last executing test programs: 7m17.359186997s ago: executing program 32 (id=297): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fsync(r1) 5m44.383365756s ago: executing program 33 (id=905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES8=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x63) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) write$P9_RREADDIR(r1, &(0x7f0000000200)={0xb, 0x29, 0x2, {0x7}}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) timer_create(0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES64=r2, @ANYBLOB="adffa88801"], 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x440088c4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc286, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd9, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0xc5, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xc19}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x8, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x2, 0xd}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x7f, 0x4, 0x20, 0x1}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5, 0x8001}, @generic={0x7, 0x10, 0x2, "254c1f51"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9d, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x6, 0x1b, 0x8, 0x9}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x180c}}, {0x95, &(0x7f0000000380)=@string={0x95, 0x3, "75905cb82a85434496d94fb605ec0e9c9e959bfffaa5d4dafbbb49f121d1eee395b707d60f3e81893f95f8d3eabe902c38705d261344a37e83d592f2af58a3170f5cc1bc83dbaf8073a341a322cf52ad59a7e4ee1ffe817d26e7f9288f3e69bfcd03af49b6831c0181087105f189b1bbf4af2cb7c29b4783284269436fc2a3e12606165e73a39149d158113f70136e799119ce"}}]}) 5m12.054731977s ago: executing program 34 (id=1204): r0 = socket(0x10, 0x3, 0x0) (async) syz_ublk_setup_io_uring(0x6e39, &(0x7f0000000040)={0x0, 0x6240, 0x4}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000280)="c4", 0x1}], 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002b9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00002d3000/0x1000)=nil, &(0x7f00002ea000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_disconnect(r1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) listen(r4, 0xf1af) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x901000, 0x0) sendmsg(r8, &(0x7f00000008c0)={&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x2}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="1b03599b3f00ed6fd6948d8e110415232d4dd87601921b6d35d8b3dbd617e7f597e7d92ef399b205fafe1fd659125c0e9b30e02da6c84dfb79d9189a903885e8af2cb50befe7aa86562da52568a4e4549e38f30243995b4000bc088aae79b7c471656016bfc36250db6cdf0f6021a210763551a915b2ae9f99d407e929f490cc47149bc7357f6241deb91b4c8a7061954ce502e78349ac6793293aee2211c5556e48572f619a6abe4e1bea41909d1a8068cf4b44961c4889f009a0334fc9aae822f0a6835934437e2b78b342d46a4181e68576a54577b8fdfcf64397ba", 0xdd}, {&(0x7f00000005c0)="dc0c0d44b6457d27c159252f078100f292e7439097c118ce24fb687215c6f726bb", 0x21}], 0x2, &(0x7f0000000640)=[{0xe8, 0x114, 0x3, "ca991234b2590131baced3826348a55d4f50c64f9e19fdc7318227a4150c9d54becac2d7c86f1cd7e5bb58c9f1fccdac55bbc4c3e8c64ec67d62ff6032f3418941885cf5b7debdc4abe79dcdd4ab0dc5635d465c6daffdc32cdd034b41ca6ddcdbf3fd3a3c97e90fb61cc9229751d2fead85f7d4b5e7c308fa4355fa13231bec3233bc7c896285c0e9357c3c499cac86f8dac2044fe0dc4811e25f7671669bea754d95ba887dea02e09b7fcdd18626dff30c3a57ed26f411b8cfcd41f5357fb3c1f370255896523ec0c0aa8afc90fc256d695134269665"}, {0x70, 0x1, 0xacc, "9d3c55142e0079090bc4824370f120d34320b2f265fc27a7e8051c1a2347767acc25ed75c250259e88a9301833caed4547f24c7ae17b505fb2f3c1a526eec817cfeb87eaff82dbe34249b3b8b8b0c7727a14981b62a8d98fadc14a8596"}, {0xf0, 0x14, 0x2, "ab34817c2b5ce5af22e990ab1fd36e42183162b6b72717e254d272dbd76930319c14b01be8f9f0632f0d49b6d8025bb01104731d6e95a35ba1d5e25f728779492f4640632162b24090da9613b607937a3788119e68011fdf52aee6b2f5d047404d52bc085edd31a8c9f069418b0002d8a3b051a4d52a1f2a0f8009080bed8d15b5809e79c5d687005dbaba4e541baae011920bd105164704c4865160b18cfed6bfd27c1b634a9b619cc4d9c06b17da3cfa7b5605c8db37cfc60346381dfd255930f4eec9d9e05d1371991a4f64eb8d690577de7194f66c9004c603fad65c"}], 0x248}, 0x20040804) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m50.918380591s ago: executing program 35 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r1, 0x16, 0x0, @void}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) setns(0xc9, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 4m7.407747701s ago: executing program 36 (id=1793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) fcntl$getownex(r3, 0x10, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@flat=@handle={0x73682a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x100b}, @fda={0x66646185, 0x3, 0x1, 0x30}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 3m51.705484926s ago: executing program 37 (id=1798): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180001c71a9d7663229f9888fa000000000000000000009500"/43], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r5, &(0x7f0000000300)={@icreq={{0x0, 0x1, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x400}, @void}, 0x80, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000001c0)=r6) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r1, r9) fcntl$setown(r8, 0x8, r7) tkill(r7, 0x13) 3m46.971718744s ago: executing program 8 (id=1852): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c8d1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) write$cgroup_pid(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000082}, 0x2000c090) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045730, &(0x7f0000002780)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m45.961031057s ago: executing program 8 (id=1854): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m45.293025596s ago: executing program 8 (id=1859): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) fchmod(r0, 0x8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x7fff8000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000000)="6a9df750566ee59a40510427b089185ccc5be3566745d5bdb977daf076ddb346aee00db4488b4c10c1f0d9aea7b6777de4a03c10bea7750fa055624dd6e46a65ad5fd0f8c6965bc0e8ff0b65378b47532c9d1a47ba1c41d6cc6f9e72eb73db30ba5cd74a7db55a82a1567c9ec630d330fe330ea435d40e1e0a6ff0397d43220c", 0x80) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000005c0)) 3m45.248914992s ago: executing program 38 (id=1859): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) fchmod(r0, 0x8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x7fff8000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000000)="6a9df750566ee59a40510427b089185ccc5be3566745d5bdb977daf076ddb346aee00db4488b4c10c1f0d9aea7b6777de4a03c10bea7750fa055624dd6e46a65ad5fd0f8c6965bc0e8ff0b65378b47532c9d1a47ba1c41d6cc6f9e72eb73db30ba5cd74a7db55a82a1567c9ec630d330fe330ea435d40e1e0a6ff0397d43220c", 0x80) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000005c0)) 3m9.851825023s ago: executing program 6 (id=2136): keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) r0 = openat$audio1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80444d1a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_off}, {@index_off}, {@xino_auto}]}) 3m9.760627791s ago: executing program 6 (id=2137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x0, 0x6, 0xd293}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x40001) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x1402, 0x97d74ce4d6b26351, 0x7, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) (async, rerun: 64) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) (async) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000080)={{@local, 0x9}, 0x1, 0x0, 0x10000}) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000200)={[0x6000, 0xe000, 0x58000, 0x41000], 0x1, 0x2, 0xff5}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5}}, {{&(0x7f0000000140)=@ax25={{0x3, @rose}, [@default, @default, @null, @bcast, @bcast, @rose, @remote, @bcast]}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/24, 0x18}], 0x3, &(0x7f0000000080)=""/94, 0x5e}, 0x3ea}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/103, 0x67}, {&(0x7f0000001c80)=""/249, 0xf9}], 0x3, &(0x7f0000000040)=""/58, 0x3a}, 0x1}, {{&(0x7f0000001e00)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000001e80)=""/31, 0x1f}, {&(0x7f0000001ec0)=""/36, 0x24}, {&(0x7f0000001f00)=""/137, 0x89}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f00000020c0)=""/150, 0x96}, {&(0x7f0000002180)=""/203, 0xcb}, {&(0x7f0000002280)=""/152, 0x98}], 0x7, &(0x7f00000023c0)=""/37, 0x25}, 0x9}, {{&(0x7f0000002400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002040)=""/86, 0x56}, {&(0x7f0000002500)=""/180, 0xb4}, {&(0x7f00000025c0)=""/39, 0x27}, {&(0x7f0000001fc0)=""/112, 0x70}, {&(0x7f0000002680)=""/173, 0xad}, {&(0x7f0000002740)=""/147, 0x93}], 0x6, &(0x7f0000002880)=""/111, 0x6f}, 0x4}], 0x5, 0x0, 0x0) (async) r9 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1000001, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) readv(r9, &(0x7f0000001dc0)=[{&(0x7f0000003940)=""/4109, 0x111}, {0x0}], 0x2) 3m9.453218681s ago: executing program 6 (id=2139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20e080, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'team_slave_0\x00', @random="2b0100004ec6"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) 3m9.358324963s ago: executing program 6 (id=2140): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000000380)={0x0, 0x1, {0x30, 0x0, 0x0}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}]}, 0x30}}, 0x0) 3m9.205945545s ago: executing program 6 (id=2141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='Y', 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x4210, r7) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 3m9.083176323s ago: executing program 6 (id=2143): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x1, 0xc1}) r0 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}], 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) 2m59.480104331s ago: executing program 2 (id=2209): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x10c1019, &(0x7f00000000c0)='\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000100)=""/8, 0x8}) syz_usb_connect$uac1(0x6, 0xd6, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x930b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0xff, 0x60, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc19b, 0x42}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0x1, 0xfffb, 0x1, 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x4, 0x5, "bb6691"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x8}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0x7, "c57ba0"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x1, 0xa, 0x4, 0x7, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xd, "cf6e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x4, 0x13, {0x7, 0x25, 0x1, 0x8, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7a, 0x4, 0x4b, 0x4, "", "84"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf7, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x9, 0x1, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x7, 0xc, 0x6, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0xff, 0x0, 0x2, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xff, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x8, 0x0, 0x9}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0xe0, 0x7, 0x5, 0x20}, 0x33, &(0x7f00000002c0)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x257, 0xff00, 0x8001, [0xff2e, 0xff3f0f, 0xff0000, 0xc030, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x8, 0x80}]}, 0x1, [{0x92, &(0x7f0000000300)=@string={0x92, 0x3, "fdd6c97096207eeb67f84df912419a02bdf42a64bcac3ded8843a851b9040f9c8c2b1b9c67be76998320b4361d04a5354f7a2f92953cf4071bf133b72b226a5a25ed935ec54f17c7499c66df9e4242381bb6f48b634fcbe4a0e43242aa570b5bc68c9d32a483e6e799223e8ac219a61b035ac4039f01f0db94e4f780a15b01b5bb6141bccb7ca8e626a2b454004c5ef3"}}]}) r1 = syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x10000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000440)) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x4, 0xc3, {0xc3, 0x18, "73438e96be56d8966963eb6e4cca3a9767d63af09ebf2b34cfd1e1db1e332790b360d29293d83218c64dccce13a96828d6bbee3a6deb331e64d988a7f0305560e5cac66c1d90b8ee52b61b186d18db0c62f19125c3faaaedbb78843493ba6dce278e8b69d40d8f7882edacb8e72e36e7d80f24d660aabf8b064e47575db5626c2de412a76271722caa5b40071fdbe327dff9a1337e8ca1f6e46299bc78784442ad72b75f37cecef3aedba12344785a088de2570ee850e5a28151672f6ff18e458d"}}, &(0x7f0000000580)={0x0, 0x3, 0x8, @string={0x8, 0x3, "3a3b86931658"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x40, 0xf, 0xa2, "97535689c956f4ac1d6014d5ffb23f5f4d5ad50e144110f1295552d294c694d4f37f744c268ac531d756a6e7cdf330010c69513d3087779e0920004b23c239861d85fa1f05264fe77e035a457b2ea9d7bf9a4560d1153ff39a2423b1da1e79ec9c0a1ee46a1930ae8af3e2c85f462666989c24996d06ac2868e8df3ef726d49570cb6d663834c779e0830c1925eb442f0b8640d92c1d8375e1122dc7e2988dd4aaad"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x2, "d3f6"}, &(0x7f0000000780)={0x20, 0x82, 0x3, "f2eab5"}, &(0x7f00000007c0)={0x20, 0x83, 0x3, "a3ee44"}, &(0x7f0000000800)={0x20, 0x84, 0x4, "b5fb6213"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "90cd3c"}}) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x7f, "", [{{0x9, 0x4, 0x0, 0x55, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0xfe, 0x4a}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x1, 0x7f, 0x8, 0x20, 0x5}, 0x25, &(0x7f0000000980)={0x5, 0xf, 0x25, 0x2, [@generic={0x16, 0x10, 0xa, "acbb94c830d30b743b4b89b4cd40299f6b3bab"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x80, 0x1, 0x4}]}, 0x6, [{0x3b, &(0x7f00000009c0)=@string={0x3b, 0x3, "e44774a605fafa5fdba079c0d1ba0bb393a819f74ef2898f6abe7ae69408772dbdb02289d867baf6a45fc09e2152c25d53a46db6ead77d89b4"}}, {0xec, &(0x7f0000000a00)=@string={0xec, 0x3, "8e034c0fbb9e8a6e416a54ca3cf2eeebf6930fe1c7e763b604905bd81e28294c24725c675e4f409a4eda5000d6b3a0859b51ce694c7bf508c007353baee7c5c02630c59590ac3961257304983d491f7162bc250a4f9933e5c2382fbe1707bd340632b56796ea3ed061c4af87fc16d24966edaa0a73031de3eb297fb980c3acad9789502fdbc7b797c0b57d0e7a441ec2b4b01fec06270957f9149ca0054bf9e21f8e62aa611a22197ce4ce4d92f1a96c324bb68310b74bcaf95014adbd7bfe1d5ef0b81aa10e159df9ed327ab0554776883fb16c096b25802473e6fce6bf5d2bebeaba3e868be1579518"}}, {0x67, &(0x7f0000000b00)=@string={0x67, 0x3, "14539ab59f96a6906081fe3b4f6670cd26d7561a3b3dd7b086dbd61cad943abdb0179b11782e21e9666d06cf3efe776544d1c8ce4dee6b2aa5cee195c52ece82db4094175c11d4a6fe0c3d3d1ff832e02b5680fd64165c3ca885d6fc00d8917107fae5a860"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x458}}, {0xca, &(0x7f0000000bc0)=@string={0xca, 0x3, "9ffa09cba8345f360c5bde393a4c0f008aaec9c3638a7e5e45bfc5eb76065b5b08a6cdfb38d698f281ef212d34c43eaa07c8a699c6ba619c316f1e37ee7d51a3e8734cd159dca7aa379b049f0466c474ee48c3e50a9a2f2766af41ac4170cb8cbb3dffb21962a87a2ee40b983b1b7d82cfa1bc93c1706c6bfc391c8bbab90da18a5dc8e6a44bef86a3cc9ea549d1f9bda9a154255bbef52e79d2149624d6418f93428ee76b14a556964ec6760f8e72d0458806c7a8f2b7ef0ef97bca369132be7bdf31b0d46cf6bf"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000f40)={0x14, &(0x7f0000000d80)={0x0, 0x24, 0xdb, {0xdb, 0xb, "16e3b7c2d50d335d7f65c634e27fb9d1027e18de51088312267f0360b07db07bef95fd32b71c99d55e9f9588cd40328de6ff5fb815261d7011e2c996252e29b4faee35bff1ddae865914c5c606310fa92b684c0740e56d76f8e1346a00ec92cc88ccca8c4ff2496bd043abf3168eec07e4af8e7fe7f7436b80c6d73425db7cac7cca17bf02c611a580a270f1f8c7a28d87659fc36c1c7e4cc7f7c1bad4fd457b4f541c129f4832b4d1dd4037c888e5a91f7d96c337f5adad2397b9e572fe09a28473b3bd6957499beb907bf323d3803caec0332198b50de119"}}, &(0x7f0000000e80)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "4b43a665b8600d59fd249675b8680ce213c256baf086d9002bc84812d44e62919ed56322e996b9e981e9bb0faf47980766bd09b19857587c9d93df7ea0169b524ce0a85998541b28b90aeefc9cb0f5ea3b60928ba77561d9050042656fd38745a5765eaeceaca68151c33ef3778fc5f4b104f48e0592d1c584ac929751e5bf39113affac65b01d9c2115fccede3442915e99c76e742a869ae2a7960445ae32b589f6"}}}, &(0x7f0000001100)={0x34, &(0x7f0000000f80)={0x40, 0x6, 0x37, "b089466fe054961e4785d790f6a9cb4d016d6f88c03c37b5ee0ba07afcbcff65dbc6ec15150e7eaed1b751ecbf5b91dbb0fb327b795a3e"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001040)={0x20, 0x0, 0x14, {0x12, "0ee3e5d0078a472d00467fde1180eec723dc"}}, &(0x7f0000001080)={0x20, 0x1, 0x1, 0x7e}, &(0x7f00000010c0)={0x20, 0x0, 0x1, 0xa}}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) syz_usb_connect$midi(0x0, 0x5a, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xe7, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x8, 0x20, 0xf2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10, 0x61, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xa9, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x4, 0x5, [{0x80, 0xf9}, {0x2}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x1}], 0x40}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x6}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x7, 0x6, [{0x30, 0x8}, {0x7, 0x6}, {0x4, 0x9}, {0x40}, {0x3, 0xa}, {0xb}], 0xd6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x7}]}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x250, 0x5, 0x9, 0x6, 0x20, 0xff}, 0x3b, &(0x7f0000001340)={0x5, 0xf, 0x3b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0xe, 0x200}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x7, 0x401, 0x27}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x7, 0x0, 0x3300, [0x0, 0xf, 0xff003f, 0x8628d5a5f953cea7, 0xc0, 0xff3fc0]}]}, 0x1, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x402}}]}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x223081, 0x10, 0x20}, 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x1000, 0x10) renameat(r3, &(0x7f0000001480)='./file0\x00', r4, &(0x7f0000001500)='./file0\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000001540), 0x7ff, 0x40000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000001580)=""/156) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000001640)=0x3) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f00000016c0)={0x5, 0x20, 0x7, 0x20, 0x1}, 0x48) sendto(r0, &(0x7f0000001740)="e32083ace543d7c3a02b602903c4d2f6b5de8777e49b7484ffa9c3d679d694843c5b8fc5c5cff31f4e75546ebee34a67ad4f39f0e68646b05aa7db3797ee6403f27d22a152ed92d1a0877251ba1eda6ab7b6765a8b62f440ce1be897ab7e1d2972a5e67dde1154cac00d90c023aabf9fb36e6905c67506d808886be2bd62b5124bf01fb9530d4f6fb0a2c8638267f6a114d0d29346b655a27d05e7b670aeae2d10a532000bfb19b9738bb18908ce080d6c130e32803c28a8f6514ea691a12d76d4b33365ccff112667", 0xc9, 0x4004000, &(0x7f0000001840)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) syz_usb_connect$uac1(0x3, 0xdd, &(0x7f00000018c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x1, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x35}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x4, 0x2, "49c6e0"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0xfa, "02"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0xb, 0x27, "c6f8e0fd"}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x9, "e6"}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x3, 0x1, "76884b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0x2, 0x4d, {0x7, 0x25, 0x1, 0x4, 0xe, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x77, "08deec", "b2"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xda, 0x4, 0x9, 0x0, '>'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x40, 0xd8, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xd, 0x3b, 0x3, 0x9}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0xac93, 0x1f, "7f8af0c8b947"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xa, 0x3, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5d, 0x2, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000001a80)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x200, 0x4, 0x6, 0x8, 0x10, 0x60}, 0x10, &(0x7f0000001a00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xd, 0xe, 0x2, 0xd}]}, 0x1, [{0x26, &(0x7f0000001a40)=@string={0x26, 0x3, "2be80a075c3912b35f5d8fcc668eafc17610afd4840e62befbe321ad369c24a3cc51ebb8"}}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b80)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000001c80)=0xe8) mount$9p_xen(&(0x7f0000001ac0), &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x2200024, &(0x7f0000001cc0)={'trans=xen,', {[{@cache_mmap}, {@access_any}, {@privport}, {@privport}, {@directio}, {@version_9p2000}], [{@obj_user={'obj_user', 0x3d, '/dev/nbd#\x00'}}, {@appraise_type}, {@fowner_lt={'fowner<', r7}}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@fsname={'fsname', 0x3d, '&][:\\(+r++!]&^('}}]}}) close(r4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001f80)={{r6, &(0x7f0000001dc0)=':^\x00', 0x2001, &(0x7f0000001e00)={@align=0xa33, {0x7ff, 0x8, 0x3, 0x2}}, 0x541, &(0x7f0000001e40), &(0x7f0000001e80)=0x8000}, 0x1, &(0x7f0000001f40)=[{0x2, 0x3ff, &(0x7f0000001ec0)='access=any', &(0x7f0000001f00), 0x0, 0xb}]}) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000002000)={0xc}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002080), r8) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x8c, r9, 0x4, 0x70bd29, 0x2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008000}, 0x2050cb4999add60d) 2m56.388376518s ago: executing program 2 (id=2226): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f00000005c0)=""/105, 0x69}], 0x4}, 0x2141) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32, @ANYBLOB="040000000380020008002e"], 0x50}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x8001}]}) (async) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)="9ddb00"/18, 0x12}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) socket(0x2d, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000740)=0x8) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r6, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x101002, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x9, 0x0}, 0x8) (async) r11 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r11, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0007"], 0x125) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r11], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, r10, r9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m56.23273669s ago: executing program 2 (id=2227): syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x3, {0x0, 0x6, "4aa1d3", 0x0, 0x5e, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x15, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh, @dstopts]}}}}}}}, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400000, 0x101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42942, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x4}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x101000, 0x181) 2m56.051625547s ago: executing program 2 (id=2229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1700000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000, 0x0, 0x20044040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) read$mtd(r3, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e03, 0x4, 0x48cd, 0x80000003, 0xd6f}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m55.882429416s ago: executing program 2 (id=2230): r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x6c73, &(0x7f0000000140)={0x0, 0x2ed1, 0x40, 0x2, 0x346}, &(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x9, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_io_uring_submit(r1, r2, r6, &(0x7f00000003c0)=@IORING_OP_PIPE={0x3e, 0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x8, 0x8], 0x0, 0x200, 0x1, {0x0, 0x0, 0x8}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 2m55.640368929s ago: executing program 2 (id=2232): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0xfffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) close_range(r2, r1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) (rerun: 32) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x2000, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xdf}, 0x9c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000340)=""/204) (async) sendto$inet6(r4, &(0x7f0000000100)="583592d1c66e21031f475246600ea694127244032293649b5ba4791670046e005c3dbb0b94e179d68ab2d1c070be195f2678567b86aa69165e91cc31403718db423db2047b7b9c8c3298c667615818594365fa61d1126ccf28d43563189659cb6997f3614ab85926a1", 0x69, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async) readv(r4, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000280)='2\x00', 0x2) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 2m55.558077834s ago: executing program 39 (id=2232): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0xfffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) close_range(r2, r1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) (rerun: 32) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x2000, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xdf}, 0x9c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000340)=""/204) (async) sendto$inet6(r4, &(0x7f0000000100)="583592d1c66e21031f475246600ea694127244032293649b5ba4791670046e005c3dbb0b94e179d68ab2d1c070be195f2678567b86aa69165e91cc31403718db423db2047b7b9c8c3298c667615818594365fa61d1126ccf28d43563189659cb6997f3614ab85926a1", 0x69, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async) readv(r4, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000280)='2\x00', 0x2) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 2m53.564734082s ago: executing program 40 (id=2143): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x1, 0xc1}) r0 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}], 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) 2m28.711239667s ago: executing program 9 (id=2410): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000000)={0x80a0000, 0x110000}) landlock_create_ruleset(&(0x7f0000000040)={0x8020, 0xf, 0x3, 0x400, 0x6, 0x1}, 0x30, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8020, 0xf, 0x3, 0x400, 0x6, 0x1}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x1004, r0}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x1004, r0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8e}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x1000) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r11, 0x415, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r12 = userfaultfd(0x800) ioctl$UFFDIO_WAKE(r12, 0x8010aa02, &(0x7f00000005c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_POISON(r12, 0xc020aa08, &(0x7f0000000600)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) (async) ioctl$UFFDIO_POISON(r12, 0xc020aa08, &(0x7f0000000600)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000640)=0x1a) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000680)={0x2, 0x1, 0x5, 0x7, 0x4, 0x5}) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000006c0)={0x0, 0x1, 0x8, 0xb, 0x6, 0x7}) r13 = syz_ublk_setup_io_uring(0x1f5c, &(0x7f0000000700)={0x0, 0x4ab6, 0x400, 0x2, 0x24e}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r13, 0x1e, &(0x7f0000000840)={r2, 0x2, 0x7a, 0x270d7b61, 0x8}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xfc, r3, 0x810, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 2m28.710635371s ago: executing program 9 (id=2411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0xbd08, 0x80, 0x3, 0xf, 0x2, 0x69, 0x7, 0x0, 0x8, 0x2, 0x9, 0x1, 0x6, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000001c0)={r2, 0x5b0000000000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r5 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000500)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x11, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xc5e, 0x0, 0x0, 0x1000, 0x8000, 0x0, 0x0, 0x10}}}, &(0x7f0000000000)) socket$packet(0x11, 0xa, 0x300) r9 = socket$inet6(0xa, 0x3, 0x2) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000011c0)={0x2, 0x0, @ioapic={0x200000, 0x9, 0x4, 0x10, 0x0, [{0x3, 0x7, 0x0, '\x00', 0xd}, {0x5, 0x4, 0x65, '\x00', 0x14}, {0x3, 0xb, 0x7, '\x00', 0x7}, {0x10, 0x10, 0x4, '\x00', 0x5}, {0x2, 0x4, 0x3, '\x00', 0x6}, {0x3, 0x5, 0x81}, {0x89, 0x1, 0x4, '\x00', 0xc}, {0x8, 0x81, 0x6, '\x00', 0xf7}, {0xff, 0x2, 0x5, '\x00', 0x8}, {0x9, 0x7, 0x6, '\x00', 0x1}, {0x80, 0x8, 0xff, '\x00', 0x7}, {0xe, 0x3, 0x5, '\x00', 0x1}, {0x0, 0x3a, 0x81}, {0x3, 0x9, 0x3, '\x00', 0x3}, {0x3, 0x9, 0x4, '\x00', 0x5}, {0x9, 0x4, 0x2, '\x00', 0x4}, {0xa4, 0xe, 0x12, '\x00', 0x7}, {0x7, 0x9, 0xc, '\x00', 0x2}, {0x0, 0x4, 0x7, '\x00', 0x7f}, {0xd, 0xe9, 0x8, '\x00', 0x5}, {0x5, 0xff, 0x5, '\x00', 0x60}, {0x10, 0x3, 0xad, '\x00', 0x6}, {0x3, 0x8, 0x5, '\x00', 0x4}, {0x6, 0x6, 0x3, '\x00', 0x3}]}}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e25, 0x5, @private2, 0xeb0}, 0x9) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0fe20066f30fc234000f1121680000cf66360f300f23fc66b9810000c00f320fc71c0f0096d97d", 0x27}], 0x1, 0x8, 0x0, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 2m28.182464966s ago: executing program 9 (id=2415): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r3}, 0x38) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2m28.100535721s ago: executing program 9 (id=2420): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m27.960328317s ago: executing program 9 (id=2422): r0 = socket(0x1f, 0x5, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = dup2(r3, r2) setns(0xc9, 0x0) r5 = socket(0x2b, 0x4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x29) mkdirat(r4, &(0x7f00000021c0)='./file0\x00', 0x75) timer_gettime(r1, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5390, &(0x7f0000001040)=@bca={0x3, 0xbc, "3672ace483bbb4982bff1297dc4ba5ffcca97ee574485edbce3b6d0a592f98cecd3b6e9ab371232b4bb37b2b0a8d877e2313dc7d3c404c4ed4ae604cbe7971007d9b140a9fe85827e62c852a1366bd322ba4d31cf3a82a4d19a635b3ad3b829618973d5667301251f418cd08478850a02517be3f03b3910dd7d82bbb1c78b369c69a41ccd8f11f36097f69c9a0e27eb6052dbf8dad8420a76a8060513300af859d09cd58b106860fa502d46076c1c6619e55e50e547dffb8f3fef351"}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2004, 0x2}, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x3fb, 0x200, 0x70bd26, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="f80f0000", @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf250100000004000500040005000500040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x9, @empty}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) 2m25.836426049s ago: executing program 9 (id=2445): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000002c0)=r9, 0x4) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r12, r10, &(0x7f00000000c0)=0x58, 0x5) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r13, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001a00010026bd70010d0000000200200dcd0d6e7deceacdae6d7ed610c6d0a81859145d141e764c3b1d25316469d58d2c7f803d0fafa2d96f5b54e9b13c9ed72f0af551a122bb475e57b3d609f5c1aaa162471e7ef86f45a5c83653772d418d8ce9313fdafd2c477e860ac0ef9c05483ccf5e50e35519bd64c950f9474af0b67a8692", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc0200"/24], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 2m21.31182919s ago: executing program 0 (id=2489): socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xf9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4e24, 0x0, @mcast1}}}, 0x90) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) 2m19.450419955s ago: executing program 0 (id=2493): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80000, 0x0) (rerun: 32) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x140, 0xd5, 0x9, 0x0, 0x1, 0x1, 0x7ffe, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x80003, 0x6, 0x29, 0x72f0, 0x5727, 0xaf, 0x806, 0x401, 0x4, 0x7, 0xaad8, 0x9, 0x1000, 0x8, 0xa, 0x7, 0x383, 0x8001, 0x4]}) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc024) 2m19.272426653s ago: executing program 0 (id=2496): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000019000100000000000000000080200000001100050000000014000f"], 0x30}}, 0x0) ioctl$sock_ifreq(r5, 0x8937, &(0x7f0000000100)={'dummy0\x00', @ifru_mtu=0x10001}) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x8001, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x7, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x4, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0x367, 0x6, 0x8, 0x63, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x6, 0x20000005, 0x3, 0xd7, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x3, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x7, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x7, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x2086, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x10, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) setuid(0xee00) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0xe, 0x3, 0x0, 0x6, 0x2, 0xfffc0000, "33e98bc2bc8ffcb162facd29f898e8ad", 0x7, 0x5, 0xe, 0x4, 0x1, 0x1, 0x6}) (async) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0xe, 0x3, 0x0, 0x6, 0x2, 0xfffc0000, "33e98bc2bc8ffcb162facd29f898e8ad", 0x7, 0x5, 0xe, 0x4, 0x1, 0x1, 0x6}) shmget$private(0x0, 0x1000, 0x78001e8b, &(0x7f0000008000/0x1000)=nil) (async) shmget$private(0x0, 0x1000, 0x78001e8b, &(0x7f0000008000/0x1000)=nil) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x48000) 2m19.073233668s ago: executing program 0 (id=2499): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) 2m19.070736328s ago: executing program 0 (id=2500): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000340)={0x18}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fe88000000000000000000000000000120010000000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x400a200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x10000, 0xf, 0x71, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x47}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x83, 0x10, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x70000, 0xdddd0000, 0xb, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x5}, {0xeeee3000, 0xffff1000, 0x10, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x2, 0xa, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xd000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0x7}, {0xa000, 0xf000, 0x10, 0x82, 0x1, 0xfb, 0x2, 0x5, 0xfe, 0x1, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x2}, {0x80a0000, 0x8}, 0x4001000e, 0x0, 0x8080000, 0x100200, 0x6, 0xe000, 0xe6e70c00, [0x6, 0x401, 0x8, 0xc5]}) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000001050101000000000000000202000004"], 0x14}, 0x1, 0x0, 0x0, 0x4008051}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000002580)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='>', 0x1}], 0x1}, 0x48090) close(r6) recvmsg(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffea3, &(0x7f0000000140)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1}, 0x40000141) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x81, 0x0, 0x6}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000040)={{0x41000, 0xeeee0000, 0xa, 0x23, 0xe, 0xd, 0x1, 0x8, 0xd, 0xb, 0x3, 0x9}, {0x50000, 0x80a0000, 0x10, 0xe8, 0x6, 0x8, 0x8, 0x1, 0x7, 0xd6, 0x4, 0x7}, {0xfec00000, 0x58000, 0xd, 0x8, 0xb, 0xd, 0x9, 0x5, 0xe, 0x8, 0x5b, 0xf8}, {0x1, 0x5000, 0x9, 0x1, 0x6, 0x2, 0x9, 0x6, 0xaa, 0x0, 0x81, 0x8}, {0x4000, 0x30000, 0x10, 0x0, 0x2, 0xa, 0x1, 0x84, 0x40, 0x0, 0x0, 0x3}, {0x0, 0xeefe8000, 0xb, 0xb, 0x8, 0x7, 0x9, 0x4, 0x23, 0x8, 0x4, 0xe}, {0xeeef0000, 0xdddd0000, 0x8, 0x3, 0x1, 0x3, 0x8, 0x0, 0x2, 0x7, 0x80, 0x81}, {0xffff1000, 0x6000, 0x0, 0xea, 0x2, 0x1, 0x10, 0x2, 0xdc, 0x2, 0x8, 0x2}, {0x25000, 0xa}, {0xc000}, 0x10000, 0x0, 0x7000, 0x84, 0x6, 0x4400, 0xeeee4000, [0xfffffffffffffffa, 0x2, 0x1, 0x9]}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x2, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x1}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0x0) 2m18.341407049s ago: executing program 0 (id=2506): ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) (async) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000000)=0x3) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f00000000c0)={0x2, 0xb50e, 0xf5, 0x0, 0x1400, 0x7, 0x0, &(0x7f0000000040)=[{0x9, 0x101, 0x5}, {0x9, 0xfe, 0x9}, {0x12, 0x101, 0x5}, {0x2, 0x1ff, 0x2}, {0x1a, 0x1ff, 0xd}, {0x2, 0xfe, 0x7}, {0xffffffff, 0x1ff, 0x5}]}) (async) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000100)) r0 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000000340)=""/172, 0xac}], 0x3, &(0x7f0000000440)=""/125, 0x7d}, 0x180) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "287fc1de261e58ac1250d8be7937588e"}) (async) r1 = syz_open_dev$ndb(&(0x7f0000001500), 0x0, 0xfc0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000001540)={0x8, 0x6, 0x8001, 0x6}) (async) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000001580)={0x0, 0x0, "24dfe9e76ed0320557255b29d11e4e22"}) (async) syz_emit_vhci(&(0x7f00000015c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x7}}}}, 0xf) (async) r2 = socket(0x9, 0x80000, 0x3) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001640), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x54, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc9}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000001800)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xff, 0xc9, 0xa8, 0x3, 0xc543}}}, 0xb) (async) syz_emit_vhci(&(0x7f0000001840)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000001880)={0x0, 0x0, 0x0, @raw}) (async) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000001900), &(0x7f0000001940)={0x0, 0xfb, 0x1f, 0x4, 0x90, "af8b3ed7b7634fe834daa7568770db8e", "1d8d2e6130d21355c7c1"}, 0x1f, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001980)) (async) mkdirat(0xffffffffffffffff, &(0x7f00000019c0)='./file0\x00', 0x23) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x40) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b80), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000001bc0)) (async) r9 = syz_open_dev$hiddev(&(0x7f0000001c80), 0x401, 0x2) ioctl$HIDIOCGFIELDINFO(r9, 0xc038480a, &(0x7f0000001cc0)={0x3, 0x100, 0x0, 0x72, 0x3ff, 0x8001, 0x53, 0x6, 0x0, 0xb516, 0x2, 0x3, 0x4, 0x2}) 2m10.802335827s ago: executing program 41 (id=2445): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000002c0)=r9, 0x4) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r12, r10, &(0x7f00000000c0)=0x58, 0x5) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r13, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001a00010026bd70010d0000000200200dcd0d6e7deceacdae6d7ed610c6d0a81859145d141e764c3b1d25316469d58d2c7f803d0fafa2d96f5b54e9b13c9ed72f0af551a122bb475e57b3d609f5c1aaa162471e7ef86f45a5c83653772d418d8ce9313fdafd2c477e860ac0ef9c05483ccf5e50e35519bd64c950f9474af0b67a8692", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc0200"/24], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 2m3.143213225s ago: executing program 42 (id=2506): ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) (async) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000000)=0x3) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f00000000c0)={0x2, 0xb50e, 0xf5, 0x0, 0x1400, 0x7, 0x0, &(0x7f0000000040)=[{0x9, 0x101, 0x5}, {0x9, 0xfe, 0x9}, {0x12, 0x101, 0x5}, {0x2, 0x1ff, 0x2}, {0x1a, 0x1ff, 0xd}, {0x2, 0xfe, 0x7}, {0xffffffff, 0x1ff, 0x5}]}) (async) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000100)) r0 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000000340)=""/172, 0xac}], 0x3, &(0x7f0000000440)=""/125, 0x7d}, 0x180) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "287fc1de261e58ac1250d8be7937588e"}) (async) r1 = syz_open_dev$ndb(&(0x7f0000001500), 0x0, 0xfc0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000001540)={0x8, 0x6, 0x8001, 0x6}) (async) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000001580)={0x0, 0x0, "24dfe9e76ed0320557255b29d11e4e22"}) (async) syz_emit_vhci(&(0x7f00000015c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x7}}}}, 0xf) (async) r2 = socket(0x9, 0x80000, 0x3) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001640), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x54, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc9}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000001800)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xff, 0xc9, 0xa8, 0x3, 0xc543}}}, 0xb) (async) syz_emit_vhci(&(0x7f0000001840)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000001880)={0x0, 0x0, 0x0, @raw}) (async) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000001900), &(0x7f0000001940)={0x0, 0xfb, 0x1f, 0x4, 0x90, "af8b3ed7b7634fe834daa7568770db8e", "1d8d2e6130d21355c7c1"}, 0x1f, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001980)) (async) mkdirat(0xffffffffffffffff, &(0x7f00000019c0)='./file0\x00', 0x23) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x40) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b80), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000001bc0)) (async) r9 = syz_open_dev$hiddev(&(0x7f0000001c80), 0x401, 0x2) ioctl$HIDIOCGFIELDINFO(r9, 0xc038480a, &(0x7f0000001cc0)={0x3, 0x100, 0x0, 0x72, 0x3ff, 0x8001, 0x53, 0x6, 0x0, 0xb516, 0x2, 0x3, 0x4, 0x2}) 1m25.320656124s ago: executing program 1 (id=2838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 1m25.15637073s ago: executing program 1 (id=2839): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x140d, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400005c}, 0x4000080) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xef}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048851}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r9, 0x1, 0x70bd23, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x224, r4, 0xc00, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}], @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xf}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xf0cc5bb55117b951}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SAE_PASSWORD={0xb, 0x115, "e81a5a36112f34"}]]}, 0x224}}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r3, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m24.579226732s ago: executing program 1 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140090003010e04060d070b00100005030984fc250300e41e3c04"], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setns(0xc9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300"/18, @ANYRES32=r9, @ANYBLOB="1e009400100001c34ea93e0000000002000500170000000600faffffff0f000004003400"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r11, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r11, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x3ff}}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1m23.603817673s ago: executing program 1 (id=2856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000002a40)=0xd3a0, 0x4) (async, rerun: 64) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) (rerun: 64) writev(r2, &(0x7f0000006380)=[{&(0x7f0000007480)="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", 0x63b}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x80, 0x9, [0x4, 0x2, 0x10, 0xa, 0x3ff, 0x2, 0x200, 0x10, 0x9]}, &(0x7f0000000180)=0x1a) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000001c0)={r5, 0xfffc, 0x10, 0x7, 0xfffffffffffffff8}, &(0x7f0000000240)=0x18) (async) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x1, {0x1, 0x1}, {0x1, 0x1, 0x4}, 0x2}, {0x2, 0x0, {0x1}, {0x0, 0xf}, 0x2, 0x1}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m23.301001535s ago: executing program 1 (id=2859): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0xfa, 0xffffffffdfffe7ff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/241, 0xf1}], 0x1}, 0x2df7}], 0x1, 0x12001, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) write(r0, 0x0, 0x0) recvfrom$llc(r3, &(0x7f0000000480)=""/214, 0xd6, 0x41, &(0x7f0000000580)={0x1a, 0x339, 0x40, 0x4, 0x4, 0x10}, 0x10) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x100) socket$inet_sctp(0x2, 0x7, 0x84) 1m22.135851128s ago: executing program 1 (id=2870): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000020800450000380000000000019078ac1e0001ac1414aa04009078e00000e04500030000000000000064ed0dbc4bb3354097e94456699f000002000000ac1414aa341517c1b7df60c769723e6ace4fb60484cb830590d34627636b1dc9e8664e8787a2"], 0x0) 53.09240321s ago: executing program 43 (id=2870): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000020800450000380000000000019078ac1e0001ac1414aa04009078e00000e04500030000000000000064ed0dbc4bb3354097e94456699f000002000000ac1414aa341517c1b7df60c769723e6ace4fb60484cb830590d34627636b1dc9e8664e8787a2"], 0x0) 38.408689346s ago: executing program 5 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) setuid(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08007bee0b00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x101100, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x80049370, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 38.31157094s ago: executing program 5 (id=3025): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x283, &(0x7f00000005c0), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 37.532366162s ago: executing program 5 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) setuid(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08007bee0b00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x101100, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x80049370, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 37.421100682s ago: executing program 5 (id=3035): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000033000/0x1000)=nil}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000037000701f3ff05000000df25017c00000800048077410424"], 0x1c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x8050) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8185, 0x134000, 0x800, 0x0, 0x1}, 0x20) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 36.882273671s ago: executing program 5 (id=3041): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1002000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) ioctl$FIONCLEX(r1, 0x5450) 36.771477955s ago: executing program 5 (id=3042): close(0x3) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x77, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0x70000, 0x40600}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x77, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0x70000, 0x40600}) setns(0xc9, 0x0) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@deltclass={0x4d4, 0x29, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {0xd, 0xfff3}, {0xd4dbc7717ea2ab48, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x400}}, @TCA_HFSC_USC={0x10, 0x3, {0x2b, 0x4, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x458, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x1, 0xad0, 0x2, 0x8, 0x8}, {0xa8, 0x0, 0x0, 0x7, 0x8, 0x3}, 0x6, 0x400, 0x1ff, 0x0, 0x9}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffff0}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0xa, 0x10, 0x10, 0x8, 0x19a4, 0x1, 0x8, 0x800, 0x7, 0x3, 0x7, 0xffff, 0x8, 0x5, 0x3800, 0x3, 0x7, 0x3, 0x4, 0x6, 0x80000001, 0x2, 0xc1400000, 0x7, 0x8, 0xd, 0x8, 0x2, 0xffff8b4e, 0x7, 0x7, 0x7, 0x9, 0x1, 0x703, 0x1, 0x3, 0x0, 0x200, 0x401, 0x4, 0x116, 0x0, 0x80000001, 0x8001, 0x149, 0x5, 0x6, 0x80, 0xfffffff9, 0xb4a7, 0x9, 0x3, 0x7, 0x1, 0x6, 0x8, 0x7, 0x80000000, 0x80000000, 0xf, 0x9, 0x8, 0x25ce, 0x8, 0x5, 0x4, 0x7f, 0x5, 0x2d4, 0x3, 0x6, 0x35, 0x1, 0x3, 0x7fff, 0xfffffffb, 0x6, 0x5568, 0x1, 0xb, 0x39e, 0x3, 0x400, 0x2, 0x8, 0x8, 0x0, 0x6, 0x1ff, 0x9, 0x5, 0x80000000, 0xbeffd19, 0x9, 0x2, 0x0, 0xf7, 0x8, 0x401, 0x0, 0x8, 0x1, 0x0, 0xc436, 0x5, 0x7fff, 0x1, 0x17, 0x7, 0x401, 0x0, 0x4, 0x0, 0x1, 0xfc000000, 0x8, 0x7, 0x1, 0x7ff, 0x7fff, 0xd, 0x40, 0x5, 0x7, 0xfffffff8, 0x6, 0x9, 0x4, 0x40, 0x7, 0x0, 0xb, 0x2, 0x6, 0xed, 0x6, 0x101, 0x80000000, 0x2f628, 0x9, 0x7, 0x6, 0xb, 0x5, 0x3ff, 0xd, 0x3, 0x7f, 0x4, 0x8, 0x2, 0x9, 0x80000000, 0x7, 0x7, 0x5, 0x4, 0xfffffc01, 0x1, 0x9, 0xfffffbff, 0x2, 0x9ff6, 0x0, 0x0, 0x461, 0x10000, 0x0, 0xfffffffb, 0x0, 0x80000000, 0x7, 0x7, 0x8001, 0x200, 0x1, 0x10000, 0x8, 0x8000, 0x6, 0x4, 0x72, 0x7f, 0x800, 0x9, 0x5, 0x4, 0xfffffff6, 0x0, 0x8, 0x6, 0xffff, 0x9, 0x4, 0xd1fc, 0x3, 0x2, 0xfffffff6, 0x7, 0x401, 0x80000000, 0x7, 0x14, 0x3, 0x6, 0x3, 0x1, 0x5, 0xe, 0x2257a0c7, 0x400, 0x6, 0x3ff, 0x9e, 0x1, 0x8, 0x4, 0x9, 0x4, 0x0, 0x80000001, 0x10000, 0x8632, 0x1c8, 0x0, 0xff, 0x80c2, 0x3, 0x4, 0x8, 0xdfb, 0x0, 0x3, 0x2998, 0x2, 0x6, 0x16, 0x9, 0x6, 0xff, 0x401, 0x7, 0x7fffffff, 0x16, 0x4, 0x3, 0x2, 0xffffff91, 0x0, 0x10, 0x4, 0xf, 0x0, 0x8273]}]}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4d4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2804}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2804}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x8, 0xff, 0xff, 0x1, '\x00', 0x0, 0x5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x8, 0xff, 0xff, 0x1, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) lchown(0x0, 0x0, 0x0) (async) lchown(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0c9aaaca07000f5cf7f25dd0920a48b9"], 0x22) (async) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0c9aaaca07000f5cf7f25dd0920a48b9"], 0x22) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x2d, 0x26, 0x13, 0x4, 0x3, 0x100, 0x4, 0x1d, 0xffffffffffffffff}}) (async) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x2d, 0x26, 0x13, 0x4, 0x3, 0x100, 0x4, 0x1d, 0xffffffffffffffff}}) 21.58303056s ago: executing program 44 (id=3042): close(0x3) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x77, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0x70000, 0x40600}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x77, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0x70000, 0x40600}) setns(0xc9, 0x0) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@deltclass={0x4d4, 0x29, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {0xd, 0xfff3}, {0xd4dbc7717ea2ab48, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x400}}, @TCA_HFSC_USC={0x10, 0x3, {0x2b, 0x4, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x458, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x1, 0xad0, 0x2, 0x8, 0x8}, {0xa8, 0x0, 0x0, 0x7, 0x8, 0x3}, 0x6, 0x400, 0x1ff, 0x0, 0x9}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffff0}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0xa, 0x10, 0x10, 0x8, 0x19a4, 0x1, 0x8, 0x800, 0x7, 0x3, 0x7, 0xffff, 0x8, 0x5, 0x3800, 0x3, 0x7, 0x3, 0x4, 0x6, 0x80000001, 0x2, 0xc1400000, 0x7, 0x8, 0xd, 0x8, 0x2, 0xffff8b4e, 0x7, 0x7, 0x7, 0x9, 0x1, 0x703, 0x1, 0x3, 0x0, 0x200, 0x401, 0x4, 0x116, 0x0, 0x80000001, 0x8001, 0x149, 0x5, 0x6, 0x80, 0xfffffff9, 0xb4a7, 0x9, 0x3, 0x7, 0x1, 0x6, 0x8, 0x7, 0x80000000, 0x80000000, 0xf, 0x9, 0x8, 0x25ce, 0x8, 0x5, 0x4, 0x7f, 0x5, 0x2d4, 0x3, 0x6, 0x35, 0x1, 0x3, 0x7fff, 0xfffffffb, 0x6, 0x5568, 0x1, 0xb, 0x39e, 0x3, 0x400, 0x2, 0x8, 0x8, 0x0, 0x6, 0x1ff, 0x9, 0x5, 0x80000000, 0xbeffd19, 0x9, 0x2, 0x0, 0xf7, 0x8, 0x401, 0x0, 0x8, 0x1, 0x0, 0xc436, 0x5, 0x7fff, 0x1, 0x17, 0x7, 0x401, 0x0, 0x4, 0x0, 0x1, 0xfc000000, 0x8, 0x7, 0x1, 0x7ff, 0x7fff, 0xd, 0x40, 0x5, 0x7, 0xfffffff8, 0x6, 0x9, 0x4, 0x40, 0x7, 0x0, 0xb, 0x2, 0x6, 0xed, 0x6, 0x101, 0x80000000, 0x2f628, 0x9, 0x7, 0x6, 0xb, 0x5, 0x3ff, 0xd, 0x3, 0x7f, 0x4, 0x8, 0x2, 0x9, 0x80000000, 0x7, 0x7, 0x5, 0x4, 0xfffffc01, 0x1, 0x9, 0xfffffbff, 0x2, 0x9ff6, 0x0, 0x0, 0x461, 0x10000, 0x0, 0xfffffffb, 0x0, 0x80000000, 0x7, 0x7, 0x8001, 0x200, 0x1, 0x10000, 0x8, 0x8000, 0x6, 0x4, 0x72, 0x7f, 0x800, 0x9, 0x5, 0x4, 0xfffffff6, 0x0, 0x8, 0x6, 0xffff, 0x9, 0x4, 0xd1fc, 0x3, 0x2, 0xfffffff6, 0x7, 0x401, 0x80000000, 0x7, 0x14, 0x3, 0x6, 0x3, 0x1, 0x5, 0xe, 0x2257a0c7, 0x400, 0x6, 0x3ff, 0x9e, 0x1, 0x8, 0x4, 0x9, 0x4, 0x0, 0x80000001, 0x10000, 0x8632, 0x1c8, 0x0, 0xff, 0x80c2, 0x3, 0x4, 0x8, 0xdfb, 0x0, 0x3, 0x2998, 0x2, 0x6, 0x16, 0x9, 0x6, 0xff, 0x401, 0x7, 0x7fffffff, 0x16, 0x4, 0x3, 0x2, 0xffffff91, 0x0, 0x10, 0x4, 0xf, 0x0, 0x8273]}]}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4d4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2804}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2804}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x8, 0xff, 0xff, 0x1, '\x00', 0x0, 0x5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x8, 0xff, 0xff, 0x1, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) lchown(0x0, 0x0, 0x0) (async) lchown(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0c9aaaca07000f5cf7f25dd0920a48b9"], 0x22) (async) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0c9aaaca07000f5cf7f25dd0920a48b9"], 0x22) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x2d, 0x26, 0x13, 0x4, 0x3, 0x100, 0x4, 0x1d, 0xffffffffffffffff}}) (async) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x2d, 0x26, 0x13, 0x4, 0x3, 0x100, 0x4, 0x1d, 0xffffffffffffffff}}) 4.370292552s ago: executing program 7 (id=3162): socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 4.272532658s ago: executing program 7 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 4.20076138s ago: executing program 7 (id=3165): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r1 = dup(r0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300000000"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008850}, 0x4040014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) (async) dup(r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300000000"], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008850}, 0x4040014) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async) 4.076109829s ago: executing program 7 (id=3169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c0099"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount(0x0, &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) (async) recvmsg$can_j1939(r2, &(0x7f0000001380)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/252, 0xfc}, 0x2302) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='measure uid>1', 0xd) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = fsmount(r4, 0x1, 0x4) fchdir(r9) write$usbip_server(r9, &(0x7f00000013c0)=@ret_submit={{0x3, 0x6, 0x0, 0x0, 0x4}, 0x1, 0x0, 0x7, 0x29d, 0x6, 0x0, "", [{0x6, 0x4, 0x5, 0x101}, {0x3, 0x40, 0x7, 0x7fff}, {0x21, 0x3, 0x10001, 0xe56d4000}, {0x5, 0x4, 0x7, 0x6}, {0x500000, 0x9, 0x7f, 0x3}, {0x1, 0x8000, 0x2, 0x4d}, {0x180f, 0x2, 0x0, 0x80}, {0xfff, 0x51, 0x8, 0x200}, {0x7, 0x2, 0x49, 0x8001}, {0x5, 0x3e5, 0x3, 0x6}, {0x4, 0x7fff, 0xf, 0xa39}, {0x5, 0xf0, 0x1, 0xc}, {0x101, 0xffff8001, 0x81, 0x80ed}, {0x80, 0xffff317f, 0x0, 0x7f}, {0x8, 0x862, 0x8, 0x4}, {0x82, 0x8000, 0x4, 0x6}, {0x0, 0x2}, {0xfffffffa, 0x4, 0x6, 0x9}, {0x6, 0x7, 0x3, 0x6a}, {0x29, 0x0, 0x5, 0x1000}, {0x2, 0x0, 0x0, 0x9ed9}, {0xa3, 0x2, 0x7, 0x2}, {0xf, 0x7fffffff, 0x8, 0x7}, {0x454, 0x81, 0xe, 0x2}, {0x10000, 0x4, 0x4, 0x7}, {0x1ff, 0x7, 0x81, 0xffffffff}, {0x3, 0x4, 0x5cf, 0x2}, {0x4, 0x0, 0x1}, {0x6d4, 0x6be7c79a, 0xa4a, 0x8}, {0x2, 0x6, 0x206a4870, 0x100}, {0x8, 0x8, 0x3, 0x3}, {0x401, 0x8001, 0x5, 0xce}, {0xc2, 0xa0000000, 0x4, 0x7fff}, {0x1, 0x6, 0x7f, 0x7}, {0x2, 0x6, 0x9}, {0x7, 0x80000001, 0x8001, 0x7f}, {0x3747, 0x7, 0x101, 0x8}, {0x9, 0x401, 0x3ff, 0xa31}, {0x9, 0x80000000, 0xcf, 0x8}, {0xf, 0x6, 0x0, 0xa96}, {0xb, 0xbcd, 0xc, 0x5}, {0x6, 0x10000, 0x9, 0x3}, {0x7f, 0x37b, 0x6, 0x3}, {0xac, 0x1ff, 0x3, 0x100}, {0xbde, 0x1, 0x1, 0x2}, {0x8d, 0x8001, 0x800, 0x4}, {0x1, 0x7, 0x401, 0x4}, {0x9, 0x1, 0x6, 0x7fff}, {0x3, 0x7, 0x1, 0x8001}, {0x400, 0x1, 0xd, 0x5}, {0x0, 0xfffffff8, 0xf01b, 0x9}, {0x0, 0xfffffffc, 0x6, 0x657d}, {0xc1, 0x7fffffff, 0xe5, 0x2e}, {0x8, 0x1ff, 0x8, 0x2000}, {0xe52, 0x7, 0x4cb, 0x8000}, {0x9, 0xc09a, 0xfffffffd, 0x7ff}, {0xffffffff, 0x10, 0xe, 0x8}, {0x7fffffff, 0x3, 0x2, 0x5}, {0xe7d, 0xfff, 0x4, 0xc16b}, {0xffffff75, 0x1, 0x0, 0x7}, {0xb, 0x0, 0x7, 0xeb7}, {0x8, 0x2000, 0x1, 0x3ff}, {0x5, 0x7ff, 0x1, 0x8}, {0x1, 0x1, 0xc53, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0xeaf, 0x4, 0x2, 0x9}, {0xd, 0x80000000, 0x8, 0x9}, {0xfffffff5, 0x100, 0xd, 0x7}, {0x6, 0x5, 0x4, 0x101}, {0x8, 0x21, 0x7fffffff, 0x7}, {0x5, 0x3ff, 0x9b, 0x10}, {0x10001, 0x7ff, 0x5, 0x401}, {0x80, 0x4, 0x1f}, {0x7fff, 0x7, 0x5, 0x7}, {0x0, 0xfffeffff, 0x7fffffff, 0x2}, {0x6, 0x0, 0x8, 0x9}, {0x4, 0x8, 0x4, 0x2}, {0x2, 0x3, 0x73800}, {0x6, 0x3, 0x6}, {0x6, 0x669, 0xc7ce, 0x8}, {0x7fffffff, 0x226a547b, 0x3}, {0xad9c, 0x6, 0x8, 0x56b09489}, {0x800, 0xc6, 0x9, 0xaf}, {0xb2, 0x8001, 0x9}, {0x1, 0x9, 0x8, 0xa}, {0x80, 0x6, 0x62, 0x6}, {0x5, 0x8f1, 0x2}, {0x9, 0x0, 0x9, 0xffffff00}, {0x3, 0x0, 0x9, 0x9}, {0x4, 0x6, 0x7f, 0x8}, {0x8, 0x9, 0x8bb0, 0x6}, {0x4, 0x7fffffff, 0x4, 0x800}, {0x4, 0xffff, 0x7fffffff, 0x7}, {0x2, 0x7, 0x1, 0x6}, {0x3, 0x0, 0x9, 0x3}, {0x7ff, 0xfffeffff, 0x5, 0x800}, {0x7, 0xffffffff, 0x0, 0x9}, {0x0, 0x7ff, 0xfffffffd}, {0xd, 0x1, 0xfffffffd, 0x960}, {0x7, 0x0, 0x2c49, 0x9}, {0x6, 0x101, 0x9, 0xda5}, {0x5, 0x81, 0x2, 0x81}, {0xd, 0x3, 0xa2c, 0x7}, {0x200, 0x6, 0x4, 0x7}, {0x0, 0x3, 0x30c2, 0x5}, {0x6, 0x2f7a, 0x1, 0x2}, {0x3, 0xf2, 0x3ff, 0x114}, {0x6, 0x5, 0x6, 0xbe5fc908}, {0xb542, 0x10116f54, 0x1}, {0x1, 0x5, 0x8, 0x100000}, {0x30a, 0x7fff, 0x3, 0x80000001}, {0x9, 0x4, 0x1a, 0xb}, {0x7, 0x97, 0x4, 0x6}, {0x3, 0x400, 0x1, 0x7ff}, {0x400, 0x8, 0xfffffff4, 0x10000}, {0x9, 0x8, 0x1, 0x200}, {0x7, 0x1000, 0x7ff, 0x9}, {0x6, 0x3ff, 0x8, 0x13}, {0x1, 0x4, 0x9, 0xdc83}, {0xd, 0x1, 0x1, 0xffffffff}, {0x7363, 0xafb, 0x1ff, 0x6}, {0x0, 0x81, 0x2, 0x7ff}, {0x7, 0x80000000, 0x6, 0x6}, {0x401, 0x19f9, 0xa, 0xffff8001}, {0x2, 0xffffdde2, 0x100, 0x2}, {0x80, 0x80000000, 0x3, 0x6}, {0x9, 0x9, 0x80, 0x3}, {0x7, 0x80, 0x0, 0x6}, {0x800, 0x8, 0xff, 0x200}, {0x4, 0x1, 0xe91e}, {0x100, 0xffffffff, 0x4, 0xc7b1}, {0x7, 0x7, 0x7fff, 0x4}, {0x8, 0x9dd0, 0x3, 0x2}, {0x6, 0x8, 0xf663}, {0x0, 0x8, 0x8f5, 0x2}, {0x6ee, 0x10001, 0x400, 0x3}, {0xd, 0xa5, 0x1, 0xffffffff}, {0xb, 0x5, 0x5}, {0x0, 0x9, 0x294258f8, 0x2}, {0xb, 0x23bf2124, 0x1, 0x1}, {0x66f4, 0x8, 0xb, 0x40}, {0x3, 0x7ff, 0x10000, 0x9}, {0x7, 0x2, 0x80, 0x5}, {0x400, 0x5, 0x1, 0x4}, {0x1, 0x8f, 0x1253, 0x7fff}, {0x1, 0x7f, 0x7ff, 0x6}, {0x8, 0x3, 0x9, 0x6}, {0x8, 0x97d1, 0x5, 0x992a}, {0xaa, 0x7, 0x1, 0x80}, {0x4, 0x6, 0xffff359d, 0xff}, {0xffff, 0x2, 0x3, 0x200}, {0x10, 0x4c, 0x8, 0x100}, {0x10000, 0x5, 0x5, 0x9}, {0xff, 0x7fff, 0x2, 0xfffffffa}, {0x800, 0x7fffffff, 0x620, 0x3}, {0x9, 0x8001, 0xf8b, 0xfffffff8}, {0x1, 0x5, 0x8, 0xffffffff}, {0xe, 0x6, 0x3, 0x7}, {0xffffffff, 0x80000000, 0x3, 0x3}, {0x5, 0x7, 0x40, 0x1}, {0x2, 0x8, 0x800, 0x1ff}, {0x5, 0x28fe50a4, 0x9, 0x1c38}, {0xfffffff8, 0xfffffff9, 0x4, 0x8}, {0x5b, 0x9, 0x2, 0x2}, {0x40, 0x6, 0x1, 0x2af8}, {0x3, 0xb, 0x80}, {0x0, 0x100, 0x6, 0xa32}, {0x3, 0x8001, 0x30, 0x799}, {0x7fff, 0x3, 0x6, 0x8}, {0x3, 0x9, 0xf7fb, 0x1}, {0x61ef8455, 0x1, 0x80000001, 0xffffffa5}, {0x6, 0x8, 0xe, 0xffffffc0}, {0xffffffff, 0x10000, 0xb, 0xb}, {0x4, 0x8, 0x6, 0x1}, {0x9, 0x5, 0x401, 0x3}, {0xc, 0x3, 0x6, 0xba9}, {0x507, 0x3, 0x4, 0x9}, {0x7, 0x0, 0x75d6, 0x9}, {0x4b2, 0x5249ab63, 0x8, 0x5}, {0x102, 0x1, 0xc5, 0x8}, {0x4, 0x2, 0xfffffff7, 0x6}, {0x4, 0x64, 0x9, 0x1}, {0x0, 0x1, 0x27531916, 0x200}, {0x3, 0xd, 0x1, 0x7}, {0x3ff, 0xde, 0x4, 0x3}, {0xffffffff, 0x3, 0x7, 0x7}, {0x1000, 0x2f4, 0x0, 0x7f}, {0x0, 0x4, 0x8, 0xd}, {0x8, 0xfffffff8, 0x0, 0x9}, {0x80000001, 0x1, 0xfffeffff, 0xe10b}, {0x7fffffff, 0x8, 0x9, 0x80000000}, {0x9, 0x25, 0xc5b, 0x4000}, {0x4, 0x400, 0x4, 0x9}, {0x15, 0x3, 0xc, 0x7}, {0x2, 0xff, 0x3, 0x3ef}, {0x7, 0x1c, 0x3aad}, {0x4, 0x7, 0x9, 0x5}, {0x9, 0x8, 0xfffffffd, 0x10}, {0xffffffff, 0x2, 0x7b8, 0x3}, {0x6, 0x2, 0x5, 0x45}, {0x80000001, 0x5, 0x8001, 0x2}, {0x1, 0xa3b, 0x2, 0x4}, {0x3d0200, 0x9, 0x4, 0x3ff}, {0x5, 0x4, 0x3, 0x7ff}, {0x43, 0x10001, 0x5, 0x5}, {0x8, 0x100, 0x1, 0x3}, {0x61f, 0x8, 0x3}, {0x1, 0x1, 0x1, 0xf}, {0xed2b, 0x0, 0x8, 0x7}, {0x163, 0x198, 0x8, 0x3ff}, {0x10000, 0x401, 0x1, 0xb}, {0x9, 0xaf4, 0x2}, {0xbf, 0xffff, 0x1, 0x1}, {0xef, 0x5a3, 0xa, 0x2}, {0x8, 0x5, 0x72, 0x9}, {0x452a989d, 0x0, 0xffffffff, 0x4}, {0x46, 0x7, 0x9, 0x7}, {0x9, 0x2, 0x2, 0x6}, {0xdd03, 0x5, 0x4, 0x5}, {0x6, 0x8e13, 0x5}, {0xffffffff, 0x82d1, 0x3c2, 0x80}, {0x401, 0x4a, 0x6, 0xa}, {0x5, 0xc5, 0x6, 0xfffffffb}, {0x6, 0xc0, 0x0, 0x6}, {0x9, 0x6, 0x800, 0x1}, {0x0, 0x1000, 0x1, 0x9}, {0x80000001, 0x0, 0x5, 0x6}, {0xb922, 0x3, 0x8, 0x4}, {0x80000001, 0x4, 0xa91, 0x9}, {0x1, 0x5, 0x5, 0x3}, {0x0, 0x6, 0x1, 0xf697}, {0x0, 0x7, 0x3, 0x6}, {0x5d7, 0xfffffff9, 0x3, 0x7f}, {0x668, 0x400, 0x1, 0xff}, {0x5, 0x0, 0x4, 0x40}, {0x5, 0x2, 0x7, 0xde1}, {0x2000, 0x6, 0x5, 0x1}, {0x8000, 0x0, 0xead2, 0x6}, {0x3c66d593, 0x7fff, 0x5, 0x9b}, {0x9, 0x8e81, 0x8, 0x2}, {0x3ff, 0xbdba, 0x55a, 0x9}, {0x4, 0x3, 0xc6, 0x8}, {0x7, 0x7, 0x4, 0x7}, {0x3ff, 0x9, 0xc85, 0x6}, {0xfff, 0x2, 0x0, 0x4}, {0x80000000, 0x1000, 0x3, 0x5}, {0x7, 0x100, 0x3, 0x1}, {0x7, 0x8, 0x1}, {0x32, 0x4, 0x4, 0xe5f}, {0x2, 0x80000000, 0xd, 0x5}, {0xe4, 0xffff50f6, 0x50f6, 0x4}, {0xfc, 0x3, 0x3, 0x1}, {0x4, 0x2, 0x9f28b81a, 0x10}, {0x7, 0x56, 0x5, 0x6}, {0x1, 0x0, 0x1, 0x4}, {0xcd, 0x0, 0x9, 0xffffffeb}, {0x3ff, 0x6, 0x5abf, 0x400}, {0x8, 0xa, 0x289, 0x2}, {0x7, 0x800, 0x9, 0x5}, {0x929, 0x10001, 0x40, 0x6}, {0x200, 0x7, 0x9, 0x80000000}, {0x598, 0x80, 0x6, 0xb}, {0xffffffff, 0x5, 0x56, 0x808000}, {0x7ff, 0x2, 0xffff}, {0x9, 0x300000, 0x800, 0x80000000}, {0x5, 0x4, 0x4, 0x6}, {0x0, 0x7, 0xffffffff, 0x8}, {0x5, 0x100, 0x7, 0xde9}, {0x10001, 0x8, 0x80, 0xffffffff}, {0x3, 0x2, 0x2, 0x9e}, {0x6, 0x10, 0x1, 0x9570}, {0x9, 0x4, 0x6}, {0x655d, 0x40, 0xfffffffe, 0x7}, {0xfffffffa, 0x3, 0xe, 0xb8}, {0x1, 0x5, 0x3, 0x7ff}, {0x401, 0x6, 0x2, 0x3}, {0x52, 0x71c, 0x38d45ba, 0x720}, {0x80000000, 0x3, 0x401, 0xe5000}, {0xa, 0x8, 0x2, 0x7}, {0x7, 0xfffffff9, 0x4, 0x8}, {0x0, 0x4, 0x211, 0xfffffff8}, {0x4, 0x6, 0xfffffffc, 0x3}, {0x94, 0x1, 0x28c0, 0x3}, {0x1, 0x0, 0x7, 0x3}, {0x8, 0x1, 0x3, 0x72}, {0xde, 0x6, 0x5, 0xbd}, {0x6, 0x0, 0xc5e, 0x7fffffff}, {0x7f, 0x0, 0x9, 0x4}, {0x4, 0xfffffffb, 0x6, 0x8}, {0x1, 0x2, 0x8001, 0x8}, {0x1, 0x0, 0x7, 0x6}, {0x9bf7, 0x5, 0x3}, {0x5, 0x7fffffff, 0x9266, 0x7f}, {0x8000, 0x1, 0x22ecb4c5, 0x5}, {0x6, 0x2fd5, 0xfffffff7, 0x8}, {0x4, 0x7, 0x1000000, 0x8}, {0x3, 0x3, 0x4, 0xf}, {0x68, 0x1000, 0xffffb696, 0xd9b2}, {0x5a1, 0x4, 0x3ff, 0x7}, {0x7fffffff, 0x10, 0x8001, 0x1}, {0x8, 0x3, 0x0, 0x4}, {0x9, 0x2, 0x3, 0x10000}, {0x1ee33b3a, 0xffffffff, 0x7, 0x9}, {0x7d, 0x10, 0x4, 0x6}, {0xa4a9, 0x0, 0x9, 0x1000}, {0x83a4, 0x225, 0x9, 0x80}, {0x1, 0x4}, {0x3, 0x6, 0x7, 0x6}, {0x5, 0xffffffff, 0x3, 0x7}, {0x0, 0xffffffc4, 0x800, 0x2}, {0x5, 0x2, 0x80000000, 0xffff7fff}, {0x8, 0x9, 0x1}, {0x4, 0x6, 0x0, 0x8}, {0x9, 0x7, 0x6, 0xda58}, {0x9, 0x7f, 0x81, 0x8}, {0x7f, 0x7, 0x0, 0x1}, {0x3e, 0x7, 0xb, 0x4}, {0x0, 0xc, 0x80000001, 0x3}, {0x6573, 0x6, 0xfffffff8}, {0x9, 0x99c, 0x1, 0xe414}, {0x7, 0x3, 0x5, 0x8}, {0xb, 0x9, 0x5, 0xffff6b14}, {0x4, 0x2, 0x80, 0x7}, {0x800, 0x5, 0x10}, {0x800, 0x3, 0x1000, 0x8}, {0xb491, 0x1ff, 0x10000, 0x6}, {0x5, 0x1, 0xfffffffc, 0x5b02eb32}, {0x1, 0xffffffff, 0x0, 0x4}, {0x3, 0x3, 0x7, 0x7}, {0x4000000, 0x80, 0x2, 0x2}, {0x7, 0x4ddf, 0x9, 0x2}, {0x5, 0xbb8a, 0xc678, 0xd514}, {0x6, 0x667dd3a4, 0x7, 0xfffffffc}, {0x4, 0xb, 0x3, 0x8}, {0xd8e5, 0x0, 0x60, 0xa3}, {0xffff0001, 0x9fa, 0x4}, {0xc0cc, 0x1, 0x9, 0x2}, {0xb8e, 0x9, 0x674, 0xd8}, {0xa, 0x35af, 0x4, 0x1}, {0x4, 0x0, 0x7, 0x7}, {0x400, 0x4, 0x3, 0xfffff001}, {0x7, 0x5, 0x3, 0xc}, {0x8000, 0x1, 0x22b, 0x5}, {0xe0, 0x7, 0x6, 0x1}, {0x73, 0x2, 0x8}, {0x316, 0x33, 0x40, 0x4f93}, {0xe, 0x6, 0x4, 0x9}, {0x1, 0x0, 0x4, 0x75}, {0x34c5, 0x2, 0x7, 0xfffffff8}, {0x8000, 0x5, 0x9, 0x80000000}, {0x3, 0x5, 0x40000000, 0x4}, {0x1c, 0x8, 0x1, 0x10001}, {0x3, 0x7, 0x177, 0x1}, {0x2, 0x3, 0x3, 0x80}, {0x9, 0x9, 0x10001, 0x2}, {0x1, 0x7fff, 0x5, 0x8000}, {0xfffffff9, 0x80000000, 0xffffff94, 0x7}, {0xffff, 0x54, 0x7, 0x4}, {0xe04, 0x2e, 0x3, 0xd}, {0x4, 0x40, 0x7eb, 0x10000}, {0x1, 0x2, 0x7, 0x80000000}, {0x3, 0x6, 0xb06, 0x81}, {0x80, 0x2, 0xac9}, {0x9, 0x10000, 0xffff, 0x3}, {0x9f, 0x3, 0x1, 0x2}, {0x1, 0x3, 0x8, 0x3}, {0x81, 0x7fffffff, 0x7, 0x1}, {0x3, 0x2fdc, 0xfffffff6, 0x9}, {0x1000, 0x3, 0x8, 0x5}, {0x5, 0x0, 0x6, 0x65}, {0x7fff, 0x3, 0xa1, 0x80}, {0x0, 0x10001, 0xb}, {0x80000001, 0x7, 0xb1e, 0x4}, {0x7ff, 0xffff722b, 0x562, 0x2a7}, {0x10000, 0x2, 0x6, 0x5}, {0x1, 0x4, 0x4, 0x4}, {0x1, 0xb8, 0x2, 0x80}, {0x8, 0x7, 0x8a2c, 0x6}, {0x2400000, 0x3, 0x10001, 0x1}, {0x7fff, 0x8, 0x7, 0x1}, {0xfffffffc, 0xffffffff, 0x7f, 0x9}, {0x0, 0x3, 0xfff, 0x8d19933}, {0x8, 0x10001, 0x732, 0xf71}, {0x6, 0x1, 0xea7, 0xd}, {0x81, 0xb103, 0x3, 0x1}, {0xb, 0x7f, 0x1, 0x8}, {0x2, 0x669e, 0x8, 0x1ff}, {0x0, 0x8, 0x59c, 0x3}, {0xffffff01, 0x8000, 0x10001, 0x7}, {0x3ec, 0xfffffff8, 0x7, 0x80}, {0x6, 0x1, 0x80, 0x3}, {0x7, 0x4, 0xb481, 0xc44}, {0xfffffffc, 0x2, 0x800, 0x1}, {0x2, 0x80, 0xd1}, {0x80000001, 0x3, 0x7, 0x8}, {0x3, 0x5765, 0x6, 0x9}, {0x401, 0x10001, 0x4}, {0x9, 0x200, 0x6, 0x4}, {0x1, 0x7, 0x2, 0x40}, {0xbd28, 0x1000, 0x70000000, 0x990}, {0x7, 0x5, 0x9, 0xd17d}, {0x80000001, 0x6, 0x4, 0x10}, {0xea, 0x3, 0x81, 0x8}, {0x1, 0x34e, 0x7}, {0x4, 0x4, 0xd7, 0x9}, {0x4, 0x5, 0x4, 0x2}, {0x200, 0x2, 0x100, 0x2}, {0xaa7d, 0x55b, 0x8, 0x3}, {0x97e, 0x0, 0x7, 0x401}, {0x610a, 0x4, 0x9, 0x2}, {0x2e3, 0x3, 0xb1c, 0x2}, {0x9, 0x400, 0x8, 0x6}, {0x3, 0x7, 0xfffffffa, 0x200}, {0x8, 0x400, 0xffff, 0x1}, {0x400, 0x8, 0x4, 0xd}, {0x7, 0x2, 0x400, 0x6}, {0x6, 0xfffff87b, 0x3, 0x8}, {0x7, 0xfffffffe, 0x8, 0x4}, {0x7, 0x3, 0x10, 0x6}, {0x7, 0x5, 0x7, 0x7f}, {0x8, 0x3, 0x10000, 0x7a9c}, {0x4, 0x6, 0x55, 0x400}, {0x7, 0x9, 0xa0, 0xb6}, {0x100, 0x3, 0xffffffff, 0x8}, {0x0, 0x81, 0xe, 0x1}, {0x9, 0x280, 0x401, 0x4}, {0xfffffff9, 0x0, 0x66, 0x4ec9}, {0x7f, 0xfb, 0x1d7, 0x80}, {0x4, 0x7, 0xc718, 0x26}, {0x7fffffff, 0x8, 0x10000, 0x200}, {0xffffffff, 0x7, 0xaa, 0x5}, {0xcb, 0x7, 0x2, 0x4}, {0x7, 0x800, 0x3, 0x3}, {0xffff, 0x9, 0xc52, 0x2}, {0x4, 0x3, 0x8, 0x8}, {0x6, 0x5, 0x4, 0x4}, {0x8, 0x20dcf00a, 0xffff, 0x3}, {0x4, 0x0, 0xffffff70, 0x3}, {0x8, 0x0, 0xef, 0x3}, {0x8, 0x1000, 0x2, 0xc65}, {0x8000, 0x7, 0x1, 0x3}, {0x100, 0x8, 0x7, 0xa6c}, {0x6, 0x6, 0x2, 0x4}, {0x7f, 0x6, 0x745, 0x2}, {0x0, 0x401, 0x0, 0x7}, {0x7, 0x0, 0x248ad6a2, 0x3}, {0x7, 0x0, 0x4, 0xd}, {0x9, 0x3ff, 0x5, 0x9}, {0x10001, 0xada, 0xaf, 0x7}, {0x400, 0x9, 0x9, 0x3b}, {0x0, 0x101, 0x100, 0x1}, {0x7, 0x5, 0x6, 0x7}, {0x3, 0x3, 0x7, 0x3}, {0x0, 0x9, 0xe0, 0x9}, {0x1, 0xd, 0x8}, {0xff2, 0xf, 0x0, 0x6}, {0x0, 0x2, 0x19fc703b, 0x1}, {0x4, 0x7, 0xfffffffc}, {0xffff8000, 0x2, 0x1, 0x1b}, {0xd, 0x0, 0x80000001, 0x5}, {0x0, 0x6, 0x40, 0xeab}, {0x40, 0xfff, 0x2, 0x8000}, {0x9, 0x8, 0x101, 0xd27}, {0x8, 0x1000, 0x6, 0x101}, {0x1, 0x7, 0x5, 0xf3}, {0x0, 0x8, 0x2, 0xaaf}, {0x9, 0x0, 0x1, 0x552}, {0x10001, 0x1, 0x3, 0x534}, {0x8, 0x401, 0xfffffffd, 0x1}, {0x200, 0x7, 0x94, 0x40}, {0x2, 0x2, 0x9d, 0x3}, {0xb, 0xa, 0x1, 0x400}, {0xffffff7f, 0x1000, 0x9, 0x17}, {0xffff, 0x8, 0xfff, 0x1000}, {0x1, 0xfff, 0x7941, 0xb37}, {0xfffffff8, 0x100, 0x0, 0x101}, {0x5, 0x2, 0x5, 0x1d4c0467}, {0xf, 0x3, 0x8, 0x4}, {0x0, 0x2, 0x10000, 0xff}, {0x800, 0x2, 0x81, 0x8}, {0x4, 0x7ff, 0x472c, 0x8}, {0x6, 0x9, 0x7d03, 0xfab}, {0x0, 0x5, 0x2, 0x8000}, {0x1, 0x3ff, 0x2, 0x9}, {0x6, 0x2a9, 0x6, 0xe}, {0x3, 0x9, 0x7fffffff, 0x8000}, {0x4dd0, 0x5, 0xffffffba, 0x1}, {0x3000, 0x8, 0x7, 0x80000001}, {0x0, 0x6, 0xffffffff, 0xb3a}, {0x1, 0xf1, 0x3, 0x6}, {0xbc, 0x3, 0x1, 0xfffffffe}, {0xfff, 0x7, 0x3, 0xbda}, {0x80000000, 0x3f5, 0x9, 0x2}, {0x7, 0x6, 0x3, 0x9}, {0x0, 0x40, 0x5}, {0x0, 0x38df, 0x8, 0xfff}, {0x8, 0x900000, 0x4, 0xa00}, {0x7ff, 0x5, 0xff, 0x8}, {0x6, 0xc7, 0x40, 0x401}, {0xf, 0x2, 0x8, 0x4}, {0x0, 0x6, 0x200, 0x7}, {0x5, 0x8, 0xe17e, 0x5}, {0x5, 0x1, 0x5, 0x9}, {0xd, 0x8, 0xe, 0x9}, {0x40, 0x3, 0x5, 0xffffffff}, {0x8, 0x6, 0x4, 0x7}, {0x8, 0x1000, 0x7f, 0x9}, {0x8000, 0x5, 0x30b7, 0x6}, {0x0, 0x1, 0x1, 0xf735}, {0x8, 0x8, 0x8, 0x1ff}, {0x4, 0x6, 0x405, 0x6}, {0x7f, 0x2, 0xeee8, 0x5}, {0xe7, 0x7, 0x6, 0x40}, {0xbd, 0x7f, 0x10000}, {0x4, 0x5, 0x3}, {0x5, 0x0, 0x4, 0xf245}, {0xf, 0x80, 0x3, 0x400}, {0x6, 0x6, 0x7, 0x40}, {0x4, 0x4, 0x2, 0x8}, {0x8000, 0x5, 0xfffffffd, 0x3}, {0x2, 0x5, 0xfffffbfc, 0x4}, {0x5, 0x1a8, 0x9, 0x9}, {0x808, 0x1, 0x3, 0x1}, {0x3, 0x830, 0x2, 0x4}, {0x8, 0x2, 0x6166, 0x1}, {0x44000000, 0x2, 0x9, 0x9}, {0x8, 0x9, 0x995, 0x8}, {0x7, 0x1, 0x401, 0x4}, {0xe46a, 0x6, 0x6, 0x8}, {0x0, 0x8, 0x4, 0xd41b}, {0x6, 0x40, 0x8, 0x5}, {0x5, 0x7fffffff, 0x2, 0x8}, {0xefd3, 0x7fff, 0x2, 0x2}, {0x3ff, 0xdd8c1d48, 0x9, 0xff}, {0x5, 0x6, 0x8001, 0x10001}, {0xffff, 0xffff, 0x3, 0xb}, {0x4, 0x755, 0x3, 0x1c00}, {0x7, 0x8c2, 0x5, 0x4}, {0xff, 0x8, 0x4, 0xb}, {0xfffffffa, 0x4c, 0x1, 0x6}, {0x6, 0xfff, 0x100, 0x3}, {0x2, 0x1974, 0x9, 0x5}, {0x0, 0x5, 0xfffffffd, 0x5}, {0x0, 0x3, 0x9, 0x4fb}, {0x401, 0xffffffff, 0x6, 0x6}, {0x2000000, 0x3, 0x5, 0x7fffffff}, {0x0, 0x6, 0x380, 0xf}, {0xfffffff8, 0xffff, 0x1, 0x9}, {0xae, 0x3f6, 0x2f3, 0x3c3b}, {0x4c, 0x5, 0x7cc73860, 0x6}, {0x9, 0xff, 0x10000, 0x6}, {0x8, 0x2, 0x6f, 0xc84}, {0xe1d, 0x0, 0xbd0a, 0xfffffff8}, {0xfffffff7, 0x2, 0xf, 0x44e4}, {0x8, 0x7, 0x4, 0x3}, {0x200, 0x2, 0x3, 0x8001}, {0x7fffffff, 0x3, 0x5095, 0x2}, {0x800, 0x2, 0x5, 0x3ff}, {0x8, 0x4, 0x800, 0x6}, {0x80000001, 0x3, 0x2ad, 0x8001}, {0x1, 0xd, 0x58df, 0xffff}, {0x401, 0x400, 0x7f, 0x6}, {0x4, 0x98ae, 0x9, 0x2}, {0x4a9, 0x41a, 0x9, 0x2}, {0x16b, 0x6, 0x1, 0x81}, {0x2091d093, 0xc2, 0xec, 0x9}, {0x7, 0x9, 0x4, 0x8}, {0x6, 0x9, 0x9, 0x7}, {0x6, 0xfffff773, 0x10000, 0x7f}, {0x2, 0x8, 0x2, 0x81}, {0x6, 0xb1, 0x80000000, 0x2}, {0x7, 0x9, 0xa8c, 0x1}, {0x9, 0x1, 0x10000, 0x5}, {0x5d, 0x6, 0x5, 0x5}, {0x40, 0x6, 0x3, 0x3}, {0x9, 0x7, 0xffff0001, 0x10000}, {0x1, 0xfffffffe, 0x10001}, {0x4, 0xaa, 0xfffffffd, 0x3}, {0x5, 0x9, 0x8, 0x80}, {0x0, 0x200, 0x81, 0x5}, {0x7fffffff, 0xfa, 0x0, 0x9}, {0x7f, 0x3, 0x9, 0x2}, {0x6, 0x2, 0x8, 0x7}, {0x7, 0x7, 0xf, 0x2}, {0x3, 0x3ff, 0x0, 0x4}, {0x7, 0x9, 0x1, 0x3}, {0x7, 0x3, 0x1000, 0x1}, {0xb, 0x4, 0xb, 0xb3}, {0x1, 0x1, 0x800, 0x183a}, {0x9, 0x5, 0x5, 0x81}, {0x101, 0x7, 0x8, 0x100}, {0x0, 0x4, 0xa, 0x1}, {0x8, 0x5, 0x0, 0x8}, {0x8, 0x4, 0x4, 0x800}, {0xffff37d2, 0x8000, 0xc065, 0x3}, {0x9, 0x3, 0x8, 0xc61}, {0x0, 0x7, 0x0, 0x37f9}, {0x40, 0xa4, 0x8, 0x7}, {0x2, 0x8, 0x86, 0x80}, {0x81, 0x2, 0xfc50, 0x2}, {0x1, 0x9, 0x2}, {0xbd65, 0x9408, 0x400000, 0xa}, {0x7, 0x8, 0x3, 0xd}, {0x3, 0x80, 0x2, 0x10}, {0x9, 0x7, 0x6, 0x6}, {0x5, 0x9, 0x7, 0x800}, {0x8000, 0x3ff, 0x6, 0x9}, {0x2, 0x100, 0xfffffffc, 0x6}, {0xd6, 0x3, 0x8, 0x7}, {0x5, 0x8, 0x7, 0xc38}, {0x200, 0x400, 0x1, 0x9}, {0x19ce, 0xfffffffd, 0xffff, 0x9}, {0xffffff81, 0x5, 0x6, 0x10}, {0x6, 0xffffff9c, 0x9, 0x1}, {0x61, 0x9, 0xffff, 0x6}, {0x8, 0x1a0, 0xb7, 0x652}, {0xeab, 0x1, 0x4ec2, 0x8}, {0xfffffffd, 0x0, 0xffffffd2, 0x4}, {0x7, 0xfffffffd, 0x1}, {0x0, 0x1, 0x4, 0x6}, {0x49d1ea8b, 0x863, 0x2, 0xf9}, {0x1, 0xffffffff, 0x3, 0x3}, {0x9, 0x3, 0x80, 0x32cc}, {0x1, 0x81, 0xc, 0x1ff}, {0x10, 0x1, 0x3, 0xf0f5}, {0x2, 0x2, 0x80, 0x3}, {0x0, 0x2, 0x100, 0x6}, {0xfffffff9, 0x8, 0x563a3f30, 0x3ff}, {0x862, 0x2, 0xffffffff, 0x8001}, {0x5, 0x4, 0x7fffffff, 0x2}, {0x0, 0x8, 0x4, 0x9}, {0x2, 0x0, 0x0, 0x59f}, {0x8, 0x200, 0x8, 0x6}, {0x9, 0x87be, 0xb83, 0xc2f}, {0x0, 0x3, 0x7, 0x1}, {0x4, 0x1, 0x2, 0x9}, {0x3, 0x5, 0x7fffffff, 0xe15}, {0x7, 0xff, 0x3, 0x1}, {0x8, 0xc18c, 0x7, 0x32b}, {0x10, 0xfffffff7, 0x7, 0x9}, {0x9, 0x0, 0x2, 0x6}, {0xa, 0x5, 0x5, 0xc68}, {0x5, 0x6, 0x80, 0x5}, {0x1, 0x800, 0x8, 0x4}, {0x5, 0x3, 0xa1a4, 0x4bf}, {0x7, 0x1, 0x1, 0x28}, {0xff, 0x1, 0xd, 0xbb}, {0xd, 0x6, 0x2, 0x3}, {0x3, 0x8, 0x7, 0xfffffeff}, {0x1, 0xffffffff, 0x7, 0xffffffff}, {0x800, 0x0, 0x7f, 0xd564}, {0xffff, 0x4, 0x3}, {0x2, 0xcdd2, 0xe, 0x3}, {0x9, 0x3, 0x2a, 0x7ff}, {0x2, 0x9, 0x1ff, 0x8}, {0x200000, 0x8, 0x1, 0x1}, {0x4, 0xfff, 0x7fff, 0x400}, {0x4, 0x1, 0xfa1d, 0x7}, {0xfff, 0xc, 0x8, 0xffff038c}, {0x3, 0x81, 0x745, 0x4}, {0x9, 0xe, 0xffff1e09, 0x8}, {0xbbf9, 0x9, 0xffffffdc, 0x200}, {0x5, 0x8, 0x5, 0x9}, {0x4, 0x9, 0x1, 0x8}, {0x8, 0x3, 0x81, 0x7}, {0x3, 0x81, 0x2, 0xfffffff8}, {0x9, 0xffffffff, 0x7, 0x8}, {0x35, 0x1, 0x3, 0x7}, {0xc264, 0x0, 0x5, 0x5}]}, 0x2a00) 3.299941476s ago: executing program 7 (id=3172): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0xfffffffe, {0x0, 0x10041, 0x2, 0xc, 0x9, 0x2, 0x10003, 0x401, 0x5, 0xa000, 0xfffffffc, r3, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x800, 0xbafd, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff5, 0x9, 0x4, 0x2, 0x6, 0xfffffbff, 0x8000, 0xfff, r3, 0x0, 0x0, 0x2}}, {0x0, 0x1}}}, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) 2.955356774s ago: executing program 3 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) syz_emit_ethernet(0x2e, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)={0x158, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x81}, [@CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x0, 0x4, 0x3, 0x80000000, 0xc, 0x3]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0xf7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x81, 0x8}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008041}, 0x40000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xd) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) close(r1) fcntl$setstatus(r1, 0x4, 0x2c00) write$selinux_create(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x9c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000001040)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57e9f5ec0b21808910000000000e0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pwrite64(r4, &(0x7f0000000140)="cda8759d9c0e5e307f84687af353f746bf8f1e9eb45ff2cc10877008dcba1f3949239327789058798567f848d15f5160e0885250ca9c6160fb01b720f86530c3835b13275983a022985a1837ac221c5bbe07a7f8a1eb1d167ad0109936", 0x5d, 0x4) 2.781752639s ago: executing program 3 (id=3176): r0 = socket(0x2c, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00(\x00\a'], 0x20}}, 0x40080c0) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2\x81\x88\xfe6\x8a\xe5\xd3\xf6O\x1bD\x99Y|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\x06\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\xe1\xc8Q\t\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c', 0x8d3e942cc4010991, 0x14b, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0xfffffffffffffffe, 0x4007, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.548078211s ago: executing program 3 (id=3177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x0) 2.472512864s ago: executing program 3 (id=3178): socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04"], 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 2.392674161s ago: executing program 3 (id=3179): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='bdev\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352', 0x29) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff00000000000000}, 0x50) write(0xffffffffffffffff, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) write(r0, &(0x7f0000000540)="28286d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="957604448a50c992436f514f3283c6a2ff1116dfaa3006fc634aa857e3ce"], 0x3c}}, 0x0) 1.967774956s ago: executing program 4 (id=3181): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async, rerun: 32) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x0, 0xfdb7, 0x100000, 0x9, {}, {0x4, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x6, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) (async) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) write$make_it_fail(r3, &(0x7f0000000000)='1\x00', 0x2) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fdfffffffbdbdf2500001d0000000001e01b760fa37b46d4d02ced36011eb25adcf46e2a87e4c86e9aa287fad78c247beb773ab19e4f763fb9d28a6bbb291e91d9debf8a7a43"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) r4 = socket(0x11, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r5}, 0x38) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x10, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x81}, @jumbo={0xc2, 0x4, 0x9}]}]}}}}}, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000400)=@req3={0x6f, 0x3ff, 0x5, 0x8, 0x0, 0x6, 0x1000}, 0x1c) 811.075433ms ago: executing program 3 (id=3182): socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000032840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "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"}, 0x10154) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x100, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='wchan\x00') pread64(r2, &(0x7f0000019200)=""/102398, 0x18ffe, 0x1000000000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 755.506684ms ago: executing program 8 (id=3058): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x4) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x1, 0xb}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf0000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') 661.994623ms ago: executing program 4 (id=3183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) ioctl(r0, 0x3d, &(0x7f0000000000)="f851d639200ec958bf7c91") (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x7, &(0x7f0000000100)=[{0x25, '\x00', @st={0x4, [{0x1, @uvalue=0x400}, {0x2, @svalue=0x6fe6}, {0x1, @uvalue=0x2}, {0x1, @uvalue=0x400}]}, 0xb}, {0x27, '\x00', @data=0x6, 0x5}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) 570.887311ms ago: executing program 4 (id=3184): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000001}]}, 0x34}}, 0x4044) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) (async, rerun: 32) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async, rerun: 32) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (rerun: 32) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x171) (async) close(r3) (async) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) (async) r5 = gettid() fcntl$setown(r3, 0x8, r5) (async) fcntl$setsig(r3, 0xa, 0x22) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) rmdir(&(0x7f0000000100)='./control\x00') r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x9, 0x71eb72db, 0x0, @rand_addr=' \x01\x00', @private2, 0x80, 0x7, 0x7, 0x4}}) (rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @multicast1}, &(0x7f0000000340)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x505c3e39a3e1713e, &(0x7f0000000380)={@local, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80510011}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x158, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x158}}, 0x200408c0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000002010101000000000000000003720003080003400000200008001a4000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 362.645576ms ago: executing program 4 (id=3185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 283.070475ms ago: executing program 8 (id=3186): socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04"], 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 241.580501ms ago: executing program 4 (id=3187): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005ac000/0x400000)=nil) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, &(0x7f0000001ec0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c9c102cab2d0f86fde300a06082a8648ce3d040301751892a6eb270cf3a2900b04030c2f4367727469666963617465207665726966696307000000000000004453412073656c662d74657374696e67206b65593020170d32343034313a29323136323652180f32313201003332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206bfbddb6dcf2e8a8d32a8648ce3d020106082a8648ce3d0301070342000407e56b51af412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d072e181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b3073062900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8668ce3d044002034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75dd36754a0e8c9cb4046df2b7cf90d88dd57e97a26eed56cc62be63331c84d385fac70f817aed2dccb28e19059318c006cbbd0e163ab305ba5dd0dc4e67f8d4811c8a2abe3542998c7c6bbc1035d247117cc16b89df93a4229ad682a88080322785be53a7809104c1904040000c8ab69ad95cf0bea035c90a38d6c6abdbde0bc64655092eb0c8949fc6a7b961afe0c65f6aaa8929849545c2ca0ac74f094dcb9cd214ec08154ea94ed550aa56bc5979bebde5907d2b46859e041754e1394cb2a0da8d1af2b50438f9e8548dd266075594c90e665ec90ecaaa639167294011105d0c2c6251b39568beffd4169afe4c6a1e749d78053b4", 0x2c5, 0xfffffffffffffffd) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r6, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r7, 0x80140912, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0xb, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 152.023895ms ago: executing program 8 (id=3188): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x12}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}}) ioctl$COMEDI_POLL(r0, 0x640f) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000006000400000a00002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e00000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fd8c00000000000002000000000000080000000000000000000000000000001844000500ac141424000000000000000000000000000000003c000000000000c88f5d49000000000000000000000000000000000102000000040100000200"/184], 0xfc}}, 0x40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe8000000000000000000000b802b41800000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000050001100ac1414240000000000000000000000000a010100000000000000000000000000fc020000000000000000000000000001ac1414bb0000000000000000000000003c040000020000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0x10000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x8118, 0x4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) r11 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCCONS(r11, 0x541d) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r9, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@any, 0x6}, 0x400, "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"}, 0x418}) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r12, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 82.668844ms ago: executing program 4 (id=3189): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x2, 0x80001, 0xbf22, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1, 0x4000}, 0x50) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x30000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x0, 0x7, 0x0, 0x8, 0x9, 0x7}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0x41000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0x0, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=3190): mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) select(0x40, &(0x7f0000000080)={0x8, 0x8000, 0x2, 0x7, 0x3, 0x9, 0xb8e, 0x101}, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x6611, 0x0) io_setup(0x30, &(0x7f0000000400)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002640)={{0x1, 0x1, 0x18, r0, {0x4}}, './myproc\x00'}) io_submit(r4, 0x2, &(0x7f00000026c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r2, 0x0}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x7, 0x3ff, r5, &(0x7f0000001640)="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", 0x1000, 0x2, 0x0, 0x2, r6}]) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='\"end', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0\x00', 0x621a83, 0x0) write(r8, &(0x7f0000000140)='0', 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): { setopt } for pid=16034 comm="syz.5.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 406.001337][ T42] audit: type=1400 audit(1787848088.337:15842): avc: denied { prog_load } for pid=16034 comm="syz.5.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.022206][ T42] audit: type=1400 audit(1787848088.337:15843): avc: denied { bpf } for pid=16034 comm="syz.5.2611" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.043220][ T42] audit: type=1400 audit(1787848088.337:15844): avc: denied { perfmon } for pid=16034 comm="syz.5.2611" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.054013][ T42] audit: type=1400 audit(1787848088.347:15845): avc: denied { search } for pid=16035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.360926][T16054] serio: Serial port ptm0 [ 406.371953][ T850] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 406.521785][ T850] usb 10-1: device descriptor read/64, error -71 [ 406.701440][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 406.771713][ T850] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 406.862303][ T24] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 406.876695][ T24] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 11 [ 406.887576][ T24] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 17408, setting to 1024 [ 406.891185][T16068] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 406.901175][ T850] usb 10-1: device descriptor read/64, error -71 [ 406.903699][ T24] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 11 [ 406.918991][ T24] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 17408, setting to 1024 [ 406.943696][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.951217][ T24] usb 8-1: Product: syz [ 406.953006][ T24] usb 8-1: Manufacturer: syz [ 406.956764][ T24] usb 8-1: SerialNumber: syz [ 406.970771][ T24] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 407.015643][ T850] usb usb10-port1: attempt power cycle [ 407.017404][T16074] Cannot find add_set index 0 as target [ 407.018610][ T24] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 407.026965][T16073] ptrace attach of "/syz-executor exec"[15805] was attempted by ""[16073] [ 407.041552][T16074] Cannot find add_set index 0 as target [ 407.048301][T16074] Cannot find add_set index 0 as target [ 407.053607][T16074] Cannot find add_set index 0 as target [ 407.058125][T16074] Cannot find add_set index 0 as target [ 407.066711][T16074] Cannot find add_set index 0 as target [ 407.080382][ T24] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 407.240640][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 407.244850][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 407.247340][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 407.249864][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 407.252599][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 407.255605][ T24] usb 8-1: USB disconnect, device number 17 [ 407.258343][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 407.258391][ C2] usb 8-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 407.274922][T16060] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -71 [ 407.340354][T16060] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -19 [ 407.373168][T16060] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -19 [ 407.376385][ T850] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 407.392098][T16060] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -19 [ 407.439761][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 407.442281][ T850] usb 10-1: device descriptor read/8, error -71 [ 407.459489][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 407.473458][ T24] ti_usb_3410_5052 8-1:2.0: device disconnected [ 407.595689][T16087] IPVS: ip_vs_add_dest(): server weight less than zero [ 407.598800][ T1162] IPVS: starting estimator thread 0... [ 407.691675][T12796] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.711214][ T850] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 407.724893][T16088] IPVS: using max 28 ests per chain, 67200 per kthread [ 407.743310][ T850] usb 10-1: device descriptor read/8, error -71 [ 407.880620][ T850] usb usb10-port1: unable to enumerate USB device [ 408.006939][T16101] Bluetooth: hci0: unsupported parameter 256 [ 408.023558][T16101] Bluetooth: hci0: invalid len left 4, exp >= 7 [ 408.212818][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 408.263384][T16110] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.305651][T16110] bridge_slave_1 (unregistering): left allmulticast mode [ 408.316825][T16110] bridge_slave_1 (unregistering): left promiscuous mode [ 408.333972][T16110] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.002575][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 409.014642][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'. [ 409.332147][ T24] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 409.342966][T16134] syzkaller0: entered promiscuous mode [ 409.345950][T16134] syzkaller0: entered allmulticast mode [ 409.378695][T16137] wlan0 speed is unknown, defaulting to 1000 [ 409.502932][ T24] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 409.538823][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.549127][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.561202][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.572478][ T24] usb 10-1: config 0 descriptor?? [ 409.915613][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.953379][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.004768][ T24] hid_parser_main: 6 callbacks suppressed [ 410.004791][ T24] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 410.035071][ T24] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 410.076811][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.000F/input/input42 [ 410.151230][ T1347] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 410.242697][ T24] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 410.262951][T16167] tipc: Can't bind to reserved service type 0 [ 410.334112][ T1347] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 410.355006][ T1347] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.368885][ T1347] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 410.379257][T16171] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 410.380915][ T1347] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 410.392844][ T1347] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 410.415710][ T1347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.487219][T16155] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 410.495884][T16155] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 410.504525][ T1347] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 410.514218][ T1347] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 410.523119][ T1347] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 410.529905][ T1347] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 410.537998][ T1347] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 410.545770][ T1347] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 410.556646][ T1347] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 410.601759][T16133] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 410.605495][T16174] dummy0: entered allmulticast mode [ 410.608593][ T41] usb 10-1: USB disconnect, device number 17 [ 410.738550][T16155] bridge0: port 3(vlan2) entered blocking state [ 410.742373][T16155] bridge0: port 3(vlan2) entered disabled state [ 410.748111][T16155] vlan2: entered allmulticast mode [ 410.759653][T16155] geneve0: entered allmulticast mode [ 410.779279][T16155] vlan2: entered promiscuous mode [ 410.785761][T16155] geneve0: entered promiscuous mode [ 410.789649][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.834195][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.866151][ T42] kauditd_printk_skb: 186 callbacks suppressed [ 410.866173][ T42] audit: type=1400 audit(1787848093.257:16032): avc: denied { create } for pid=16153 comm="syz.4.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.868999][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.874932][ T42] audit: type=1400 audit(1787848093.257:16033): avc: denied { setopt } for pid=16153 comm="syz.4.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.907333][ T42] audit: type=1400 audit(1787848093.257:16034): avc: denied { write } for pid=16153 comm="syz.4.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.930038][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.938937][ T42] audit: type=1400 audit(1787848093.337:16035): avc: denied { create } for pid=16181 comm="syz.1.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 410.965211][ T42] audit: type=1400 audit(1787848093.347:16036): avc: denied { mounton } for pid=16153 comm="syz.4.2641" path="/15/mnt" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 410.979629][ T42] audit: type=1400 audit(1787848093.347:16037): avc: denied { mount } for pid=16153 comm="syz.4.2641" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 410.989459][ T42] audit: type=1400 audit(1787848093.357:16038): avc: denied { create } for pid=16180 comm="syz.3.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.029487][ T42] audit: type=1400 audit(1787848093.367:16039): avc: denied { write } for pid=16181 comm="syz.1.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 411.040076][ T42] audit: type=1400 audit(1787848093.427:16040): avc: denied { prog_load } for pid=16180 comm="syz.3.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 411.060304][ T42] audit: type=1400 audit(1787848093.427:16041): avc: denied { bpf } for pid=16180 comm="syz.3.2650" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 411.209557][T16183] vlan2: entered promiscuous mode [ 411.222654][T16183] team0: entered promiscuous mode [ 411.241577][T16183] team_slave_0: entered promiscuous mode [ 411.248554][T16183] team_slave_1: entered promiscuous mode [ 411.403620][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 411.411790][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2653'. [ 411.429882][T16197] netlink: 'syz.1.2653': attribute type 19 has an invalid length. [ 411.454854][T16197] netlink: 'syz.1.2653': attribute type 1 has an invalid length. [ 411.553040][ T1347] usb 9-1: USB disconnect, device number 17 [ 411.567105][ T1347] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 411.567217][T16201] netlink: 'syz.1.2653': attribute type 1 has an invalid length. [ 411.577350][ T1347] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 411.584404][T16201] nbd: couldn't find device at index 131080 [ 411.588567][ T1347] keyspan 9-1:1.0: device disconnected [ 411.595086][T16201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2653'. [ 412.782404][T12796] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.795004][T12796] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.811592][T12796] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.816806][T12796] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.281331][T16231] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 413.305954][T16231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.317703][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'. [ 413.324922][T16231] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 413.472985][T16236] kvm: user requested TSC rate below hardware speed [ 413.641382][T16231] bond1: entered allmulticast mode [ 413.663212][T16235] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 413.964288][T16251] netlink: 'syz.4.2667': attribute type 2 has an invalid length. [ 413.984813][T16251] netlink: 'syz.4.2667': attribute type 2 has an invalid length. [ 414.115926][T16259] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.152461][T16259] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.2669'. [ 414.189382][T16259] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 414.195493][T16259] syzkaller1: owner set to 805 [ 414.285505][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.318764][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.358857][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.368001][T16272] gfs2: error -5 reading superblock [ 414.372054][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.382391][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.395893][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.412422][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.421211][T16267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2672'. [ 414.837974][T16285] netlink: 'syz.3.2677': attribute type 19 has an invalid length. [ 414.845108][T16285] netlink: 'syz.3.2677': attribute type 19 has an invalid length. [ 414.969913][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b236ea (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 414.976274][ C0] Call Trace: [ 414.977676][ C0] [ 414.978880][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 414.981607][ C0] ? sched_clock_cpu+0x6c/0x570 [ 414.983583][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 414.985729][ C0] mce_cpu_restart+0xd5/0x1f0 [ 414.987529][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 414.989789][ C0] __sysvec_call_function+0x81/0x420 [ 414.991792][ C0] sysvec_call_function+0x51/0xc0 [ 414.994116][ C0] asm_sysvec_call_function+0x1a/0x20 [ 414.997352][ C0] RIP: 0010:ktime_get+0xa9/0x320 [ 415.000003][ C0] Code: 24 38 48 c7 c7 c8 81 95 9b e8 a3 d5 ee ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 e1 78 13 00 58 48 85 db 0f 85 1a 02 00 00 32 7e 13 00 8b 2d 1c fe 9d 19 89 eb 31 ff 83 e3 01 89 de e8 8e [ 415.007874][ C0] RSP: 0000:ffffc90000007df0 EFLAGS: 00000246 [ 415.010400][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000102 [ 415.013784][ C0] RDX: ffff88805880a580 RSI: ffffffff81f7853d RDI: ffff88805880a580 [ 415.017475][ C0] RBP: 18cfb62ab08c9f14 R08: 0000000000000007 R09: 0000000000000000 [ 415.020636][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888022afdd30 [ 415.023807][ C0] R13: dffffc0000000000 R14: ffff8880138ed130 R15: ffff8880138ed138 [ 415.026744][ C0] ? ktime_get+0x24d/0x320 [ 415.028533][ C0] gate_timer_func+0x218/0x510 [ 415.030479][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 415.032697][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 415.034999][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 415.037299][ C0] handle_softirqs+0x1e6/0x9d0 [ 415.039385][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 415.041492][ C0] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 415.043608][ C0] do_softirq+0xaf/0xf0 [ 415.045077][ C0] [ 415.046019][ C0] [ 415.047055][ C0] __local_bh_enable_ip+0xff/0x120 [ 415.048679][ C0] copy_fpstate_to_sigframe+0x2bd/0xae0 [ 415.050519][ C0] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 415.052977][ C0] ? x86_task_fpu+0x5f/0x90 [ 415.055252][ C0] get_sigframe+0x3fb/0x940 [ 415.058030][ C0] ? __pfx_get_sigframe+0x10/0x10 [ 415.060833][ C0] ? rcu_is_watching+0x13/0xc0 [ 415.062446][ C0] ? siginfo_layout+0x156/0x290 [ 415.063970][ C0] x64_setup_rt_frame+0x12f/0xce0 [ 415.065567][ C0] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 415.067729][ C0] ? find_held_lock+0x2b/0x80 [ 415.069580][ C0] ? bad_area_access_error+0xab/0x1d0 [ 415.071640][ C0] ? fixup_vdso_exception+0x2d1/0x370 [ 415.073486][ C0] arch_do_signal_or_restart+0x5ee/0x7e0 [ 415.075220][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 415.077127][ C0] irqentry_exit+0x402/0xa10 [ 415.078563][ C0] asm_exc_page_fault+0x26/0x30 [ 415.080249][ C0] RIP: 0033:0x7f5cb3a67587 [ 415.081897][ C0] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 bf 03 00 00 0f b7 44 24 10 66 c1 c0 08 0f b7 c0 48 89 44 24 10 48 8b 44 24 18 0f b7 74 24 10 <66> 89 30 e9 18 ff ff ff 48 83 7c 24 08 17 0f 85 20 03 00 00 64 f0 [ 415.089775][ C0] RSP: 002b:00007ffc97294280 EFLAGS: 00010246 [ 415.092268][ C0] RAX: 00002000000001e4 RBX: 0000000000000002 RCX: 0000000000000000 [ 415.095875][ C0] RDX: c9cb75fe273496ff RSI: 0000000000000004 RDI: 00005555826b73d8 [ 415.099337][ C0] RBP: 00007ffc972943a0 R08: 0000000000000000 R09: 0000000000000000 [ 415.103389][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 00007ffc972943e0 [ 415.107152][ C0] R13: 00007f5cb3e2609c R14: 00000000000653f1 R15: 00007f5cb3e26090 [ 415.110449][ C0] [ 415.136757][T16295] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 415.141472][T16295] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 415.170594][T16295] program syz.3.2679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.217189][T16294] gadgetfs: bound to dummy_udc driver [ 415.440336][T16307] tmpfs: Bad value for 'mpol' [ 415.471705][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 415.475329][ C2] gadgetfs: connected [ 415.479612][ T24] gadgetfs: disconnected [ 415.632128][ C2] gadgetfs: connected [ 415.634098][ T24] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 415.638554][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.654754][T16309] dvmrp0: entered allmulticast mode [ 415.659369][ C2] gadgetfs: configuration #1 [ 415.719468][ T24] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input43 [ 415.763742][T16288] gadgetfs: suspended from state 3 [ 415.766790][T16288] gadgetfs: disconnected [ 415.798516][T16320] Invalid source name [ 415.819766][ T24] usb 6-1: USB disconnect, device number 24 [ 415.834433][T16320] UBIFS error (pid: 16320): cannot open "/dev/sg0", error -22 [ 415.874422][ T42] kauditd_printk_skb: 171 callbacks suppressed [ 415.874437][ T42] audit: type=1400 audit(1787848098.277:16213): avc: denied { unmount } for pid=14367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 415.903584][ T42] audit: type=1400 audit(1787848098.307:16214): avc: denied { unmount } for pid=14367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 415.923591][ T9428] udevd[9428]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 415.929009][ T42] audit: type=1400 audit(1787848098.307:16215): avc: denied { ioctl } for pid=16318 comm="syz.3.2686" path="socket:[78799]" dev="sockfs" ino=78799 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 415.945916][ T9428] udevd[9428]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 415.968177][ T42] audit: type=1400 audit(1787848098.327:16216): avc: denied { read write } for pid=16327 comm="syz.4.2688" name="video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 415.979886][ T42] audit: type=1400 audit(1787848098.327:16217): avc: denied { open } for pid=16327 comm="syz.4.2688" path="/dev/video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 416.000582][ T42] audit: type=1400 audit(1787848098.357:16218): avc: denied { ioctl } for pid=16327 comm="syz.4.2688" path="/dev/video7" dev="devtmpfs" ino=973 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 416.092023][ T42] audit: type=1400 audit(1787848098.487:16219): avc: denied { execute } for pid=16345 comm="syz.5.2692" name="file1" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 416.127857][ T42] audit: type=1400 audit(1787848098.497:16220): avc: denied { execute_no_trans } for pid=16345 comm="syz.5.2692" path="/125/file1" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 416.169560][ T42] audit: type=1400 audit(1787848098.527:16221): avc: denied { create } for pid=16334 comm="syz.3.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 416.189000][ T42] audit: type=1400 audit(1787848098.557:16222): avc: denied { read write } for pid=16334 comm="syz.3.2690" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 416.382483][T16367] netlink: 'syz.5.2698': attribute type 2 has an invalid length. [ 416.573169][T16376] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 416.595396][T16376] jffs2: notice: (16376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 416.820379][T16384] netlink: 'syz.1.2701': attribute type 1 has an invalid length. [ 416.830245][T16384] netlink: 'syz.1.2701': attribute type 1 has an invalid length. [ 417.588037][T16392] dummy0: left allmulticast mode [ 417.745939][T16415] netlink: 'syz.5.2708': attribute type 9 has an invalid length. [ 418.894196][T16392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.963352][T16392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.491906][T16392] bridge2: left promiscuous mode [ 419.497613][T16392] bridge2: left allmulticast mode [ 419.541908][T12798] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.555500][T12798] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.565328][T12798] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.592191][T12798] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.611272][T12798] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.635628][T12798] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.658130][T12798] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.673236][T12798] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.720397][T16432] binder: 16428:16432 ioctl 4018620d 0 returned -22 [ 419.855241][T16433] __nla_validate_parse: 70 callbacks suppressed [ 419.855789][T16433] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2713'. [ 420.236943][ T1302] block nbd0: Possible stuck request ffff8880298fe000: control (read@0,1024B). Runtime 240 seconds [ 420.240845][ T1302] block nbd0: Possible stuck request ffff8880298fe1c0: control (read@1024,1024B). Runtime 240 seconds [ 420.245210][ T1302] block nbd0: Possible stuck request ffff8880298fe380: control (read@2048,1024B). Runtime 240 seconds [ 420.249281][ T1302] block nbd0: Possible stuck request ffff8880298fe540: control (read@3072,1024B). Runtime 240 seconds [ 420.881472][ T42] kauditd_printk_skb: 219 callbacks suppressed [ 420.881485][ T42] audit: type=1400 audit(1787848103.277:16442): avc: denied { write } for pid=16440 comm="syz.1.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.922479][T12775] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 420.969838][ T42] audit: type=1400 audit(1787848103.367:16443): avc: denied { map_create } for pid=16394 comm="syz.3.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 420.986891][ T42] audit: type=1400 audit(1787848103.367:16444): avc: denied { map_read map_write } for pid=16394 comm="syz.3.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.030401][ T42] audit: type=1400 audit(1787848103.387:16445): avc: denied { unmount } for pid=15638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 421.055133][ T42] audit: type=1400 audit(1787848103.407:16446): avc: denied { mount } for pid=16442 comm="syz.1.2717" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 421.072244][T12775] usb 9-1: device descriptor read/64, error -71 [ 421.147584][ T42] audit: type=1400 audit(1787848103.547:16447): avc: denied { bpf } for pid=16442 comm="syz.1.2717" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.184222][T16446] loop8: detected capacity change from 0 to 7 [ 421.212544][ T42] audit: type=1400 audit(1787848103.547:16448): avc: denied { perfmon } for pid=16442 comm="syz.1.2717" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.212689][T16446] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 421.241294][T16446] loop8: partition table partially beyond EOD, truncated [ 421.244109][T16446] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 421.258077][T16446] loop8: p2 start 121280928 is beyond EOD, truncated [ 421.304492][ T42] audit: type=1400 audit(1787848103.687:16449): avc: denied { mount } for pid=16447 comm="syz.5.2719" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 421.321833][T12775] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 421.333443][ T9426] udevd[9426]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 421.344328][T16452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2720'. [ 421.357337][T16452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2720'. [ 421.365329][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2719'. [ 421.378279][ T42] audit: type=1400 audit(1787848103.777:16450): avc: denied { mount } for pid=16451 comm="syz.3.2720" name="/" dev="gadgetfs" ino=9607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 421.390492][T16445] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 421.426003][ T42] audit: type=1400 audit(1787848103.817:16451): avc: denied { mounton } for pid=16451 comm="syz.3.2720" path="/45/file0" dev="gadgetfs" ino=9607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 421.431640][T16450] openvswitch: netlink: Flow actions attr not present in new flow. [ 421.461314][T12775] usb 9-1: device descriptor read/64, error -71 [ 421.531180][T16445] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 421.541329][T16445] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 421.632243][T12775] usb usb9-port1: attempt power cycle [ 421.662122][T16445] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 421.668844][T16445] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 421.682454][T16445] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 421.893097][T16445] pci 0000:00:01.0: Adding to iommu group 1 [ 421.945478][T16445] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 421.949633][T16445] pci 0000:00:01.0: vgaarb: bridge control possible [ 421.952406][T16445] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 421.973280][T12775] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 421.992833][T12775] usb 9-1: device descriptor read/8, error -71 [ 422.055581][T16445] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 422.069975][T16445] pci 0000:00:04.0: PCI bridge to [bus 01] [ 422.077355][T16445] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 422.082385][T16445] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 422.092633][T16445] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 422.107313][T16445] pci 0000:00:04.0: enabling Extended Tags [ 422.154384][T16445] pci 0000:00:04.0: Adding to iommu group 4 [ 422.234880][T12775] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 422.263093][T12775] usb 9-1: device descriptor read/8, error -71 [ 422.284318][T16445] pci 0000:00:04.0: PCI bridge to [bus 01] [ 422.302247][T16445] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 422.353504][T16445] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 422.364155][T16445] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 422.385045][T16445] pci 0000:00:04.0: bridge window [mem 0x80800000-0x809fffff]: assigned [ 422.385131][T12775] usb usb9-port1: unable to enumerate USB device [ 422.395551][T16445] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 422.406826][T16445] pci 0000:00:01.0: BAR 2 [mem 0x380000200000-0x380000203fff 64bit pref]: assigned [ 422.453660][T16445] pci 0000:00:01.0: BAR 4 [mem 0x80a00000-0x80a00fff]: assigned [ 422.467204][T16445] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 422.480598][T16445] pci 0000:00:04.0: PCI bridge to [bus 01] [ 422.494077][T16445] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 422.506496][T16445] pci 0000:00:04.0: bridge window [mem 0x80800000-0x809fffff] [ 422.518336][T16445] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 422.585637][T16445] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 422.701813][T16445] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 422.801436][T16445] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 422.813148][T16445] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 422.819157][T16445] [drm] features: -virgl +edid -resource_blob -host_visible [ 422.819173][T16445] [drm] features: -context_init -blob_alignment [ 423.008096][T16445] [drm] number of scanouts: 1 [ 423.011818][T16445] [drm] number of cap sets: 0 [ 423.043861][T16445] [drm:virtio_gpu_init.cold] *ERROR* modeset init failed [ 423.318822][T16497] x_tables: duplicate underflow at hook 2 [ 423.398982][T16445] virtio_gpu virtio0: probe with driver virtio_gpu failed with error -4 [ 423.452165][T16445] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 423.515206][T16445] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 423.878768][T16445] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 424.144153][T16522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2740'. [ 424.156732][T16522] openvswitch: netlink: Flow key attr not present in new flow. [ 424.180656][T16445] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv [ 424.186057][T16522] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 424.186746][T16445] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed [ 424.200671][T16445] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 424.257789][T16522] sctp: [Deprecated]: syz.4.2740 (pid 16522) Use of int in max_burst socket option deprecated. [ 424.257789][T16522] Use struct sctp_assoc_value instead [ 424.329690][T16533] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2743'. [ 424.355320][T16533] unsupported nlmsg_type 40 [ 424.402582][T16533] netlink: 'syz.5.2743': attribute type 21 has an invalid length. [ 424.416456][T16533] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2743'. [ 424.431803][T16533] netlink: 'syz.5.2743': attribute type 5 has an invalid length. [ 424.443556][T16533] netlink: 'syz.5.2743': attribute type 6 has an invalid length. [ 424.457037][T16533] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2743'. [ 424.469218][T16538] netlink: 'syz.5.2743': attribute type 21 has an invalid length. [ 424.496090][T16538] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2743'. [ 424.518814][T16538] netlink: 'syz.5.2743': attribute type 5 has an invalid length. [ 424.545129][T16538] netlink: 'syz.5.2743': attribute type 6 has an invalid length. [ 424.559447][T16538] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2743'. [ 424.678977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.058430][T16548] netlink: 344 bytes leftover after parsing attributes in process `syz.4.2747'. [ 425.084995][T16548] netlink: NAT attribute has 8 unknown bytes [ 425.093925][T16548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.719124][T16562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.037682][T16577] nvme nvme0: rdma_resolve_addr failed (-19). [ 426.056821][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 426.056842][ T42] audit: type=1400 audit(1787848108.457:16545): avc: denied { create } for pid=16587 comm="syz.4.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.088389][ T42] audit: type=1400 audit(1787848108.477:16546): avc: denied { ioctl } for pid=16587 comm="syz.4.2757" path="socket:[80653]" dev="sockfs" ino=80653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.129760][ T42] audit: type=1400 audit(1787848108.527:16547): avc: denied { create } for pid=16587 comm="syz.4.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 426.211426][ T42] audit: type=1400 audit(1787848108.607:16548): avc: denied { read } for pid=16587 comm="syz.4.2757" name="v4l-subdev4" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.263238][ T42] audit: type=1400 audit(1787848108.607:16549): avc: denied { open } for pid=16587 comm="syz.4.2757" path="/dev/v4l-subdev4" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.289390][ T42] audit: type=1400 audit(1787848108.617:16550): avc: denied { ioctl } for pid=16587 comm="syz.4.2757" path="/dev/v4l-subdev4" dev="devtmpfs" ino=968 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.308302][T16578] nvme nvme0: rdma_resolve_addr failed (-19). [ 426.368461][ T42] audit: type=1400 audit(1787848108.767:16551): avc: denied { mount } for pid=16597 comm="syz.3.2760" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 426.385954][T16598] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:00: unknown uevent action string [ 426.446019][ T42] audit: type=1400 audit(1787848108.847:16552): avc: denied { read } for pid=16597 comm="syz.3.2760" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.460899][T16598] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 426.480305][ T42] audit: type=1400 audit(1787848108.847:16553): avc: denied { open } for pid=16597 comm="syz.3.2760" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.519632][ T42] audit: type=1400 audit(1787848108.857:16554): avc: denied { ioctl } for pid=16597 comm="syz.3.2760" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.965666][T16615] wlan0 speed is unknown, defaulting to 1000 [ 427.008264][T16621] EXT4-fs (nbd5): unable to read superblock [ 427.016585][T16622] loop2: detected capacity change from 0 to 7 [ 427.055626][T16622] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 427.067496][T16622] loop2: partition table partially beyond EOD, truncated [ 427.068577][T16598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 427.079806][T16622] loop2: p1 size 1905483274 extends beyond EOD, truncated [ 427.141207][T16622] loop2: p2 start 121280928 is beyond EOD, truncated [ 427.402677][T16627] jffs2: notice: (16627) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 427.428954][T16633] dlm: non-version read from control device 1073741824 [ 427.459150][ T9426] udevd[9426]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 428.526661][T16660] netlink: 'syz.3.2779': attribute type 2 has an invalid length. [ 428.530929][T16660] netlink: 'syz.3.2779': attribute type 5 has an invalid length. [ 428.777263][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 428.793200][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2782'. [ 428.915820][T16677] qrtr: Invalid version 0 [ 428.938384][T16681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2784'. [ 428.956047][T16681] netlink: 'syz.3.2784': attribute type 10 has an invalid length. [ 428.965955][T16681] ipvlan0: entered allmulticast mode [ 428.973452][T16681] veth0_vlan: entered allmulticast mode [ 428.981756][T16681] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 429.109553][T16683] gadgetfs: bound to dummy_udc driver [ 429.248046][T16687] netlink: 'syz.1.2787': attribute type 11 has an invalid length. [ 429.619157][T16696] jffs2: notice: (16696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 429.619582][T16695] block2mtd: parameter too long [ 429.850865][T16702] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 430.061834][T16702] nvme nvme0: rdma_resolve_addr failed (-19). [ 430.322727][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2796'. [ 430.375986][T16724] xt_hashlimit: size too large, truncated to 1048576 [ 430.446418][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.522634][T16733] bridge_slave_0 (unregistering): left allmulticast mode [ 430.540064][T16733] bridge_slave_0 (unregistering): left promiscuous mode [ 430.553935][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.769830][T16744] bad cache= option: noneÿÿ [ 430.769830][T16744] [ 430.798180][T16744] CIFS: VFS: bad cache= option: noneÿÿ [ 430.924399][T16752] wlan0 speed is unknown, defaulting to 1000 [ 431.144617][ T42] kauditd_printk_skb: 172 callbacks suppressed [ 431.144631][ T42] audit: type=1400 audit(1787848113.547:16727): avc: denied { bind } for pid=16760 comm="syz.5.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.169707][ T42] audit: type=1400 audit(1787848113.567:16728): avc: denied { bind } for pid=16748 comm="syz.3.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.177325][ T42] audit: type=1400 audit(1787848113.567:16729): avc: denied { name_bind } for pid=16748 comm="syz.3.2804" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 431.186057][ T42] audit: type=1400 audit(1787848113.567:16730): avc: denied { node_bind } for pid=16748 comm="syz.3.2804" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 431.194163][ T42] audit: type=1400 audit(1787848113.577:16731): avc: denied { write } for pid=16748 comm="syz.3.2804" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.205236][ T42] audit: type=1400 audit(1787848113.577:16732): avc: denied { connect } for pid=16748 comm="syz.3.2804" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.222209][ T42] audit: type=1400 audit(1787848113.577:16733): avc: denied { name_connect } for pid=16748 comm="syz.3.2804" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 431.262111][ T42] audit: type=1400 audit(1787848113.667:16734): avc: denied { unlink } for pid=16760 comm="syz.5.2808" name="#3f" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 431.283448][ T42] audit: type=1400 audit(1787848113.677:16735): avc: denied { mount } for pid=16760 comm="syz.5.2808" name="/" dev="overlay" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 431.301017][ T42] audit: type=1400 audit(1787848113.677:16736): avc: denied { read append } for pid=16760 comm="syz.5.2808" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.333434][T16764] overlayfs: failed lookup in lower (newroot/161, name='file1', err=-40): overlapping layers [ 431.640446][T16767] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 431.648887][T16767] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 431.723307][T16769] bridge1: entered promiscuous mode [ 431.728624][T16769] bridge1: entered allmulticast mode [ 432.250562][T16793] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2815'. [ 432.734638][T16812] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2823'. [ 432.745033][T16815] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 432.748016][T16815] nbd: couldn't find device at index 131080 [ 433.153616][ T5820] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 433.195167][T16828] hfs: can't find a HFS filesystem on dev sr0 [ 433.267090][T16829] hfs: can't find a HFS filesystem on dev sr0 [ 433.313290][ T5820] usb 8-1: unable to get BOS descriptor or descriptor too short [ 433.317132][ T5820] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 433.333928][ T5820] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 433.337877][ T5820] usb 8-1: config 100 has no interface number 0 [ 433.340038][ T5820] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 433.349213][ T5820] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 433.349650][T16838] binder_alloc: binder_alloc_mmap_handler: 16836 200000ffc000-200000ffe000 already mapped failed -16 [ 433.358739][ T5820] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 433.371245][ T5820] usb 8-1: config 100 interface 173 has no altsetting 0 [ 433.379351][ T5820] usb 8-1: string descriptor 0 read error: -22 [ 433.382551][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.398993][T16822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.407420][ T5820] metro_usb 8-1:100.173: Metrologic USB to Serial converter detected [ 433.423473][ T5820] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 433.425601][T16844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2832'. [ 433.613666][T16854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62 sclass=netlink_audit_socket pid=16854 comm=syz.5.2834 [ 433.621472][T16822] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 433.670580][T16822] xt_hashlimit: size too large, truncated to 1048576 [ 434.019143][ T1347] usb 8-1: USB disconnect, device number 18 [ 434.029522][T16871] netlink: 'syz.4.2837': attribute type 1 has an invalid length. [ 434.057145][ T1347] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 434.062910][ T1347] metro_usb 8-1:100.173: device disconnected [ 434.246204][T16873] macvtap1: entered allmulticast mode [ 434.295930][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2840'. [ 434.325503][T16885] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 434.449310][T16891] netlink: 778 bytes leftover after parsing attributes in process `syz.4.2842'. [ 434.494158][T16883] input: syz1 as /devices/virtual/input/input44 [ 434.944066][T16915] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 434.952099][T16915] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 435.700610][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2855'. [ 435.803849][T16946] [U] zÍ»´iœùÊý®Ò[27| [ 435.808781][T16946] [U] ‘BsŠ«w×AÓer®ÇOU�]~èAÖö`1e…ÊX™!�Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµ�h$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®�<ï [ 435.814850][T16946] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 435.882548][T16946] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚL�h»�c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 435.896941][T16946] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 435.899484][T16946] [U] *CÃn¯3¿Àv7‰K�E¯Xgt_3êê §ëé [ 435.906337][T16946] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£�s«=óR@ [ 435.910095][T16946] [U] ‰ϼcEv‹û @ý [ 435.911778][T16946] [U] aÆ„% [ 435.915018][T16946] [U] ’@¿Ëø±·’äæëcÃ�_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~W�ìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 435.923073][T16946] [U] éf1Ïp±3 [ 435.924656][T16946] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 435.926849][T16946] [U] �Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 435.950298][T16946] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôô�ádmÿ�¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎�ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜ�X†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬�Ý{»›‡n [ 436.245275][T16963] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 436.248123][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.251923][ T42] kauditd_printk_skb: 260 callbacks suppressed [ 436.251940][ T42] audit: type=1400 audit(1787848118.657:16997): avc: denied { read write } for pid=16955 comm="syz.1.2859" name="usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 436.291125][T16968] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 436.291797][ T42] audit: type=1400 audit(1787848118.657:16998): avc: denied { open } for pid=16955 comm="syz.1.2859" path="/dev/usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 436.293848][T16968] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.311161][T16968] vhci_hcd vhci_hcd.0: Device attached [ 436.312950][T16963] vhci_hcd vhci_hcd.0: Device attached [ 436.317507][ T42] audit: type=1400 audit(1787848118.657:16999): avc: denied { write } for pid=16955 comm="syz.1.2859" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 436.347126][ T42] audit: type=1400 audit(1787848118.657:17000): avc: denied { create } for pid=16955 comm="syz.1.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 436.354048][ T42] audit: type=1400 audit(1787848118.657:17001): avc: denied { read } for pid=16955 comm="syz.1.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 436.367183][ T42] audit: type=1400 audit(1787848118.687:17002): avc: denied { create } for pid=16965 comm="syz.3.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 436.374254][T16970] vhci_hcd: connection closed [ 436.375140][T16964] vhci_hcd: connection closed [ 436.379208][ T5827] vhci_hcd vhci_hcd.4: stop threads [ 436.379662][ T42] audit: type=1400 audit(1787848118.687:17003): avc: denied { connect } for pid=16965 comm="syz.3.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 436.380865][ T5827] vhci_hcd vhci_hcd.4: release socket [ 436.385281][ T42] audit: type=1400 audit(1787848118.717:17004): avc: denied { allowed } for pid=16972 comm="syz.5.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 436.401478][ T42] audit: type=1400 audit(1787848118.727:17005): avc: denied { create } for pid=16972 comm="syz.5.2863" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 436.413224][ T42] audit: type=1400 audit(1787848118.737:17006): avc: denied { map } for pid=16972 comm="syz.5.2863" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=83489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 436.414518][ T5827] vhci_hcd vhci_hcd.4: disconnect device [ 436.453528][ T5827] vhci_hcd vhci_hcd.4: stop threads [ 436.462093][ T5827] vhci_hcd vhci_hcd.4: release socket [ 436.475338][ T5827] vhci_hcd vhci_hcd.4: disconnect device [ 436.483177][T16980] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 436.490761][T16978] [U] J"—E:ÀÆ" [ 436.492761][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 436.808955][T16989] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2866'. [ 437.542266][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.556231][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 438.428577][T17036] netlink: 'syz.5.2878': attribute type 2 has an invalid length. [ 438.658471][T17045] kvm: user requested TSC rate below hardware speed [ 439.192201][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 439.206463][T17068] jffs2: notice: (17068) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 439.231941][T17065] kAFS: unable to lookup cell 'syz1' [ 439.257146][T17065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2884'. [ 439.660242][T17087] netlink: 'syz.5.2889': attribute type 10 has an invalid length. [ 439.667143][T17088] netlink: 'syz.5.2889': attribute type 10 has an invalid length. [ 439.752623][T17091] netlink: 'syz.3.2890': attribute type 4 has an invalid length. [ 439.842413][T17092] scsi_dev_info_list_add_str: bad dev info string 'end' '' '' [ 439.982353][T17087] team0 (unregistering): Port device team_slave_0 removed [ 440.014115][T17094] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 440.028742][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2892'. [ 440.049642][T17087] team0 (unregistering): Port device team_slave_1 removed [ 440.094885][T17096] overlayfs: conflicting lowerdir path [ 440.340223][T17103] libceph: resolve '0' (ret=-3): failed [ 440.426428][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 440.432213][T17105] syz_tun: refused to change device tx_queue_len [ 440.444456][T17105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17105 comm=syz.3.2895 [ 440.673442][T17115] netlink: 'syz.4.2898': attribute type 10 has an invalid length. [ 440.681903][T17115] ipvlan0: entered allmulticast mode [ 440.688066][T17115] veth0_vlan: entered allmulticast mode [ 440.710672][T17115] team0: Device ipvlan0 failed to register rx_handler [ 440.897819][T17119] netlink: NAT attribute has 4 unknown bytes [ 440.912387][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.342776][ T42] kauditd_printk_skb: 154 callbacks suppressed [ 441.342790][ T42] audit: type=1400 audit(1787848123.747:17161): avc: denied { getopt } for pid=17127 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.361270][ T42] audit: type=1400 audit(1787848123.757:17162): avc: denied { read write } for pid=17127 comm="syz.3.2901" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 441.381346][ T42] audit: type=1400 audit(1787848123.757:17163): avc: denied { open } for pid=17127 comm="syz.3.2901" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 441.402848][ T42] audit: type=1400 audit(1787848123.757:17164): avc: denied { write } for pid=17127 comm="syz.3.2901" name="netlink" dev="proc" ino=4026532256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 441.421245][ T42] audit: type=1400 audit(1787848123.757:17165): avc: denied { ioctl } for pid=17127 comm="syz.3.2901" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 441.499387][ T42] audit: type=1400 audit(1787848123.897:17166): avc: denied { execmem } for pid=17130 comm="syz.3.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 441.526331][ T42] audit: type=1400 audit(1787848123.917:17167): avc: denied { allowed } for pid=17132 comm="syz.5.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 441.552693][ T42] audit: type=1400 audit(1787848123.927:17168): avc: denied { create } for pid=17132 comm="syz.5.2903" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.584329][ T42] audit: type=1400 audit(1787848123.927:17169): avc: denied { map } for pid=17132 comm="syz.5.2903" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=84003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.616014][ T42] audit: type=1400 audit(1787848123.927:17170): avc: denied { read write } for pid=17132 comm="syz.5.2903" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=84003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.692377][T17140] md: array md0 already initialised! [ 441.931329][T17140] md: personality for level is not loaded! [ 441.959789][T17148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2907'. [ 441.974145][T17148] input: syz0 as /devices/virtual/input/input45 [ 442.002746][T17148] ifb0: entered allmulticast mode [ 442.120915][T17148] veth0: entered allmulticast mode [ 442.140494][T17148] veth1: entered allmulticast mode [ 442.154423][T17148] lapb9: entered allmulticast mode [ 442.164403][T17148] lapb10: entered allmulticast mode [ 442.171608][T17148] lapb11: entered allmulticast mode [ 442.177372][T17148] lapb12: entered allmulticast mode [ 442.401620][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 442.551718][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 442.557743][ T9] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 442.565561][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 442.574323][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.591151][ T9] usb 9-1: Product: syz [ 442.592951][ T9] usb 9-1: Manufacturer: syz [ 442.595121][ T9] usb 9-1: SerialNumber: syz [ 442.601561][ T9] usb 9-1: config 0 descriptor?? [ 442.611871][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 442.617014][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 442.624676][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.859380][ T9] usb 9-1: USB disconnect, device number 22 [ 443.112838][T15426] udevd[15426]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 446.283820][ T5138] udevd[5138]: worker [9195] /devices/virtual/block/nbd0 timeout; kill it [ 446.289199][ T5138] udevd[5138]: seq 14496 '/devices/virtual/block/nbd0' killed [ 450.321780][ T1302] block nbd0: Possible stuck request ffff8880298fe000: control (read@0,1024B). Runtime 270 seconds [ 450.325296][ T1302] block nbd0: Possible stuck request ffff8880298fe1c0: control (read@1024,1024B). Runtime 270 seconds [ 450.328834][ T1302] block nbd0: Possible stuck request ffff8880298fe380: control (read@2048,1024B). Runtime 270 seconds [ 450.332905][ T1302] block nbd0: Possible stuck request ffff8880298fe540: control (read@3072,1024B). Runtime 270 seconds [ 452.289440][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 452.289454][ T42] audit: type=1400 audit(1787848134.687:17219): avc: denied { execute } for pid=17161 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 452.311347][ T42] audit: type=1400 audit(1787848134.697:17220): avc: denied { execute_no_trans } for pid=17161 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 466.288173][ T42] audit: type=1400 audit(1787848148.687:17221): avc: denied { create } for pid=17165 comm="syz.5.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 466.303480][T17169] pim6reg1: entered promiscuous mode [ 466.305205][T17169] pim6reg1: entered allmulticast mode [ 466.307130][ T42] audit: type=1400 audit(1787848148.707:17222): avc: denied { mounton } for pid=17164 comm="syz.4.2911" path="/86/dev" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 466.314675][ T42] audit: type=1400 audit(1787848148.707:17223): avc: denied { mount } for pid=17164 comm="syz.4.2911" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 466.323278][ T42] audit: type=1400 audit(1787848148.707:17224): avc: denied { read write } for pid=17164 comm="syz.4.2911" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 466.331329][ T42] audit: type=1400 audit(1787848148.707:17225): avc: denied { open } for pid=17164 comm="syz.4.2911" path="/86/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 466.342574][ T42] audit: type=1400 audit(1787848148.707:17226): avc: denied { ioctl } for pid=17164 comm="syz.4.2911" path="/86/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 466.361143][ T42] audit: type=1400 audit(1787848148.717:17227): avc: denied { read } for pid=17166 comm="syz.3.2914" dev="nsfs" ino=4026532252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 466.390078][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.391625][ T42] audit: type=1400 audit(1787848148.717:17228): avc: denied { open } for pid=17166 comm="syz.3.2914" path="net:[4026532252]" dev="nsfs" ino=4026532252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 466.404961][ T42] audit: type=1400 audit(1787848148.717:17229): avc: denied { create } for pid=17166 comm="syz.3.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.418757][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.422251][ T42] audit: type=1400 audit(1787848148.727:17230): avc: denied { bind } for pid=17166 comm="syz.3.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.433333][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.494320][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.504805][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.512201][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2915'. [ 466.835603][T17170] wlan0 speed is unknown, defaulting to 1000 [ 467.062053][T17170] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.064911][T17170] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.067546][T17170] bridge_slave_0: entered allmulticast mode [ 467.070557][T17170] bridge_slave_0: entered promiscuous mode [ 467.076234][T17170] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.078611][T17170] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.080966][T17170] bridge_slave_1: entered allmulticast mode [ 467.088185][T17170] bridge_slave_1: entered promiscuous mode [ 467.159728][T17170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.175202][T17170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.186984][T17205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2920'. [ 467.203021][T17205] input: syz0 as /devices/virtual/input/input46 [ 467.240165][T17170] team0: Port device team_slave_0 added [ 467.245221][T17170] team0: Port device team_slave_1 added [ 467.323679][T17170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.340044][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.349124][ T5729] Bluetooth: hci1: unexpected subevent 0x0c length: 0 < 5 [ 467.362959][T17170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.372847][T17170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.375851][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.389390][ T9426] udevd[9426]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 467.394987][T17170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.429724][T17170] hsr_slave_0: entered promiscuous mode [ 467.432691][T17170] hsr_slave_1: entered promiscuous mode [ 467.435153][T17170] debugfs: 'hsr0' already exists in 'hsr' [ 467.437129][T17170] Cannot create hsr debugfs directory [ 467.609508][T17211] ªªªªªª: renamed from vlan0 (while UP) [ 467.683219][T17211] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2924'. [ 467.974459][T17221] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2927'. [ 468.503475][T17170] netdevsim netdevsim7 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.507675][T17170] netdevsim netdevsim7 eth13 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 468.600339][ T5729] Bluetooth: hci0: command tx timeout [ 469.346064][T17170] netdevsim netdevsim7 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.349454][T17170] netdevsim netdevsim7 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 469.657799][T17266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2933'. [ 469.696744][T17266] input: syz0 as /devices/virtual/input/input47 [ 469.763914][T17170] netdevsim netdevsim7 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.774970][T17170] netdevsim netdevsim7 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 469.924014][T17273] ipt_ECN: cannot use operation on non-tcp rule [ 469.976594][T17275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 470.231313][T17287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.264533][T17170] netdevsim netdevsim7 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.283760][T17170] netdevsim netdevsim7 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 470.363651][T17287] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 470.401253][ T50] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 470.414700][T17293] kernel profiling enabled (shift: 5) [ 470.541245][ T50] usb 10-1: device descriptor read/64, error -71 [ 470.659370][T17306] program syz.4.2942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.673543][ T5729] Bluetooth: hci0: command tx timeout [ 470.792641][ T50] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 470.797261][T17170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.823071][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.826983][T17170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.867601][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.871806][T17170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.909960][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.915848][T17170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.921692][ T50] usb 10-1: device descriptor read/64, error -71 [ 470.953131][T17316] jffs2: notice: (17316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 470.965270][T17170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.032855][ T50] usb usb10-port1: attempt power cycle [ 471.102054][T17170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.124529][T17170] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.146040][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.149453][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.185409][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.188696][ T6510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.291256][ T42] kauditd_printk_skb: 198 callbacks suppressed [ 471.291274][ T42] audit: type=1400 audit(1787848153.697:17429): avc: denied { prog_load } for pid=17333 comm="syz.3.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 471.329815][ T42] audit: type=1400 audit(1787848153.697:17430): avc: denied { write } for pid=17334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.356301][ T42] audit: type=1400 audit(1787848153.697:17431): avc: denied { add_name } for pid=17334 comm="dhcpcd-run-hook" name="resolv.conf.eth11.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.372126][ T50] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 471.372466][ T42] audit: type=1400 audit(1787848153.697:17432): avc: denied { create } for pid=17334 comm="dhcpcd-run-hook" name="resolv.conf.eth11.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 471.385320][ T42] audit: type=1400 audit(1787848153.697:17433): avc: denied { write open } for pid=17334 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth11.dhcp" dev="tmpfs" ino=12369 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 471.393253][ T50] usb 10-1: device descriptor read/8, error -71 [ 471.416418][ T42] audit: type=1400 audit(1787848153.707:17434): avc: denied { append } for pid=17334 comm="dhcpcd-run-hook" name="resolv.conf.eth11.dhcp" dev="tmpfs" ino=12369 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 471.434784][ T42] audit: type=1400 audit(1787848153.727:17435): avc: denied { map_create } for pid=17343 comm="syz.4.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 471.460339][ T42] audit: type=1400 audit(1787848153.727:17436): avc: denied { create } for pid=17343 comm="syz.4.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 471.490712][ T42] audit: type=1400 audit(1787848153.727:17437): avc: denied { write } for pid=17343 comm="syz.4.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 471.515644][ T42] audit: type=1400 audit(1787848153.727:17438): avc: denied { ioctl } for pid=17343 comm="syz.4.2950" path="socket:[85614]" dev="sockfs" ino=85614 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 471.662446][ T50] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 471.682863][ T50] usb 10-1: device descriptor read/8, error -71 [ 471.717039][T17359] tipc: Started in network mode [ 471.723564][T17359] tipc: Node identity ac141441, cluster identity 4711 [ 471.742939][T17359] tipc: Enabled bearer , priority 31 [ 471.792134][ T50] usb usb10-port1: unable to enumerate USB device [ 471.838019][T17170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.917881][T17369] netlink: 'syz.3.2954': attribute type 1 has an invalid length. [ 472.057053][T17170] veth0_vlan: entered promiscuous mode [ 472.067410][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 472.076928][T17170] veth1_vlan: entered promiscuous mode [ 472.094337][T17170] veth0_macvtap: entered promiscuous mode [ 472.098803][T17170] veth1_macvtap: entered promiscuous mode [ 472.114164][T17170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.133405][T17170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.314891][T12796] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.339125][T12796] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.417147][T12798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.529019][ T6507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.533325][T12797] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.539149][ T6507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.587658][ T6510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.595538][ T6510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.748708][ T41] tipc: Node number set to 2886997057 [ 472.751380][ T5729] Bluetooth: hci0: command tx timeout [ 472.878587][ T6495] IPVS: starting estimator thread 0... [ 473.011066][T17400] IPVS: using max 43 ests per chain, 103200 per kthread [ 473.220849][T17414] batman_adv: batadv0: Adding interface: veth0 [ 473.225950][T17414] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.251197][T17414] batman_adv: batadv0: Interface activated: veth0 [ 473.290898][T17416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2962'. [ 473.476600][T17428] netlink: 560 bytes leftover after parsing attributes in process `syz.7.2965'. [ 473.536234][T17429] sctp: [Deprecated]: syz.5.2966 (pid 17429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.536234][T17429] Use struct sctp_sack_info instead [ 473.650024][T17436] netlink: 340 bytes leftover after parsing attributes in process `syz.5.2969'. [ 473.661794][T12775] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 473.739432][T17440] ip_tables: iptables: counters copy to user failed while replacing table [ 473.811506][T12775] usb 9-1: Invalid ep0 maxpacket: 16 [ 473.942318][T12775] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 474.092539][T12775] usb 9-1: Invalid ep0 maxpacket: 16 [ 474.096751][T12775] usb usb9-port1: attempt power cycle [ 474.442977][T12775] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 474.471771][T12775] usb 9-1: Invalid ep0 maxpacket: 16 [ 474.522814][T17460] binder: 17459:17460 ioctl c00c620f 200000000500 returned -22 [ 474.603164][T12775] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 474.623272][T12775] usb 9-1: Invalid ep0 maxpacket: 16 [ 474.628842][T12775] usb usb9-port1: unable to enumerate USB device [ 474.634980][T17469] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 474.831145][ T5729] Bluetooth: hci0: command tx timeout [ 475.042076][T17483] netlink: NAT attribute has 4 unknown bytes [ 475.044558][T17483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.271232][ T41] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 475.421290][ T41] usb 9-1: Invalid ep0 maxpacket: 16 [ 475.561216][ T41] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 475.724454][ T41] usb 9-1: Invalid ep0 maxpacket: 16 [ 475.732463][ T41] usb usb9-port1: attempt power cycle [ 475.965184][T17513] bridge0: port 3(syz_tun) entered blocking state [ 475.967591][T17513] bridge0: port 3(syz_tun) entered disabled state [ 475.970218][T17513] syz_tun: entered allmulticast mode [ 475.974309][T17513] syz_tun: entered promiscuous mode [ 475.976362][T17513] bridge0: port 3(syz_tun) entered blocking state [ 475.978642][T17513] bridge0: port 3(syz_tun) entered listening state [ 475.994141][ C2] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 476.000141][ C2] bridge0: topology change detected, propagating [ 476.081376][ T41] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 476.092268][ T6494] bridge0: port 3(syz_tun) entered disabled state [ 476.102390][ T41] usb 9-1: Invalid ep0 maxpacket: 16 [ 476.189958][ T5729] Bluetooth: hci0: SCO packet for unknown connection handle 3272 [ 476.236489][ T41] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 476.289685][ T41] usb 9-1: Invalid ep0 maxpacket: 16 [ 476.293472][ T41] usb usb9-port1: unable to enumerate USB device [ 476.411903][ T42] kauditd_printk_skb: 204 callbacks suppressed [ 476.411917][ T42] audit: type=1400 audit(1787848158.817:17643): avc: denied { write } for pid=17521 comm="syz.7.2997" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 476.438763][ T42] audit: type=1400 audit(1787848158.827:17644): avc: denied { open } for pid=17521 comm="syz.7.2997" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 476.450565][T17524] input: syz1 as /devices/virtual/input/input49 [ 476.466650][ T42] audit: type=1400 audit(1787848158.827:17645): avc: denied { create } for pid=17521 comm="syz.7.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 476.488934][ T42] audit: type=1400 audit(1787848158.837:17646): avc: denied { ioctl } for pid=17522 comm="syz.5.2998" path="/dev/uinput" dev="devtmpfs" ino=942 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 476.505842][ T42] audit: type=1400 audit(1787848158.837:17647): avc: denied { bind } for pid=17521 comm="syz.7.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 476.534587][ T42] audit: type=1400 audit(1787848158.837:17648): avc: denied { name_bind } for pid=17521 comm="syz.7.2997" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 476.552770][ T42] audit: type=1400 audit(1787848158.837:17649): avc: denied { node_bind } for pid=17521 comm="syz.7.2997" saddr=172.20.20.32 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 476.564223][T17523] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2997'. [ 476.571394][ T42] audit: type=1400 audit(1787848158.877:17650): avc: denied { read write } for pid=15805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.587219][ T42] audit: type=1400 audit(1787848158.877:17651): avc: denied { open } for pid=15805 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.613300][ T42] audit: type=1400 audit(1787848158.877:17652): avc: denied { ioctl } for pid=15805 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.787723][T17529] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2999'. [ 476.856058][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3000'. [ 476.881434][ T1347] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 477.041702][ T1347] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 477.055571][ T1347] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 477.070063][ T1347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.086479][ T1347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.098514][ T1347] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 477.127911][T17540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 477.138874][ T1347] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 477.146270][ T1347] usb 10-1: Manufacturer: syz [ 477.153611][ T1347] usb 10-1: config 0 descriptor?? [ 477.583154][ T1347] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 477.634335][ T1347] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 477.886743][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2998'. [ 477.951647][ T41] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 478.001639][ T34] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 478.103507][ T41] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 478.109999][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.118141][ T41] usb 9-1: Product: syz [ 478.120003][ T41] usb 9-1: Manufacturer: syz [ 478.122542][ T41] usb 9-1: SerialNumber: syz [ 478.131953][ T41] usb 9-1: config 0 descriptor?? [ 478.151203][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 478.157621][ T34] usb 12-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 478.166131][ T34] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 478.178221][ T34] usb 12-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.191481][ T34] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.198320][ T34] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 478.209375][ T34] usb 12-1: config 0 interface 0 has no altsetting 0 [ 478.216112][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.219285][ T34] usb 12-1: Product: syz [ 478.223064][ T34] usb 12-1: Manufacturer: syz [ 478.227127][ T34] usb 12-1: SerialNumber: syz [ 478.239749][ T34] usb 12-1: config 0 descriptor?? [ 478.248202][T17571] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 478.345669][T17569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.349889][T17569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.470337][T17571] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 478.499060][ T34] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input50 [ 478.733701][T17581] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 478.845072][ T24] usb 12-1: USB disconnect, device number 16 [ 478.952703][T17578] null_blk: disk nullb2 created [ 478.975585][ T5123] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 478.996765][T15792] usb 9-1: USB disconnect, device number 31 [ 479.495820][T17590] sctp: [Deprecated]: syz.5.3017 (pid 17590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.495820][T17590] Use struct sctp_sack_info instead [ 479.509657][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3017'. [ 479.519869][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3017'. [ 479.541349][ T24] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 479.562284][T17591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=17591 comm=syz.5.3017 [ 479.574734][ T41] usb 10-1: USB disconnect, device number 22 [ 479.612651][T12797] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.622186][T12797] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.633018][T12798] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.642727][T12798] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.671921][ T24] usb 12-1: device descriptor read/64, error -71 [ 479.921384][ T24] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 480.052298][ T24] usb 12-1: device descriptor read/64, error -71 [ 480.070093][T17605] netlink: 'syz.4.3021': attribute type 11 has an invalid length. [ 480.073876][T17604] netlink: 'syz.4.3021': attribute type 11 has an invalid length. [ 480.076964][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 480.086991][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 480.171339][ T24] usb usb12-port1: attempt power cycle [ 480.310494][T17608] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 480.391399][ T1302] block nbd0: Possible stuck request ffff8880298fe000: control (read@0,1024B). Runtime 300 seconds [ 480.395870][ T1302] block nbd0: Possible stuck request ffff8880298fe1c0: control (read@1024,1024B). Runtime 300 seconds [ 480.399982][ T1302] block nbd0: Possible stuck request ffff8880298fe380: control (read@2048,1024B). Runtime 300 seconds [ 480.404972][ T1302] block nbd0: Possible stuck request ffff8880298fe540: control (read@3072,1024B). Runtime 300 seconds [ 480.521423][ T24] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 480.551587][ T24] usb 12-1: device descriptor read/8, error -71 [ 480.791176][ T24] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 480.811612][ T24] usb 12-1: device descriptor read/8, error -71 [ 480.921419][ T24] usb usb12-port1: unable to enumerate USB device [ 480.963073][T17612] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3023'. [ 481.414014][T17620] netlink: 'syz.5.3025': attribute type 1 has an invalid length. [ 481.416899][T17620] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3025'. [ 481.487524][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 481.487536][ T42] audit: type=1400 audit(1787848163.887:17821): avc: denied { read } for pid=17631 comm="syz.4.3029" dev="nsfs" ino=4026532190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.511610][ T42] audit: type=1400 audit(1787848163.897:17822): avc: denied { map_create } for pid=17633 comm="syz.3.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.520892][ T42] audit: type=1400 audit(1787848163.897:17823): avc: denied { map_read map_write } for pid=17633 comm="syz.3.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.535171][ T42] audit: type=1400 audit(1787848163.897:17824): avc: denied { perfmon } for pid=17633 comm="syz.3.3030" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 481.552047][ T42] audit: type=1400 audit(1787848163.897:17825): avc: denied { prog_run } for pid=17633 comm="syz.3.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.573776][ T42] audit: type=1400 audit(1787848163.907:17826): avc: denied { open } for pid=17631 comm="syz.4.3029" path="net:[4026532190]" dev="nsfs" ino=4026532190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.592408][ T42] audit: type=1400 audit(1787848163.907:17827): avc: denied { mounton } for pid=17633 comm="syz.3.3030" path="/126/file0" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 481.605995][T17640] No such timeout policy "syz1" [ 481.624131][ T42] audit: type=1400 audit(1787848164.027:17828): avc: denied { read } for pid=17638 comm="syz.4.3031" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 481.659418][ T42] audit: type=1400 audit(1787848164.027:17829): avc: denied { open } for pid=17638 comm="syz.4.3031" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 481.679383][ T42] audit: type=1400 audit(1787848164.027:17830): avc: denied { ioctl } for pid=17638 comm="syz.4.3031" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 482.234405][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3035'. [ 482.958726][T17686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 483.521505][ T1347] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 483.660826][T17702] syz.7.3047 (17702): drop_caches: 0 [ 483.679851][T17702] overlayfs: failed to resolve 'lower2': -2 [ 483.683183][ T1347] usb 8-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 483.687139][ T1347] usb 8-1: config index 0 descriptor too short (expected 1572, got 36) [ 483.689840][ T1347] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.697354][ T1347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.703223][ T1347] usb 8-1: Product: syz [ 483.704681][ T1347] usb 8-1: Manufacturer: syz [ 483.706113][ T1347] usb 8-1: SerialNumber: syz [ 483.738307][T17702] overlayfs: failed to resolve 'lower2': -2 [ 483.740637][ T1347] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input51 [ 483.870080][T17714] kAFS: No cell specified [ 483.952782][T17719] xt_CT: No such helper "pptp" [ 484.244686][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 484.332227][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 486.318768][ T1347] bcm5974 8-1:1.0: could not read from device [ 486.394847][ T5123] bcm5974 8-1:1.0: could not read from device [ 486.461878][ T1347] input: failed to attach handler mousedev to device input51, error: -5 [ 486.480520][ T1347] usb 8-1: USB disconnect, device number 19 [ 486.506433][ T5123] bcm5974 8-1:1.0: could not read from device [ 486.573798][ T9428] bcm5974 8-1:1.0: could not read from device [ 486.660359][ T9428] udevd[9428]: Error opening device "/dev/input/event3": No such file or directory [ 486.664480][ T9428] udevd[9428]: Unable to EVIOCGABS device "/dev/input/event3" [ 486.667743][ T9428] udevd[9428]: Unable to EVIOCGABS device "/dev/input/event3" [ 486.678135][ T9428] udevd[9428]: Unable to EVIOCGABS device "/dev/input/event3" [ 486.682972][ T9428] udevd[9428]: Unable to EVIOCGABS device "/dev/input/event3" [ 486.710842][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 486.710855][ T42] audit: type=1400 audit(1787848169.107:17937): avc: denied { read write } for pid=15638 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 486.736692][ T42] audit: type=1400 audit(1787848169.127:17938): avc: denied { open } for pid=15638 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 486.760292][ T42] audit: type=1400 audit(1787848169.127:17939): avc: denied { ioctl } for pid=15638 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 486.778521][ T42] audit: type=1400 audit(1787848169.177:17940): avc: denied { read } for pid=17750 comm="syz.3.3057" dev="nsfs" ino=4026532252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 486.787822][ T42] audit: type=1400 audit(1787848169.177:17941): avc: denied { open } for pid=17750 comm="syz.3.3057" path="net:[4026532252]" dev="nsfs" ino=4026532252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 486.881791][T17753] openvswitch: netlink: Unknown key attributes 1 [ 497.753724][ T42] audit: type=1400 audit(1787848180.157:17942): avc: denied { execute } for pid=17755 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 497.790907][ T42] audit: type=1400 audit(1787848180.157:17943): avc: denied { execute_no_trans } for pid=17755 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 497.884025][ T42] audit: type=1400 audit(1787848180.287:17944): avc: denied { create } for pid=17756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 497.892498][ T42] audit: type=1400 audit(1787848180.287:17945): avc: denied { read write } for pid=17756 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 497.905284][ T5743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 497.906888][ T42] audit: type=1400 audit(1787848180.287:17946): avc: denied { open } for pid=17756 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 497.916647][ T42] audit: type=1400 audit(1787848180.297:17947): avc: denied { ioctl } for pid=17756 comm="syz-executor" path="socket:[87147]" dev="sockfs" ino=87147 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 497.929077][ T5743] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 497.935078][ T5743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 497.940947][ T5743] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.944162][ T5743] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 498.013802][ T42] audit: type=1400 audit(1787848180.417:17948): avc: denied { mounton } for pid=17756 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 498.060160][ T42] audit: type=1400 audit(1787848180.457:17949): avc: denied { read } for pid=5441 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 498.068209][ T42] audit: type=1400 audit(1787848180.457:17950): avc: denied { sys_module } for pid=17756 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 498.076714][ T42] audit: type=1400 audit(1787848180.457:17951): avc: denied { module_request } for pid=17756 comm="syz-executor" kmod="nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 498.093364][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3052'. [ 498.100094][T17728] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.506579][T17756] wlan0 speed is unknown, defaulting to 1000 [ 498.701173][ T41] usb 12-1: new full-speed USB device number 21 using dummy_hcd [ 498.862610][ T41] usb 12-1: not running at top speed; connect to a high speed hub [ 498.873591][ T41] usb 12-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 498.880587][ T41] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 498.898980][ T41] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.902152][ T41] usb 12-1: Product: syz [ 498.903654][ T41] usb 12-1: Manufacturer: syz [ 498.911956][ T41] usb 12-1: SerialNumber: syz [ 498.917239][ T41] oti6858 12-1:1.0: oti6858 converter detected [ 498.929008][ T41] usb 12-1: oti6858 converter now attached to ttyUSB0 [ 498.972154][T17670] syz_tun (unregistering): left allmulticast mode [ 499.363557][ T34] usb 12-1: USB disconnect, device number 21 [ 499.387166][ T34] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 499.398680][ T34] oti6858 12-1:1.0: device disconnected [ 499.528928][ T5827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.537615][ T5827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.614079][T17756] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.645926][T17756] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.648944][T17756] bridge_slave_0: entered allmulticast mode [ 499.668805][T17756] bridge_slave_0: entered promiscuous mode [ 499.704481][T17756] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.716381][T17756] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.723922][T17756] bridge_slave_1: entered allmulticast mode [ 499.733469][T17756] bridge_slave_1: entered promiscuous mode [ 499.932446][ T5827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.972357][ T5827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.018102][T17825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'. [ 500.032187][T17826] EXT4-fs (nbd4): unable to read superblock [ 500.034464][T17825] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 500.067861][T17756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.074418][T17756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.102896][T17756] team0: Port device team_slave_0 added [ 500.107924][T17756] team0: Port device team_slave_1 added [ 500.119261][ T5743] Bluetooth: hci7: command tx timeout [ 500.163756][T17756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.166555][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.169969][T17831] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 500.178669][T17756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.186963][T17756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.189899][T17756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.205907][T17756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.211875][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3072'. [ 500.277144][T17836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3074'. [ 500.386132][T17841] netlink: 604 bytes leftover after parsing attributes in process `syz.3.3074'. [ 500.651247][ T34] usb 12-1: new full-speed USB device number 22 using dummy_hcd [ 500.807344][ T34] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 500.816042][ T34] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 500.818711][ T34] usb 12-1: can't read configurations, error -71 [ 500.837982][ T5827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.851535][ T5827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.906259][T17839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3074'. [ 500.924836][T17756] hsr_slave_0: entered promiscuous mode [ 500.928909][T17756] hsr_slave_1: entered promiscuous mode [ 500.937521][T17756] debugfs: 'hsr0' already exists in 'hsr' [ 500.940555][T17756] Cannot create hsr debugfs directory [ 501.093704][T17849] fuse: Unknown parameter '' [ 501.191958][ T5827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.199895][ T5827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.673572][ T6506] smbdirect: ib_dev[syz0] removed [ 502.192320][ T5743] Bluetooth: hci7: command tx timeout [ 502.697894][T17756] netdevsim netdevsim8 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.714697][T17756] netdevsim netdevsim8 eth16 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 502.800344][ T42] kauditd_printk_skb: 186 callbacks suppressed [ 502.800358][ T42] audit: type=1400 audit(1787848185.197:18138): avc: denied { write } for pid=17903 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.835451][ T42] audit: type=1400 audit(1787848185.207:18139): avc: denied { sys_module } for pid=17901 comm="syz.3.3090" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 502.857198][ T42] audit: type=1400 audit(1787848185.217:18140): avc: denied { write } for pid=17901 comm="syz.3.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.891200][ T42] audit: type=1400 audit(1787848185.287:18141): avc: denied { create } for pid=17908 comm="syz.7.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.911002][ T42] audit: type=1400 audit(1787848185.287:18142): avc: denied { read } for pid=17908 comm="syz.7.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.941130][ T42] audit: type=1400 audit(1787848185.337:18143): avc: denied { read } for pid=17910 comm="syz.7.3092" dev="nsfs" ino=4026534401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 502.993352][ T42] audit: type=1400 audit(1787848185.337:18144): avc: denied { open } for pid=17910 comm="syz.7.3092" path="net:[4026534401]" dev="nsfs" ino=4026534401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 503.031275][ T42] audit: type=1400 audit(1787848185.337:18145): avc: denied { create } for pid=17910 comm="syz.7.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 503.078072][ T42] audit: type=1400 audit(1787848185.477:18146): avc: denied { create } for pid=17914 comm="syz.4.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 503.083958][T12797] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.092550][ T42] audit: type=1400 audit(1787848185.487:18147): avc: denied { write } for pid=17914 comm="syz.4.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 503.093345][T12797] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 503.281243][T12796] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.289548][T12796] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 503.296578][T12796] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.305877][T12796] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 20003 - 0 [ 503.310061][T12796] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.319275][T12796] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 20003 - 0 [ 503.369361][T17927] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3097'. [ 503.375059][T17927] netlink: 'syz.7.3097': attribute type 6 has an invalid length. [ 503.382762][T12775] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 503.386300][T17927] netlink: 'syz.7.3097': attribute type 5 has an invalid length. [ 503.390774][T17927] netlink: 'syz.7.3097': attribute type 4 has an invalid length. [ 503.446057][ T5827] bridge_slave_1: left allmulticast mode [ 503.449148][ T5827] bridge_slave_1: left promiscuous mode [ 503.463629][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.537007][T12775] usb 8-1: unable to get BOS descriptor or descriptor too short [ 503.546100][ T5827] bridge_slave_0: left allmulticast mode [ 503.546510][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3098'. [ 503.548467][ T5827] bridge_slave_0: left promiscuous mode [ 503.550745][T12775] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.565877][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.576419][T12775] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 503.584233][T12775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.590169][T12775] usb 8-1: Product: syz [ 503.594205][T12775] usb 8-1: Manufacturer: syz [ 503.597127][T12775] usb 8-1: SerialNumber: syz [ 503.672219][ T5827] pim6reg: left allmulticast mode [ 503.827973][T12775] cdc_ncm 8-1:1.0: bind() failure [ 503.840728][T12775] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 503.855167][T12775] cdc_ncm 8-1:1.1: bind() failure [ 503.903874][T12775] usb 8-1: USB disconnect, device number 20 [ 504.040050][T17948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 504.271807][ T5743] Bluetooth: hci7: command tx timeout [ 504.367324][T17954] deleting an unspecified loop device is not supported. [ 506.351372][ T5743] Bluetooth: hci7: command tx timeout [ 506.484339][ T5827] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 506.490078][ T5827] bridge1 (unregistering): left promiscuous mode [ 506.962193][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.123471][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.265311][ T5827] bond0 (unregistering): Released all slaves [ 507.387449][ T5827] bond1 (unregistering): Released all slaves [ 507.516888][ T5827] bond2 (unregistering): Released all slaves [ 507.770943][T17756] netdevsim netdevsim8 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.774432][T17756] netdevsim netdevsim8 eth15 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 507.856580][ T42] kauditd_printk_skb: 72 callbacks suppressed [ 507.856593][ T42] audit: type=1400 audit(1787848190.257:18220): avc: denied { unmount } for pid=17170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 507.897523][ T42] audit: type=1400 audit(1787848190.267:18221): avc: denied { read } for pid=5441 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 507.931173][ T42] audit: type=1400 audit(1787848190.277:18222): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.961557][ T42] audit: type=1400 audit(1787848190.277:18223): avc: denied { search } for pid=5441 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.981366][ T42] audit: type=1400 audit(1787848190.277:18224): avc: denied { search } for pid=5441 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.996739][ T42] audit: type=1400 audit(1787848190.277:18225): avc: denied { read } for pid=5441 comm="dhcpcd" name="n81" dev="tmpfs" ino=12789 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.011249][ T42] audit: type=1400 audit(1787848190.277:18226): avc: denied { open } for pid=5441 comm="dhcpcd" path="/run/udev/data/n81" dev="tmpfs" ino=12789 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.033938][ T42] audit: type=1400 audit(1787848190.277:18227): avc: denied { getattr } for pid=5441 comm="dhcpcd" path="/run/udev/data/n81" dev="tmpfs" ino=12789 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.059857][ T42] audit: type=1400 audit(1787848190.327:18228): avc: denied { open } for pid=15805 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.065456][T17969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3105'. [ 508.068038][ T42] audit: type=1400 audit(1787848190.327:18229): avc: denied { ioctl } for pid=15805 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.157886][T17756] netdevsim netdevsim8 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.192062][T17756] netdevsim netdevsim8 eth14 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 508.282653][T17977] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 508.412241][T17969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17969 comm=syz.3.3105 [ 508.432384][T17975] can0: slcan on ttyS3. [ 508.871827][ T50] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 509.021412][ T50] usb 12-1: Using ep0 maxpacket: 8 [ 509.026079][ T50] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 509.033354][ T50] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 509.038327][ T50] usb 12-1: config 0 has no interface number 0 [ 509.048165][ T50] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.055517][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.065816][ T50] usb 12-1: config 0 descriptor?? [ 509.110308][T17756] netdevsim netdevsim8 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.113840][T17756] netdevsim netdevsim8 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 509.129923][ T50] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 509.176918][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 509.275089][T17993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.287051][T17993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.392489][T17968] can0 (unregistered): slcan off ttyS3. [ 509.499657][T18009] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3109'. [ 509.516059][T18009] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3109'. [ 509.519826][T18009] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3109'. [ 509.542510][T18009] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3109'. [ 509.743878][ T5827] hsr_slave_0: left promiscuous mode [ 509.772929][ T5827] hsr_slave_1: left promiscuous mode [ 509.778754][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.782512][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.812613][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.818159][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.926559][ T5827] veth1_macvtap: left promiscuous mode [ 509.928729][ T5827] veth0_macvtap: left promiscuous mode [ 510.569048][ T1302] block nbd0: Possible stuck request ffff8880298fe000: control (read@0,1024B). Runtime 330 seconds [ 510.573514][ T1302] block nbd0: Possible stuck request ffff8880298fe1c0: control (read@1024,1024B). Runtime 330 seconds [ 510.577104][ T1302] block nbd0: Possible stuck request ffff8880298fe380: control (read@2048,1024B). Runtime 330 seconds [ 510.580864][ T1302] block nbd0: Possible stuck request ffff8880298fe540: control (read@3072,1024B). Runtime 330 seconds [ 510.706662][ T34] usb 12-1: USB disconnect, device number 24 [ 511.760667][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 511.829460][T17756] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 511.891248][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.902278][T17756] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 511.944586][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.947797][T17756] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 511.989498][T18084] input: syz0 as /devices/virtual/input/input52 [ 511.996772][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.006942][T17756] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 512.045165][T17756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.108049][T18088] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 512.108049][T18088] [ 512.184908][T18101] macsec1: entered promiscuous mode [ 512.188984][T18101] macsec1: entered allmulticast mode [ 512.208984][T17756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.334459][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 512.342287][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 512.357452][T17756] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.373437][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.375959][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.393344][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 512.397674][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.399989][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.406376][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 512.422124][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 512.559262][T18118] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 512.583469][T18118] bond1 (unregistering): Released all slaves [ 512.869056][ T42] kauditd_printk_skb: 191 callbacks suppressed [ 512.869069][ T42] audit: type=1400 audit(1787848195.267:18421): avc: denied { mounton } for pid=18129 comm="syz.4.3138" path="/158/file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 512.871981][T18136] openvswitch: netlink: Duplicate or invalid key (type 0). [ 512.911647][ T42] audit: type=1400 audit(1787848195.267:18422): avc: denied { mount } for pid=18129 comm="syz.4.3138" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 512.917695][T18141] netlink: 'syz.3.3140': attribute type 11 has an invalid length. [ 512.924159][ T42] audit: type=1400 audit(1787848195.267:18423): avc: denied { read } for pid=18129 comm="syz.4.3138" dev="nsfs" ino=4026532190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 512.941201][ T42] audit: type=1400 audit(1787848195.267:18424): avc: denied { open } for pid=18129 comm="syz.4.3138" path="net:[4026532190]" dev="nsfs" ino=4026532190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 512.955651][ T42] audit: type=1400 audit(1787848195.297:18425): avc: denied { create } for pid=18129 comm="syz.4.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 512.971642][ T42] audit: type=1400 audit(1787848195.317:18426): avc: denied { create } for pid=18140 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 512.992058][ T42] audit: type=1400 audit(1787848195.317:18427): avc: denied { getopt } for pid=18140 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 512.998164][ T42] audit: type=1400 audit(1787848195.317:18428): avc: denied { write } for pid=18140 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 513.021147][ T42] audit: type=1400 audit(1787848195.327:18429): avc: denied { create } for pid=18135 comm="syz.7.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.027607][ T42] audit: type=1400 audit(1787848195.327:18430): avc: denied { module_request } for pid=18135 comm="syz.7.3139" kmod="net-pf-10-proto-2-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 513.246927][ T5441] 8021q: adding VLAN 0 to HW filter on device eth6 [ 513.351966][T17756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.615238][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3147'. [ 513.665811][T18171] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input54 [ 513.791214][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 514.257139][T17756] veth0_vlan: entered promiscuous mode [ 514.298053][T17756] veth1_vlan: entered promiscuous mode [ 514.310585][T18212] nbd: must specify a device to reconfigure [ 514.345543][T17756] veth0_macvtap: entered promiscuous mode [ 514.404695][T17756] veth1_macvtap: entered promiscuous mode [ 514.465313][T18219] netlink: zone id is out of range [ 514.470755][T18219] netlink: zone id is out of range [ 514.476796][T18219] netlink: zone id is out of range [ 514.478398][T18219] netlink: zone id is out of range [ 514.483165][T18219] netlink: zone id is out of range [ 514.484825][T18219] netlink: zone id is out of range [ 514.489594][T18219] netlink: zone id is out of range [ 514.492125][T18219] netlink: zone id is out of range [ 514.500148][T18219] netlink: zone id is out of range [ 514.663382][T17756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.717467][T17756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.802407][T12797] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.808724][T12797] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20003 - 0 [ 514.821384][T18232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3159'. [ 514.892418][T18235] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.896558][T18235] block device autoloading is deprecated and will be removed. [ 515.022277][ T5827] bridge_slave_1: left allmulticast mode [ 515.027365][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.039535][ T5729] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 515.092913][ T5827] bridge_slave_0: left allmulticast mode [ 515.097283][ T5827] bridge_slave_0: left promiscuous mode [ 515.099693][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.302752][T18275] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3169'. [ 515.551292][T18287] netlink: 'syz.3.3171': attribute type 10 has an invalid length. [ 515.619876][T18288] netlink: 'syz.3.3171': attribute type 10 has an invalid length. [ 515.762591][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.822383][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.843418][ T5827] bond0 (unregistering): Released all slaves [ 515.904002][T18275] ima: policy update completed [ 516.033450][T12796] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.038583][T12796] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20003 - 0 [ 516.042265][T12796] netdevsim netdevsim1 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.045540][T12796] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 20003 - 0 [ 516.135172][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.158807][T18287] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 516.167211][T18287] team0: Port device netdevsim1 added [ 516.170185][T18288] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 516.254734][T18288] team0: Port device netdevsim1 removed [ 516.259315][T18288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.263105][T18288] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 516.443864][ T5729] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 516.654848][T12798] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.671352][T12798] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20003 - 0 [ 516.743897][T12796] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.776651][T12796] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.780653][T12796] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.789672][T12796] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.886576][ T5729] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 517.050568][ T6510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.072778][ T6510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.279385][T18322] trusted_key: syz.4.3180 sent an empty control message without MSG_MORE. [ 517.296571][ T6510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.300445][ T6510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.441679][ T5827] hsr_slave_0: left promiscuous mode [ 517.447786][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.493234][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.041728][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 518.081995][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 518.187817][ T5827] team0 (unregistering): Port device dummy0 removed [ 518.397403][ T42] kauditd_printk_skb: 256 callbacks suppressed [ 518.397415][ T42] audit: type=1400 audit(1787848200.797:18687): avc: denied { mounton } for pid=17756 comm="syz-executor" path="/syzkaller.xo6nvv/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 518.416467][ T42] audit: type=1400 audit(1787848200.807:18688): avc: denied { mount } for pid=17756 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 518.424331][ T42] audit: type=1400 audit(1787848200.807:18689): avc: denied { mount } for pid=17756 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 518.432401][ T42] audit: type=1400 audit(1787848200.817:18690): avc: denied { mounton } for pid=17756 comm="syz-executor" path="/syzkaller.xo6nvv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 518.445440][ T42] audit: type=1400 audit(1787848200.817:18691): avc: denied { mounton } for pid=17756 comm="syz-executor" path="/syzkaller.xo6nvv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=91006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 518.457394][ T42] audit: type=1400 audit(1787848200.817:18692): avc: denied { unmount } for pid=17756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 518.465629][ T42] audit: type=1400 audit(1787848200.857:18693): avc: denied { mounton } for pid=17756 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 518.493736][ T42] audit: type=1400 audit(1787848200.857:18694): avc: denied { mount } for pid=17756 comm="syz-executor" name="/" dev="gadgetfs" ino=9607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 518.509538][ T42] audit: type=1400 audit(1787848200.857:18695): avc: denied { mount } for pid=17756 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 518.523882][ T42] audit: type=1400 audit(1787848200.857:18696): avc: denied { mounton } for pid=17756 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 518.668533][T18346] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 518.726739][T18345] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 518.729287][T18345] overlayfs: failed to set xattr on upper [ 518.758463][T18345] overlayfs: ...falling back to redirect_dir=nofollow. [ 518.761450][T18353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 518.763729][T18345] overlayfs: ...falling back to index=off. [ 518.772434][T18345] overlayfs: ...falling back to uuid=null. [ 518.780093][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 518.842968][T18345] Bluetooth: MGMT ver 1.23 [ 518.848310][T18345] CIFS: Attempting to mount //127.0.0.1/share [ 518.852675][T18345] CIFS: VFS: Error connecting to socket. Aborting operation. [ 518.855560][T18345] CIFS: VFS: cifs_mount failed w/return code = -111 [ 518.925419][ T5729] Bluetooth: hci6: command 0x0406 tx timeout [ 519.117702][ T5441] 8021q: adding VLAN 0 to HW filter on device eth7 [ 519.301242][T18375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 519.391309][ T43] INFO: task syz.9.2445:15287 blocked in I/O wait for more than 143 seconds. [ 519.394205][ T43] Tainted: G L syzkaller #0 [ 519.396553][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.399258][ T43] task:syz.9.2445 state:D stack:25040 pid:15287 tgid:15286 ppid:12607 task_flags:0x400140 flags:0x00080002 [ 519.412375][ T5441] 8021q: adding VLAN 0 to HW filter on device eth8 [ 519.520015][ T43] Call Trace: [ 519.521449][ T43] [ 519.522496][ T43] __schedule+0x1259/0x6920 [ 519.524038][ T43] ? __lock_acquire+0x4c5/0x1ec0 [ 519.525697][ T43] ? __pfx___schedule+0x10/0x10 [ 519.527348][ T43] ? find_held_lock+0x2b/0x80 [ 519.529003][ T43] ? schedule+0x225/0x2c0 [ 519.541193][ T43] schedule+0xdd/0x2c0 [ 519.542631][ T43] io_schedule+0x8a/0xf0 [ 519.546424][ T43] folio_wait_bit_common+0x3c0/0xac0 [ 519.548333][ T43] ? folio_wait_bit_common+0x2a0/0xac0 [ 519.564018][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 519.566018][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 519.568292][ T43] ? __pfx___might_resched+0x10/0x10 [ 519.570209][ T43] ? compaction_free+0x17d/0x470 [ 519.593061][ T43] migrate_pages_batch+0x81d/0x46f0 [ 519.634278][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 519.641316][ T43] ? __pfx_compaction_free+0x10/0x10 [ 519.645849][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 519.653242][ T43] ? rcu_is_watching+0x13/0xc0 [ 519.655237][ T43] ? __pfx_clockevents_program_event+0x10/0x10 [ 519.664699][ T43] migrate_pages_sync+0x4db/0x880 [ 519.669415][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 519.676482][ T43] ? __pfx_compaction_free+0x10/0x10 [ 519.678407][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 519.691322][ T43] migrate_pages+0x1a83/0x2850 [ 519.692944][ T43] ? isolate_migratepages_block+0xd74/0x6200 [ 519.694879][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 519.696590][ T43] ? __pfx_compaction_free+0x10/0x10 [ 519.698495][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 519.700178][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 519.707059][ T43] ? __pfx___might_resched+0x10/0x10 [ 519.709548][ T43] ? putback_movable_pages+0x7f1/0xc00 [ 519.711441][ T43] compact_zone+0x2643/0x4640 [ 519.713040][ T43] ? debug_object_free+0x295/0x550 [ 519.714812][ T43] ? __pfx_compact_zone+0x10/0x10 [ 519.716551][ T43] compact_node+0x17f/0x2c0 [ 519.718271][ T43] ? __pfx_compact_node+0x10/0x10 [ 519.720081][ T43] ? __lru_add_drain_all+0x4a6/0x820 [ 519.722059][ T5441] 8021q: adding VLAN 0 to HW filter on device eth9 [ 519.724928][ T43] sysctl_compaction_handler+0x141/0x210 [ 519.726698][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 519.730935][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 519.733171][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 519.734892][ T43] iter_file_splice_write+0x830/0x10b0 [ 519.736859][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 519.738947][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 519.742732][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 519.745334][ T43] direct_splice_actor+0x192/0x690 [ 519.747319][ T43] splice_direct_to_actor+0x345/0xa30 [ 519.749421][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 519.751844][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 519.753794][ T43] do_splice_direct+0x174/0x240 [ 519.755532][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 519.757480][ T43] ? avc_policy_seqno+0x9/0x20 [ 519.759180][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 519.761857][ T43] ? rw_verify_area+0xce/0x6d0 [ 519.763541][ T43] do_sendfile+0xadc/0xe20 [ 519.765177][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 519.766813][ T43] __x64_sys_sendfile64+0x154/0x220 [ 519.768635][ T43] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 519.770861][ T43] do_syscall_64+0x123/0x790 [ 519.773163][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.775321][ T43] RIP: 0033:0x7f6a21d9e0d9 [ 519.776902][ T43] RSP: 002b:00007f6a22bb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 519.780112][ T43] RAX: ffffffffffffffda RBX: 00007f6a22025fa0 RCX: 00007f6a21d9e0d9 [ 519.784495][ T43] RDX: 00002000000000c0 RSI: 000000000000000c RDI: 000000000000000e [ 519.793519][ T43] RBP: 00007f6a21e35024 R08: 0000000000000000 R09: 0000000000000000 [ 519.798314][ T43] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 519.806610][ T43] R13: 00007f6a22026038 R14: 00007f6a22025fa0 R15: 00007ffc1b873b18 [ 519.811894][ T43] [ 519.812978][ T43] [ 519.812978][ T43] Showing all locks held in the system: [ 519.821897][ T43] locks held by khungtaskd/43: 1, last CPU#2: [ 519.826199][ T43] #0: ffffffff8ede9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 519.831863][ T43] locks held by kworker/u32:4/5827: 3, last CPU#0: [ 519.836305][ T43] #0: ffff88801d6a7140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 519.841529][ T43] #1: ffffc9000424fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 519.845304][ T43] #2: ffffffff90c9a088 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 519.848605][ T43] locks held by kworker/u33:23/6503: 2, on CPU#3: [ 519.850723][ T43] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 519.855067][ T43] #1: ffffc9000ce37d08 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 519.858987][ T43] locks held by kworker/u33:26/6506: 2, on CPU#3: [ 519.862224][ T43] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 519.866099][ T43] #1: ffffc9000d39fd08 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 519.869689][ T43] locks held by kworker/u33:30/6510: 2, on CPU#2: [ 519.872447][ T43] #0: ffff8880245a2140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 519.875864][ T43] #1: ffffc9000f317d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 519.880070][ T43] locks held by udevd/9195: 1, on CPU#3: [ 519.882506][ T43] #0: ffff88802975d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 519.885775][ T43] locks held by syz.9.2445/15287: 1, on CPU#2: [ 519.887737][ T43] #0: ffff888042eec460 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 519.891793][ T43] locks held by syz.0.2506/15520: 1, on CPU#0: [ 519.893867][ T43] #0: ffff88802975d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 519.897030][ T43] locks held by syz.4.3189/18374: 1, on CPU#3: [ 519.902942][ T43] #0: ffffffff8edf56b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 519.910366][ T43] locks held by dhcpcd-run-hook/18399: 1, last CPU#2: [ 519.916026][ T43] #0: ffff888026f27678 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 519.922694][ T43] [ 519.923507][ T43] ============================================= [ 519.923507][ T43] [ 519.931613][ T43] NMI backtrace for cpu 2 [ 519.931629][ T43] CPU: 2 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 519.931645][ T43] Tainted: [L]=SOFTLOCKUP [ 519.931649][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.931657][ T43] Call Trace: [ 519.931662][ T43] [ 519.931668][ T43] dump_stack_lvl+0x100/0x190 [ 519.931690][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 519.931708][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.931726][ T43] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 519.931744][ T43] sys_info+0x141/0x190 [ 519.931759][ T43] watchdog+0xcb1/0x1030 [ 519.931781][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.931798][ T43] ? __pfx_watchdog+0x10/0x10 [ 519.931815][ T43] ? __kthread_parkme+0x18f/0x230 [ 519.931828][ T43] ? kthread+0x13a/0x450 [ 519.931840][ T43] ? __pfx_watchdog+0x10/0x10 [ 519.931856][ T43] kthread+0x373/0x450 [ 519.931869][ T43] ? __pfx_kthread+0x10/0x10 [ 519.931882][ T43] ret_from_fork+0x730/0xd60 [ 519.931901][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 519.931918][ T43] ? __switch_to+0x800/0x10f0 [ 519.931932][ T43] ? __pfx_kthread+0x10/0x10 [ 519.931945][ T43] ret_from_fork_asm+0x1a/0x30 [ 519.931962][ T43] [ 519.931967][ T43] Sending NMI from CPU 2 to CPUs 0,3: [ 519.976714][ C0] NMI backtrace for cpu 0 [ 519.976729][ C0] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.976745][ C0] Tainted: [L]=SOFTLOCKUP [ 519.976749][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.976756][ C0] Workqueue: netns cleanup_net [ 519.976772][ C0] RIP: 0010:lock_acquire+0x1e5/0x370 [ 519.976790][ C0] Code: c7 81 dd 3a 8e 48 83 c4 28 e8 37 a4 e0 09 b8 ff ff ff ff 65 0f c1 05 52 d1 a1 12 83 f8 01 4c 8b 14 24 0f 85 57 01 00 00 9c 58 c4 02 0f 85 3a 01 00 00 4d 85 d2 0f 84 67 fe ff ff fb e9 61 fe [ 519.976800][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00000046 [ 519.976808][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000100 [ 519.976815][ C0] RDX: 0000000000000102 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 519.976821][ C0] RBP: ffff8880138ed098 R08: 000000000005d189 R09: 0000000000000a43 [ 519.976827][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000000 [ 519.976833][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 519.976839][ C0] FS: 0000000000000000(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 519.976862][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.976870][ C0] CR2: 00007f7456b5da08 CR3: 00000001218cc000 CR4: 0000000000352ef0 [ 519.976876][ C0] Call Trace: [ 519.976881][ C0] [ 519.976886][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 519.976900][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 519.976915][ C0] _raw_spin_lock+0x2e/0x40 [ 519.976930][ C0] ? gate_timer_func+0x2e/0x510 [ 519.976944][ C0] gate_timer_func+0x2e/0x510 [ 519.976960][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 519.976974][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 519.976988][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 519.977001][ C0] handle_softirqs+0x1e6/0x9d0 [ 519.977017][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 519.977032][ C0] ? batadv_tt_local_table_free+0x255/0x450 [ 519.977048][ C0] do_softirq+0xaf/0xf0 [ 519.977062][ C0] [ 519.977065][ C0] [ 519.977069][ C0] __local_bh_enable_ip+0xff/0x120 [ 519.977084][ C0] batadv_tt_local_table_free+0x255/0x450 [ 519.977105][ C0] batadv_tt_free+0x70/0xad0 [ 519.977120][ C0] ? batadv_tt_local_remove+0x363/0x7f0 [ 519.977137][ C0] batadv_mesh_free+0x10d/0x210 [ 519.977149][ C0] ? __pfx_batadv_meshif_free+0x10/0x10 [ 519.977161][ C0] batadv_meshif_free+0x15/0x20 [ 519.977173][ C0] netdev_run_todo+0x9b7/0x1600 [ 519.977186][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 519.977196][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 519.977208][ C0] ? unregister_netdevice_queue+0x22e/0x3c0 [ 519.977219][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 519.977233][ C0] default_device_exit_batch+0x90c/0xbd0 [ 519.977245][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 519.977257][ C0] ? __pfx___might_resched+0x10/0x10 [ 519.977272][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 519.977284][ C0] ops_undo_list+0x363/0xab0 [ 519.977296][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 519.977306][ C0] ? cleanup_net+0x332/0x920 [ 519.977317][ C0] ? idr_destroy+0x62/0x2e0 [ 519.977331][ C0] cleanup_net+0x499/0x920 [ 519.977343][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 519.977355][ C0] ? process_one_work+0x906/0x1b10 [ 519.977369][ C0] process_one_work+0xac7/0x1b10 [ 519.977384][ C0] ? irqentry_exit+0x24d/0xa10 [ 519.977394][ C0] ? __pfx_process_one_work+0x10/0x10 [ 519.977409][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 519.977421][ C0] worker_thread+0x5ef/0xe50 [ 519.977435][ C0] ? __pfx_worker_thread+0x10/0x10 [ 519.977448][ C0] ? kthread+0x13a/0x450 [ 519.977460][ C0] ? __pfx_worker_thread+0x10/0x10 [ 519.977472][ C0] kthread+0x373/0x450 [ 519.977483][ C0] ? __pfx_kthread+0x10/0x10 [ 519.977494][ C0] ret_from_fork+0x730/0xd60 [ 519.977510][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 519.977526][ C0] ? __switch_to+0x800/0x10f0 [ 519.977538][ C0] ? __pfx_kthread+0x10/0x10 [ 519.977549][ C0] ret_from_fork_asm+0x1a/0x30 [ 519.977562][ C0] [ 519.977567][ C3] NMI backtrace for cpu 3 [ 519.977580][ C3] CPU: 3 UID: 0 PID: 6503 Comm: kworker/u33:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.977595][ C3] Tainted: [L]=SOFTLOCKUP [ 519.977599][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.977611][ C3] Workqueue: events_unbound nsim_dev_trap_report_work [ 519.977628][ C3] RIP: 0010:lock_release+0xa7/0x310 [ 519.977644][ C3] Code: 48 81 3b 80 99 8c 94 0f 84 14 01 00 00 9c 41 5e fa 48 c7 c7 c8 a7 4c 8e e8 f6 9f e0 09 65 ff 05 17 cd a1 12 8b 35 bd 30 5d 0f 44 24 08 01 00 00 00 85 f6 0f 84 ad 00 00 00 45 8b bc 24 a0 0b [ 519.977654][ C3] RSP: 0018:ffffc900006f8970 EFLAGS: 00000002 [ 519.977662][ C3] RAX: 0000000000000003 RBX: ffffffff8ede9d40 RCX: ffffffff91e6600a [ 519.977668][ C3] RDX: 0000000000000102 RSI: 0000000000000001 RDI: ffffffff8c615f80 [ 519.977674][ C3] RBP: ffffffff81b8c46e R08: 0000000000000001 R09: 0000000000000007 [ 519.977680][ C3] R10: 0000000000000200 R11: 000000000000c957 R12: ffff888035550000 [ 519.977686][ C3] R13: ffffc900006f8a28 R14: 0000000000000202 R15: ffffc900006f8a5c [ 519.977693][ C3] FS: 0000000000000000(0000) GS:ffff8880d5ea2000(0000) knlGS:0000000000000000 [ 519.977715][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.977724][ C3] CR2: 0000564464f08ce8 CR3: 000000002c86b000 CR4: 0000000000352ef0 [ 519.977730][ C3] Call Trace: [ 519.977734][ C3] [ 519.977739][ C3] unwind_next_frame+0x3c3/0x2090 [ 519.977752][ C3] ? do_softirq+0xaf/0xf0 [ 519.977767][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 519.977781][ C3] arch_stack_walk+0x94/0xf0 [ 519.977793][ C3] ? nsim_dev_trap_report_work+0x8d6/0xd20 [ 519.977805][ C3] ? __local_bh_enable_ip+0xff/0x120 [ 519.977820][ C3] ? slab_free_after_rcu_debug+0x4c/0x170 [ 519.977834][ C3] stack_trace_save+0x8e/0xc0 [ 519.977846][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 519.977859][ C3] ? __lock_acquire+0x4c5/0x1ec0 [ 519.977874][ C3] kasan_save_stack+0x30/0x50 [ 519.977888][ C3] ? kasan_save_stack+0x30/0x50 [ 519.977901][ C3] ? kasan_save_track+0x14/0x30 [ 519.977914][ C3] ? kasan_save_free_info+0x3b/0x70 [ 519.977925][ C3] ? __kasan_slab_free+0x5f/0x80 [ 519.977938][ C3] ? kfree+0x22b/0x6c0 [ 519.977948][ C3] ? slab_free_after_rcu_debug+0x4c/0x170 [ 519.977961][ C3] ? rcu_core+0x5a2/0x10e0 [ 519.977970][ C3] ? handle_softirqs+0x1e6/0x9d0 [ 519.977984][ C3] ? do_softirq+0xaf/0xf0 [ 519.978005][ C3] kasan_save_track+0x14/0x30 [ 519.978018][ C3] kasan_save_free_info+0x3b/0x70 [ 519.978029][ C3] __kasan_slab_free+0x5f/0x80 [ 519.978044][ C3] ? free_kmem_cache_nodes+0x170/0x1a0 [ 519.978056][ C3] kfree+0x22b/0x6c0 [ 519.978066][ C3] ? rcu_core+0x59d/0x10e0 [ 519.978076][ C3] ? rcu_core+0x59d/0x10e0 [ 519.978084][ C3] slab_free_after_rcu_debug+0x4c/0x170 [ 519.978097][ C3] rcu_core+0x5a2/0x10e0 [ 519.978110][ C3] ? __pfx_rcu_core+0x10/0x10 [ 519.978121][ C3] ? mark_held_locks+0x40/0x70 [ 519.978135][ C3] handle_softirqs+0x1e6/0x9d0 [ 519.978150][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 519.978166][ C3] ? nsim_dev_trap_report_work+0x8d6/0xd20 [ 519.978178][ C3] do_softirq+0xaf/0xf0 [ 519.978193][ C3] [ 519.978196][ C3] [ 519.978200][ C3] __local_bh_enable_ip+0xff/0x120 [ 519.978216][ C3] nsim_dev_trap_report_work+0x8d6/0xd20 [ 519.978230][ C3] process_one_work+0xac7/0x1b10 [ 519.978245][ C3] ? irqentry_exit+0x24d/0xa10 [ 519.978256][ C3] ? __pfx_process_one_work+0x10/0x10 [ 519.978272][ C3] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 519.978285][ C3] worker_thread+0x5ef/0xe50 [ 519.978300][ C3] ? kthread+0x13a/0x450 [ 519.978311][ C3] ? __pfx_worker_thread+0x10/0x10 [ 519.978323][ C3] kthread+0x373/0x450 [ 519.978334][ C3] ? __pfx_kthread+0x10/0x10 [ 519.978346][ C3] ret_from_fork+0x730/0xd60 [ 519.978361][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 519.978376][ C3] ? __switch_to+0x800/0x10f0 [ 519.978388][ C3] ? __pfx_kthread+0x10/0x10 [ 519.978400][ C3] ret_from_fork_asm+0x1a/0x30 [ 519.978412][ C3] [ 520.261489][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 520.263903][ T43] CPU: 2 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 520.267226][ T43] Tainted: [L]=SOFTLOCKUP [ 520.268719][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.271744][ T43] Call Trace: [ 520.272788][ T43] [ 520.273788][ T43] dump_stack_lvl+0x100/0x190 [ 520.275309][ T43] vpanic+0x553/0x970 [ 520.276661][ T43] ? __pfx_vpanic+0x10/0x10 [ 520.278320][ T43] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 520.280548][ T43] panic+0xd1/0xe0 [ 520.282058][ T43] ? __pfx_panic+0x10/0x10 [ 520.283553][ T43] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 520.285599][ T43] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 520.287534][ T43] ? watchdog.cold+0x1ec/0x234 [ 520.289146][ T43] watchdog.cold+0x1fd/0x234 [ 520.290697][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 520.292629][ T43] ? __pfx_watchdog+0x10/0x10 [ 520.294412][ T43] ? __kthread_parkme+0x18f/0x230 [ 520.296368][ T43] ? kthread+0x13a/0x450 [ 520.298296][ T43] ? __pfx_watchdog+0x10/0x10 [ 520.299865][ T43] kthread+0x373/0x450 [ 520.301238][ T43] ? __pfx_kthread+0x10/0x10 [ 520.302894][ T43] ret_from_fork+0x730/0xd60 [ 520.304624][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 520.306290][ T43] ? __switch_to+0x800/0x10f0 [ 520.307886][ T43] ? __pfx_kthread+0x10/0x10 [ 520.309618][ T43] ret_from_fork_asm+0x1a/0x30 [ 520.311209][ T43] [ 520.312966][ T43] Kernel Offset: disabled [ 520.314554][ T43] Rebooting in 86400 seconds..