10 [ 1477.353058][ T30] kthread+0x2f0/0x390 [ 1477.357155][ T30] ? __pfx_watchdog+0x10/0x10 [ 1477.361859][ T30] ? __pfx_kthread+0x10/0x10 [ 1477.366483][ T30] ret_from_fork+0x4b/0x80 [ 1477.370919][ T30] ? __pfx_kthread+0x10/0x10 [ 1477.375535][ T30] ret_from_fork_asm+0x1a/0x30 [ 1477.380339][ T30] [ 1477.385109][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1477.391010][ C1] NMI backtrace for cpu 1 [ 1477.391024][ C1] CPU: 1 UID: 0 PID: 20679 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller #0 [ 1477.391044][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1477.391055][ C1] RIP: 0010:__lock_acquire+0x1397/0x2100 [ 1477.391078][ C1] Code: 3c 10 00 74 08 48 89 df e8 26 89 88 00 48 83 3b 00 0f 84 e1 02 00 00 4c 89 ef 48 8b 74 24 38 44 89 fa 48 89 e9 e8 69 9e 00 00 <45> 31 f6 85 c0 0f 84 81 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 [ 1477.391094][ C1] RSP: 0018:ffffc900050df410 EFLAGS: 00000046 [ 1477.391111][ C1] RAX: 0000000000000001 RBX: ffffffff93bea148 RCX: 917cff42d5104800 [ 1477.391124][ C1] RDX: 0000000000000000 RSI: ffff88802dc4a908 RDI: ffff88802dc49e00 [ 1477.391137][ C1] RBP: dcaaab047b49eda3 R08: ffffffff94270887 R09: 1ffffffff284e110 [ 1477.391150][ C1] R10: dffffc0000000000 R11: fffffbfff284e111 R12: ffff88802dc49e00 [ 1477.391163][ C1] R13: ffff88802dc49e00 R14: 1ffff11005b89525 R15: 0000000000000000 [ 1477.391176][ C1] FS: 000055558c3d2500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1477.391192][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1477.391205][ C1] CR2: 00007f0ed4752440 CR3: 000000006a096000 CR4: 00000000003526f0 [ 1477.391220][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1477.391231][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1477.391243][ C1] Call Trace: [ 1477.391249][ C1] [ 1477.391256][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1477.391277][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1477.391295][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1477.391320][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1477.391344][ C1] ? nmi_handle+0x14f/0x5a0 [ 1477.391362][ C1] ? nmi_handle+0x2a/0x5a0 [ 1477.391380][ C1] ? __lock_acquire+0x1397/0x2100 [ 1477.391398][ C1] ? default_do_nmi+0x63/0x160 [ 1477.391420][ C1] ? exc_nmi+0x123/0x1f0 [ 1477.391437][ C1] ? end_repeat_nmi+0xf/0x53 [ 1477.391457][ C1] ? __lock_acquire+0x1397/0x2100 [ 1477.391475][ C1] ? __lock_acquire+0x1397/0x2100 [ 1477.391493][ C1] ? __lock_acquire+0x1397/0x2100 [ 1477.391510][ C1] [ 1477.391517][ C1] [ 1477.391529][ C1] lock_acquire+0x1ed/0x550 [ 1477.391546][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1477.391566][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1477.391584][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1477.391601][ C1] ? deref_stack_reg+0x17c/0x210 [ 1477.391620][ C1] ? stack_trace_save+0x118/0x1d0 [ 1477.391650][ C1] ? unwind_next_frame+0x18e6/0x22d0 [ 1477.391667][ C1] ? deref_stack_reg+0x17c/0x210 [ 1477.391685][ C1] ? preempt_count_add+0x93/0x190 [ 1477.391708][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1477.391733][ C1] is_bpf_text_address+0x46/0x2a0 [ 1477.391750][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1477.391767][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1477.391785][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1477.391809][ C1] kernel_text_address+0xa7/0xe0 [ 1477.391831][ C1] __kernel_text_address+0xd/0x40 [ 1477.391851][ C1] unwind_get_return_address+0x4d/0x90 [ 1477.391869][ C1] arch_stack_walk+0xfd/0x150 [ 1477.391893][ C1] stack_trace_save+0x118/0x1d0 [ 1477.391917][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1477.391942][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1477.391962][ C1] kasan_save_track+0x3f/0x80 [ 1477.391982][ C1] ? kasan_save_track+0x3f/0x80 [ 1477.392002][ C1] ? kasan_save_free_info+0x40/0x50 [ 1477.392020][ C1] ? __kasan_slab_free+0x59/0x70 [ 1477.392041][ C1] ? kfree+0x196/0x430 [ 1477.392062][ C1] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 1477.392084][ C1] ? tomoyo_path_number_perm+0x236/0x860 [ 1477.392101][ C1] ? security_file_ioctl+0xc6/0x2a0 [ 1477.392118][ C1] ? __se_sys_ioctl+0x46/0x170 [ 1477.392137][ C1] ? do_syscall_64+0xf3/0x230 [ 1477.392160][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.392198][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1477.392212][ C1] ? __kmalloc_noprof+0x2a5/0x4c0 [ 1477.392228][ C1] kasan_save_free_info+0x40/0x50 [ 1477.392246][ C1] __kasan_slab_free+0x59/0x70 [ 1477.392266][ C1] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 1477.392286][ C1] kfree+0x196/0x430 [ 1477.392308][ C1] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 1477.392331][ C1] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 1477.392355][ C1] tomoyo_path_number_perm+0x236/0x860 [ 1477.392373][ C1] ? tomoyo_path_number_perm+0x206/0x860 [ 1477.392391][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1477.392408][ C1] ? fd_install+0x9c/0x5d0 [ 1477.392436][ C1] ? __pfx_lock_release+0x10/0x10 [ 1477.392463][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1477.392481][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1477.392500][ C1] security_file_ioctl+0xc6/0x2a0 [ 1477.392518][ C1] __se_sys_ioctl+0x46/0x170 [ 1477.392538][ C1] do_syscall_64+0xf3/0x230 [ 1477.392561][ C1] ? clear_bhb_loop+0x35/0x90 [ 1477.392576][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.392599][ C1] RIP: 0033:0x7f52c4d8591b [ 1477.392612][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1477.392632][ C1] RSP: 002b:00007ffe2892ffb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.392648][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f52c4d8591b [ 1477.392661][ C1] RDX: 00007ffe28930010 RSI: 0000000000008933 RDI: 0000000000000005 [ 1477.392672][ C1] RBP: 00007ffe28930010 R08: 0000000000000009 R09: 00007ffe28930042 [ 1477.392684][ C1] R10: 00007ffe28930446 R11: 0000000000000246 R12: 00007ffe28930090 [ 1477.392696][ C1] R13: 00007f52c4e029b2 R14: 00007f52c5aa4620 R15: 00007f52c4e029b2 [ 1477.392714][ C1] [ 1477.958673][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1477.965556][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller #0 [ 1477.974336][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1477.984382][ T30] Call Trace: [ 1477.987657][ T30] [ 1477.990587][ T30] dump_stack_lvl+0x241/0x360 [ 1477.995261][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1478.000451][ T30] ? __pfx__printk+0x10/0x10 [ 1478.005029][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1478.011006][ T30] ? vscnprintf+0x5d/0x90 [ 1478.015339][ T30] panic+0x349/0x880 [ 1478.019231][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1478.025390][ T30] ? __pfx_panic+0x10/0x10 [ 1478.029825][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1478.035196][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1478.040735][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1478.046096][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1478.052267][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1478.058415][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1478.064584][ T30] watchdog+0x1035/0x1040 [ 1478.068921][ T30] ? watchdog+0x1ea/0x1040 [ 1478.073340][ T30] ? __pfx_watchdog+0x10/0x10 [ 1478.078021][ T30] kthread+0x2f0/0x390 [ 1478.082099][ T30] ? __pfx_watchdog+0x10/0x10 [ 1478.086767][ T30] ? __pfx_kthread+0x10/0x10 [ 1478.091350][ T30] ret_from_fork+0x4b/0x80 [ 1478.095756][ T30] ? __pfx_kthread+0x10/0x10 [ 1478.100334][ T30] ret_from_fork_asm+0x1a/0x30 [ 1478.105128][ T30] [ 1478.108403][ T30] Kernel Offset: disabled [ 1478.112723][ T30] Rebooting in 86400 seconds..