last executing test programs: 18m30.506569246s ago: executing program 4 (id=592): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x270, &(0x7f0000000380)={[{0xdc, 0x4e00, "ed5ed61432d2d9ad6aa294f0051c17f161014908bc684ebc018f98ae38a7f1a54658e9f7ed7c19e8cef8b209dcc3c2ad2643469c375ab8cf293c37c6f2f18bacb5153b59faa5290ea1839005a611c744582e1f7b2bef1ac58d3734182ec57d2e11c2b88c7a3ca585ca58eca80c9d4cd8bde68f57c712b39769c0eb24ebfb19a921a96c24e1672dc6cd47e7d296d627c0b352e452f30e2b5f064a01e7ca17a43520d8c1d271d7730e2cb003c043a878edee528d63f5884fdb45060e39f5d6ab8f765ad594cfa4bb2143dcbd4a0183f01b6cf53a877bd72db561e9668d"}, {0xa9, 0x4e00, "a450040e990d2dd1bb499f3d45fae4199215805bf47f6ce05cb81f941b138e2e09eec7e0d5cbc284825ef3a3ebbc0b6a4c512915dd55741a0b2c3c54a681715b0a9f17e95fa31e263396e11ffb7eb8ba5151b93fd50622f9fd8f59f6b784b0941f80520375cd5b861dcbdd037b6431eebecab4190b11d775b263ce761a9abb897bc6b790c255fd23c66bf1aa728a125985f3d32834191c08944c4f1033bf5239510109d1837e74c7a1"}, {0xd9, 0x4e00, "aced7299ed6124a7e47ee5025183d26f32a3446f701e306d2e0a56760b9962225df03fd09cb2b86e49853a069877cad39e1c5b064b622ea7f63e29a52b9b05573fb839c4bb542a3fefcda95864a8003efa4a457b43b6d905d24e5dbdecda5c7c15d6e6e2ce338920585d477fdc286655a7dfa541f70db87b9dad88069ef91b73cd788f355e67795da1a2a288eade07ed0721528f73794160e3671874c755cf63eaeba823cb8c507b2dab46d1987c8b29f162b6e15dc85863bbfe7565736945b5dc961982745adadb3c017d5b93b3a85852f6676129caab298a"}]}) 18m26.883965866s ago: executing program 4 (id=602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x6000000, &(0x7f0000000040)="df37a83d16428aa09f61bedc2af3a4b8eca66199b2cb8a3a88cc49ff9aa46596022b2adf752bec6e451cc9bd5bcc0c777911befc89c69922edcc", 0x3a, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000d00)="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") ptrace(0x8, r0) prlimit64(0x0, 0xa, &(0x7f0000000000)={0x1000, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x20044091) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 18m26.006630953s ago: executing program 4 (id=604): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x10, 0x80000006, 0x400000}, 0x0, 0x0) socket(0x3, 0x4, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000400)={r4, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000040)=0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88b01, 0x0) socket(0x2b, 0x80801, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000082cc089877dd0b3acb5bfcd180bee0aed97d889249d39f4afd1656d5e71ddced378539bcee98f3486a7eb63b3216927cd496f8483dd3319b633d9a176355923da7a3629be2619c733f6aae29106f38b1be23aae751ed3e1b5ebd1ab35c0e1c35b747e0c121ea0c1023007530881a950295ef88c9812e0d3748b1f5c3b0ce76d9785c68a789cb0fec80613b9550d22cce638715ecdc21e3463b34887c02aa79fdf63b"], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xc) getpid() 18m24.198924437s ago: executing program 4 (id=612): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000f042abd7000077bf70900000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18m23.398768581s ago: executing program 4 (id=615): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000200)={0x38, 0x0, 0x25, 0x2542, 0x6, 0x8, 0x7, 0x8000000000000001, 0x7f, 0x4}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x2) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) pread64(r3, &(0x7f0000019440)=""/101, 0x65, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) close(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100070000000900020073797a30000000000c00078008000600000000000500050002000000050004000000000011000300686173683a6970"], 0x58}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4004005) 18m23.279384205s ago: executing program 3 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c5, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0xa0102}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') read$usbmon(r3, &(0x7f0000000080)=""/4096, 0x1000) 18m22.918476534s ago: executing program 3 (id=620): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x5c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc4080}, 0x90) 18m22.806661507s ago: executing program 3 (id=621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xab, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbb6b6959249b379081000b0086dd600000000071110000000000000000000000000000000000ff020000000000000000000e2200719078c102000050f2ebcb825695b5d85bca6c77a900adb430b7db9046ebad8ea6a27e7f156b93e03e121f957bcdea7574df6e918a3f49451e539ec96b83cc71b987cc9c9ec87ce59d58c7f8ed4e920ceadce56a0071c291842536892a2d5fd5ba0af82878080758877940d200000000000000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048729b7178cf3558f1714ba818e72e3c3136f5e64345112a81a65071dea97752794d67df", 0x70}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x4010) 18m21.912512593s ago: executing program 3 (id=623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2ed, 0x94402) fsmount(r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x44, r3, 0x1, 0x0, 0x25dfdbfc, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}, @handle=@nsim={{0xe}, {0xfffffffffffffd82, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) 18m21.774572579s ago: executing program 3 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x81b7000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x5}, {0x5000, 0xd000, 0x9, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0xfd, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x7}, {0x7f778000, 0x2000, 0x8, 0xfb, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x7, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6a, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x100000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xeb, 0x5, 0x6, 0x0, 0xf8}, {0xeeef0000, 0x8000000, 0xd, 0x5, 0x28, 0x7, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x89}, 0x40010000, 0x0, 0xeeee8000, 0x320, 0x6, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0x0, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0x11}, {0x5000, 0x7fffffe, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0xeeee0000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x8}, {0x80a0000, 0xdddd0000, 0x9, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0xf000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xeeee8000, 0x10000, 0xb, 0x0, 0xcd, 0x6, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0xfd, 0x81, 0x1, 0xc, 0x8}, {0x100000, 0x5}, {0xeeef0000, 0xff81}, 0x80000003, 0x0, 0xd000, 0x401a1, 0x5, 0xd01, 0xeeee8000, 0x1, [0xb, 0x2, 0x0, 0x2003]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = dup(r4) fadvise64(r5, 0x8000005, 0x7, 0x1) sendmsg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="f2f6f2ba0ef183252eaf8db26823fcef50f61c3235096abb3d6aed5fff6a0eac0942d5ee4aa0289ed7f5e02572d10edb563195f50991ec", 0x37}, {&(0x7f0000000080)="0641db32ffa9dd35dbc9fd076208b27f0f60723fd97450a5ba2bc592e6bf6089bc36aa0281d9d7c96eca8affe135ad62ec9017218989d7813ac548fcf20deea5f2f696d9c4f10f6d0a66e92f7675d00c7d780c08a302692d828a21e9f93190ee6dc2b3f1cd6ef863a14962ed257d898b05935c66caf026453e8539b5e59722887e3e44042522f7fa1fa6207657a88847f352d9195199fe72aec5f930bd892f365ea842e901721f588ec41a0809219b50be3620b52c526f2cdd2f6173675f8ed6a7f7003cd4917078d7bbfa1888c556a48b2cc78ce3388c94683356a46453c38aa11bcb5ce6b33ad77042da3abf2cd5bc3367", 0xf2}, {&(0x7f00000007c0)="c1f3c0f7607c9218f92c947396761d2041d21a35bc2072ce0cd2df6c96ce2389b650a0429d9256259dfe147a6cf29d6255f8ec2584bf69a95308f3b906e96ed3171c3f0e195a06c537cce7290b9f479a3a73318403d66483ae112fa5e78c9a608e54227db8ba1d59b2bbb901060d6354575e23e9fbe16e6c3197ad36140212ae7df6e7190bf4a341eb03369a2da532b0e214afb3633ebb3cb812681f56dcc4e5fc77d57ca431", 0xa6}, {&(0x7f0000000280)="524de2bbcce5eeb36546cac7e6ae761e016e3c17c2170840ff0be01235286445b76b3a629a53c451b1129b4bdfdb1c3cf186b38aebbd4f15519879c73c6be3ee18d4d09b47e11ba36e57e2cf5a3358ceed8fbf35eaf2e3074e891c42f4facc1f7b1d3fdaba0ab3f8b98602879f2213f45805a36d9957c92b58d2d334e4bee9de44fcc630bb315b7bac425b518f157b534c8bc6e38fee8db34b141f5b8d2925e6bef652b970f71bdd59f22e58ba83a59c2cad0d9bdcad23f06c09268e95c23131", 0xc0}, {&(0x7f0000000340)="80198b443dc430ec7abf1c250c31cb197346e7d7a4fd184eae8ec72eccbb54e4e01683ec854665b2a40ad6d9ee4eefc6b24f2fbc87644e75fc5f30c82b5d055eb630a0b6f56a823c65d4a7d3f2cccfc5eec46fe757e1e7d0ebb1e0e0060c6e31ef09908500a3a15542005aa5edd0bdfe96", 0x71}, {&(0x7f00000003c0)="eb97f097d400c5723ec470c5f88f10df470f703f9a3d94136c350b27aab4987a19151c1ddbff17bd87054b38021eeb640360dc4e364bfe1b68703a545f8fe75d222497", 0x43}, {&(0x7f0000000440)="0682a1ca00fca4aa6de83aa4308dce4d6d834083d0298ebd9e69e70f1576b1f5f3683fdeeea6924076a2c78bbc57f9964d56fba2f15e6d7816b80f9e5152abebd37cd2319f4383b9fdeff50aa1c6460163ce03100dae3fa4a24194de07ce7ed1e5ba2420ac370b11a93dd091229c0e18371b36c0745ace4eea9a09c5557e0dabd00ea5d677fa65f9e9692fb9e9524c61e2dfd95a02eceb51912f0b18e73af6822d5a8fabcdd6d35218c7457bcae3b25a1e1278b442823302b70d7ce8bdac4ae64146a9246aeba3c97947589b4a53d5903d7e85a7e4c7a1bd740c561d8c1470f8605465b918c7f38fa24ce060dfe4048a7535bef54263fa19262c", 0xfa}, {&(0x7f0000000540)="ef845faf43d3d3aa9defb254380e35bfe3963f164373277e8be861f9833ad21df7ca39305b9c14536c7070d842d83ff1e4d1e54dc256cf9e239184237ef151a7", 0x40}, {&(0x7f0000000580)="626dd118e1cb19782c0e7295a1d8f1cefec7d5d7d50dddda822947c8ded6aa04eb421300d73e6970ff1deed739585d934c3807afe790c7fa9e5d88e5b17d2a383e1dd92d122dcac66ac7f4fbf4ae3990506d3b53e313d7131dd9d538df77e70f931380f1cb83057795cff33b0462fa13a8398b5bc4411cbb2abdc45eca79727988eacdcc982399b7ef3d54e19a62b720bf309498ea1c3ad28501aba61047b3065868db8b059bf842736976d959f1e818cc5221357f078b6377fa2ec731cb96e46a7c422d26316c8b9f27cf056482efde059c1490d2416655f63fd0fecd94e35bb25508e4ec761af8404093aa12b7355e4c9d91a7", 0xf4}], 0x9, &(0x7f0000000740)=[{0x38, 0x85, 0x0, "dece9fde49490fcadd0b6d415b00d54f320a4c05d3f850a091d5d479b74bc3bdcd7856ac231788"}], 0x38}, 0x1) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000001c0), 0x8) sendto$unix(r6, &(0x7f00000008c0)="760bdf9c4eda1a52a32421da38fcecac8e348e05975d1fbe82af95b3b257a96f2f8dc355cb5237d96057591e61ca0a0402ba69a94d361ebe233df88ce29e88a95df3af39e484f2ede244ea3cc4c81060bcdab1cefd90ea6f20e554732440195099d6d44ab3261fe81fd19b13525cb619e7fff4bc8fb78f43879f76e5", 0x7c, 0x8040, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) 18m21.278813284s ago: executing program 4 (id=625): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0xffffffffffffffcd, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) (async, rerun: 64) r3 = add_key$user(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="2df067d9ac0e9b8b5e018ab46023a81105da956ca3a12d73c98ababab9", 0x1d, 0xfffffffffffffffc) (rerun: 64) keyctl$dh_compute(0x17, &(0x7f0000001200)={0x0, 0x0, r3}, 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r4 = accept4$packet(r0, 0x0, &(0x7f00000001c0), 0x80000) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xc, 0x821, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x708, 0x8041, 0x43d2b36, 0x2}}) (rerun: 64) bind$packet(r4, &(0x7f00000002c0)={0x11, 0x10, r5, 0x1, 0x50, 0x6, @broadcast}, 0x14) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) syz_emit_ethernet(0x4ef, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020028"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write$binfmt_misc(r6, &(0x7f0000000000), 0x178) (async, rerun: 64) dup(0xffffffffffffffff) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4081, 0xff1}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (async, rerun: 64) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) (rerun: 64) close(r9) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) 18m21.151128257s ago: executing program 3 (id=626): mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) syz_io_uring_setup(0x8a2, &(0x7f0000000140)={0x0, 0xb4c1, 0x1000, 0x3, 0x191}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_io_uring_setup(0xbde, &(0x7f0000000080)={0x0, 0x79a4, 0x2, 0x5, 0x229d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r11, &(0x7f0000000240)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r7, 0x245}], 0x1, 0x0, 0x0, 0x0) close(0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) 17m50.96686056s ago: executing program 32 (id=622): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0xffffffffffffffc6, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x0, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40022}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$NBD_DO_IT(r1, 0xab03) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 17m50.823914418s ago: executing program 33 (id=614): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="270e28bd70000040000004"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x4800}, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = gettid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000700)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000740)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x68, 0x0, 0x3, 0x88, 0x0, @remote, @local}, {0x6e22, 0x4e24, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x61}, "3a0307f55334292858eb8823fefa1c304b7d37ba38da7aa366199c918d4b65e3a9a477a2f0a2e138c3bc8540ba42d2bfe901ae5b6cf445e48d0ad94200"}}}}}}, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x12bb) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x404c000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000004f00)={0x1, 0x2, 0x5, 0xa2ba, 0xfffffffffffffff8, 0x1, 0xffff, 0x4, 0x5, 0x2, 0x9, 0x5}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17m50.734273771s ago: executing program 34 (id=618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0c00000000000003f9ffff02ac14983d3c1c98646691e960ec80f40be0a832bda4a77bb7186d5e66510fe7e5c6c38563937b68994da5893f6fd653994b8f53826918503b077f01055aeb8ccfd8ad1911b2de67165b0d4dd287270ca0c02a762d78205e131911e2c1c6b7d259e826bf93bdf7a15623"], 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000016c0)={0x0, 0x5, 0x5, {0x5, 0x22, "c58e6d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 17m50.639901346s ago: executing program 35 (id=626): mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) syz_io_uring_setup(0x8a2, &(0x7f0000000140)={0x0, 0xb4c1, 0x1000, 0x3, 0x191}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_io_uring_setup(0xbde, &(0x7f0000000080)={0x0, 0x79a4, 0x2, 0x5, 0x229d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r11, &(0x7f0000000240)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r7, 0x245}], 0x1, 0x0, 0x0, 0x0) close(0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) 17m50.435200813s ago: executing program 36 (id=625): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0xffffffffffffffcd, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) (async, rerun: 64) r3 = add_key$user(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="2df067d9ac0e9b8b5e018ab46023a81105da956ca3a12d73c98ababab9", 0x1d, 0xfffffffffffffffc) (rerun: 64) keyctl$dh_compute(0x17, &(0x7f0000001200)={0x0, 0x0, r3}, 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r4 = accept4$packet(r0, 0x0, &(0x7f00000001c0), 0x80000) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xc, 0x821, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x708, 0x8041, 0x43d2b36, 0x2}}) (rerun: 64) bind$packet(r4, &(0x7f00000002c0)={0x11, 0x10, r5, 0x1, 0x50, 0x6, @broadcast}, 0x14) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) syz_emit_ethernet(0x4ef, &(0x7f00000009c0)=ANY=[@ANYBLOB="e727dc071f80ffffffffffff86cba49907a604b92c03cb697a653e336f00000050f0b551f3e68af898b2165f0000000000ff0200000000000000000000000000016204002e37664e389b769b6cd723e63165e99482228ea0823e397de9e57a53eba2f5859884b21b4cadf58f192a78e50579ead091f73ce8437cd045a9d0c5e7557fabdb92a9019cb7444b931b7d3cb61e2d06c3eebb70cbe73f627767b3bf68d6649d7235a3b16eeb12379480111b2f4b8424c96b3e4ec3d1dbccee7dd6959a2ede25358c5c60dda22714984cf677d54b862f30a821a7e83ac394ff526929dfb83d019c00c479b5958a66168d13c58d65bc4ba72a123d4647234ede16c2f179db2120d91d68a4e841a72fc52b0b27e671c2722b9443c699e6431e031e1fee05bc3e808af3595ab61f7715446cf17ecb5386555192b4ec5fface157cdd0732c0d3b79e50288467b8474e9219530ac62c969cd2eedbfa57182ff5364656c9533c90bbc5d9de1ed3f34237244d7555b303d968b3dd4ece81fa79fb9feb5dbb3733e1e0cd9d85418ed59f18d4a1af9213451c3ee2d0500365b5a874b48ec3de898ec58d2634254e39fd015d8d0f7d395528752303c48928fb88bfa80198677ba86c15b7f800b7af54f0d565276ec53f181a82ea3c0f04be4ce1d2815069ca221422ec27fb6593a0fe78f81df90345be583a1e0852"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020028"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write$binfmt_misc(r6, &(0x7f0000000000), 0x178) (async, rerun: 64) dup(0xffffffffffffffff) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4081, 0xff1}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (async, rerun: 64) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) (rerun: 64) close(r9) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) 6m29.687567831s ago: executing program 5 (id=3161): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x1, 0x10022, 0x0) shutdown(r1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x0, 0x4, 0x9, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) 6m29.510077858s ago: executing program 5 (id=3162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) setsockopt(r4, 0x84, 0x7f, 0x0, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r6, 0x2}, &(0x7f00000000c0)=0x8) r7 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x25, 0x2, 0x3, "a677c17a5a000000000000000000000000000000000000000000004000", 0x31324d59}) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r8, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 6m26.862366331s ago: executing program 5 (id=3171): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="308050dd35e5d2d120270b8cbc5998a3ba40c3772aef4ce73d592fa052469e8ab5f3e6f428c0fa4a333001bf48c849c382bed6ad6c3622b6129dbcb838eb4737343d394b2b570f", 0x47, r0}, 0x68) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 6m26.666625716s ago: executing program 5 (id=3172): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x200000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x4, 0xc9, &(0x7f0000000080)="a4a0bf521e62877dc0317ae8ce5025d590e2dbf63cf464cfd2cd629ecd1ee7f19b7577553fe60291d7f5c71224554cb80e4e64ff5a2a05ef1a1958da65adbafbdbde954b78e59bafa07f398a61cf63d4c615972bda9ec46b8dd34ff9194ed69489bf70cb050ca35d519263716ebc7d9c6472574dff0acd353f25640b02979da741e35bafb5c159f1e25d11a3b2a10905096493e53da305045668382a02bf319e80195c820e330d0e3f7ed6af3d12ad575c0ae3ffc9495c5e2fe749169b1d302b556ac816b46651d48b"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000280), &(0x7f0000000000)=@ng={0x4, 0x22}, 0x2, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/4096, 0x1000) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r2, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r2}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x4a49, 0x4) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x101, 0x80) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000002c0)={0x0, 0xb5, &(0x7f0000000200)="2a21e1ba0f8b9c3d0b5602513396fd8a7122d0689ae0bcc4e193c5f90fbf1ad661ab5c92ede919380987e30d0f93394b4deb68d6e51e9cbae9e8e437069f616f9e56a08ff18ada2636aa74cd01000fdd02fb4b3b1498b95958c26dfc2e02f5d0d0d14a68cf1fe00168becb37162d08872a6685be14dcc1d2bec658dd3ba3ac8659d7a08a463b16adc4283bfae2332ecc5358b60fb8edcb1a7be33f1df38a33ddb3079d7fac9f8a13c624fa9b0ca903ba3c69502e12"}) 6m26.526346603s ago: executing program 5 (id=3173): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000000, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r2 = syz_io_uring_setup(0x238, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x20, 0x1, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f00000006c0)="493d72f4b067b4d738686977534332e6fe2f7726c53d86149a16c217605187d90d608d611fca8ddaaad5a760", 0x2c}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'pim6reg\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000190000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040b0}, 0x4890) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000140)=[{0x6, 0x11, 0x4, 0x2}]}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote, 0xfffffffb}, r1}}, 0x48) 6m26.015073096s ago: executing program 5 (id=3178): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, 0x0, 0x24040004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r9}, &(0x7f0000000a80), &(0x7f0000000ac0)=r8}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000280)=""/164, 0xa4, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008, r8}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r10, 0x4) 6m25.640332379s ago: executing program 37 (id=3178): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, 0x0, 0x24040004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r9}, &(0x7f0000000a80), &(0x7f0000000ac0)=r8}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000280)=""/164, 0xa4, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008, r8}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r10, 0x4) 6m4.812943827s ago: executing program 6 (id=3256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 6m4.581973287s ago: executing program 6 (id=3259): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001400010025bd7000fddbdf25011f08104e264e2203000000060000000e000000c3000000060000000e0000000000004007", @ANYRES32=0x0, @ANYBLOB="fffbfcecc757e1bf010000000400000009000000c70000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 6m4.47276646s ago: executing program 6 (id=3260): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000000, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r2 = syz_io_uring_setup(0x238, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x20, 0x1, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f00000006c0)="493d72f4b067b4d738686977534332e6fe2f7726c53d86149a16c217605187d90d608d611fca8ddaaad5a760", 0x2c}], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'pim6reg\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000190000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040b0}, 0x4890) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000140)=[{0x6, 0x11, 0x4, 0x2}]}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote, 0xfffffffb}, r1}}, 0x48) 6m0.818741814s ago: executing program 6 (id=3273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8d0d, 0x8009, 0x8, 0x9}, &(0x7f0000000080)=0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f000031e000/0x2000)=nil, 0x2000, 0x3000000) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x1, 0xa, 0x14000000, 0x0, 0xfffffffd, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x4, 0x80000, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 5m56.466196653s ago: executing program 6 (id=3292): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x2091) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, 0xc765, 0xc, 0xf, 0x0, 0x6, 0x400c0210, r4}) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) prlimit64(r5, 0xc, 0x0, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xda}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa0}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0xb9}, {0x8, 0x13, 0x12000000}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x44008809) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x49}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x2000000) semop(0xffffffffffffffff, &(0x7f0000000900), 0x0) syz_open_dev$evdev(&(0x7f0000000940), 0x101, 0x0) write$P9_RREAD(r0, &(0x7f0000000980)={0xde, 0x75, 0x1ff, {0xd3, "02681796156cc5d6294079d56a1c959747d56cc2c25a62e1134d29760d31dd21072fcd5df33a693e752036120025a410f707c5b3ffe7fd6fc27ee2f365d2f68595ccfa85555bb335962a8ba61324e7aebc0bd9ae6e0946acfaa39fd0bb14a73243773d1e137adac3949e913878e1b462b1637f16e54311f119873cb1e5c4bd28b68a255cf9474d77c4a733bfbff9992d2c2647ddf694816f13ec9e9d685c7f4e82d9856b3d18e459d9890aa46e19b030ce243fde99a1826976502fbe5c22adbbb72927b725bbce814812caa6b65e3c8fdd8de5"}}, 0xde) socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000a80), 0x7, 0x2780) ioctl$EVIOCGBITSW(r10, 0x80404525, &(0x7f0000000ac0)=""/10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0x84) socket$netlink(0x10, 0x3, 0xc) write$binfmt_script(r3, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, 'netdevsim'}, {}, {0x20, 'netdevsim'}, {0x20, 'wlan1\x00'}, {0x20, 'netdevsim\x00'}, {0x20, 'l2tp\x00'}, {}, {}], 0xa, "bf61154cb14025508d2a611a0a29d26122467e9fa90eaae4d51c66b71a420b8d0efc40269b028c92d494a82cd026fe13493646c2d41b425b45ef219aa56480827fc5c1c882a582325060882dd8340c3e8354870e7c28fe20aaba4826eeb4df82a5a6ff00c27cba4dca817aa435884efa700256ed83bd6641c9193c"}, 0xb5) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0xb}}, 0x3, 0xa21, 0x1, 0x80000000, 0x7}, &(0x7f0000000d40)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000d80)={r11, 0x2, 0x0, 0x1}, &(0x7f0000000dc0)=0x10) sched_setscheduler(r5, 0x5, &(0x7f0000000e00)=0x2) 5m55.771262128s ago: executing program 6 (id=3293): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x98}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xfffffff7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, 0x0) writev(r7, &(0x7f0000000080)=[{0x0}], 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r9, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0100010000000000aa0000000000000004000000ffffffff0300000000009cc3119b000000000000c7310000000000006708000000000000000000000000000000000000000000000800000000000000000000000000000007000000000000004b080000000000000b00000000000000000000000000000000000000000000000800000000000000000000000000000000000100000000000800000000000000070000200000000000000000000000000000000000000000042000"/200]) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 5m55.332289773s ago: executing program 38 (id=3293): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x98}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xfffffff7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, 0x0) writev(r7, &(0x7f0000000080)=[{0x0}], 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r9, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0100010000000000aa0000000000000004000000ffffffff0300000000009cc3119b000000000000c7310000000000006708000000000000000000000000000000000000000000000800000000000000000000000000000007000000000000004b080000000000000b00000000000000000000000000000000000000000000000800000000000000000000000000000000000100000000000800000000000000070000200000000000000000000000000000000000000000042000"/200]) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1m46.318753893s ago: executing program 8 (id=4280): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0xffff231f, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2280, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 1m45.290517476s ago: executing program 8 (id=4283): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f00000000c0)) 1m43.842137546s ago: executing program 8 (id=4285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) userfaultfd(0x80000) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) close(0x3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x8, 0x101000) write$snddsp(r4, &(0x7f0000000500)="4fb3c777470d6d7268e5b03ca1ec581a37917039b54bf06afad578b4e62294c6b53c4ed3cb680aac8fd55c0ea9a48dbc5dedbb5768e10ba7c087b5b7090e8ba1db4c5104789524332a409dee9a47cced68b6d66e3f896c0bdea96f710a684e76a7de5385536e4ae5c08a6508b3fe46e8f3041b7a1b02f54e12e261d2b10e34d6ff72de028c7894750e9b744fd1ef7dc15802bf47bb1736d976ee1b4cd9a93a5ec45ca4c2e45ac17a859aaabbb63ca20248c9a12098c501c0eb444db66d57774e379eb6491ac5cce88612ff23eb08c0f026c401336b05e895555738b2274d60", 0xdf) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x38, r6, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m35.967865377s ago: executing program 8 (id=4311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x44}}, 0x4004804) socket$inet6_udp(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$pppl2tp(0x18, 0x1, 0x1) mlock(&(0x7f000069f000/0x2000)=nil, 0x2000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) 1m32.162490223s ago: executing program 8 (id=4321): syz_open_dev$ndb(0x0, 0x0, 0x2003) r0 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000340)="a9b584772e62a59f8a1328d24e2b6974eda51c1fcecfb2a70183892e24e0b0415dc4480f8f4f547465610a43c9913a3dd9f77874802bf12c6df3f0e1109cfdf5c20fd75f876ed238b198a2f9d646371594243f00b34932f84aff4261b36cc060c9e3a89ce80241eb7833592069f7e48d7771290c00cb87da7c4dbe2d303297dbe9ba0cb044d98be2f965dc14", &(0x7f00000000c0)=""/17, &(0x7f0000000400)="345d32f04ab74fac85598a18cb2a05d2734cf71af7aded88dfdeca40c6b3114d34399bc9a68d019c05379ae611030c49e3ae37630c5622b23f7ff7601f929ef18f438e465e2dcc5fde53754ce12a8e92d904bbda95b54f0c59d971e29f0c909bb46b1500e5331e2ca2f5155f8085cf21d7f8371b0b92c100aa8eb2a539b1b871e1a135be8572ea7e0b4f9c2a9d84143b9131cd3173f3062006db814c3f347c4dc9fdfadb9cdae7901667c00250fa2126aed9958a75c966bd950b4e490f46046a7422278fcd5035ed888110665c", &(0x7f0000000500)="c8a7bc9999447d31a167eddd607556cb3759c2b64a3f8aae1222387b6b567ac7dd532c172dcdc470b931197ae023dc03f8e782fe553ba27b3c884218b15e84ad67c952c9e661114cbe63a7d1044eabe9d21c601aea13a15c87174f85501adada2c4a5de01811203f97fced811efb58e72106ffb8304a3b56681481ced978197f5baea82df2560b9fdcbad459a181d856267a85f9fbfe2a", 0x3b88}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bfa, 0x4, 0x8, 0xffffff9a, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x200007, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0x9, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x4, 0x4, 0x8, 0x69, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x6, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xbffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x5, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x6, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc459, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x40008, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x881, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) listen(r2, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x1}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0xa3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0xa000400) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1m17.092641479s ago: executing program 39 (id=4321): syz_open_dev$ndb(0x0, 0x0, 0x2003) r0 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000340)="a9b584772e62a59f8a1328d24e2b6974eda51c1fcecfb2a70183892e24e0b0415dc4480f8f4f547465610a43c9913a3dd9f77874802bf12c6df3f0e1109cfdf5c20fd75f876ed238b198a2f9d646371594243f00b34932f84aff4261b36cc060c9e3a89ce80241eb7833592069f7e48d7771290c00cb87da7c4dbe2d303297dbe9ba0cb044d98be2f965dc14", &(0x7f00000000c0)=""/17, &(0x7f0000000400)="345d32f04ab74fac85598a18cb2a05d2734cf71af7aded88dfdeca40c6b3114d34399bc9a68d019c05379ae611030c49e3ae37630c5622b23f7ff7601f929ef18f438e465e2dcc5fde53754ce12a8e92d904bbda95b54f0c59d971e29f0c909bb46b1500e5331e2ca2f5155f8085cf21d7f8371b0b92c100aa8eb2a539b1b871e1a135be8572ea7e0b4f9c2a9d84143b9131cd3173f3062006db814c3f347c4dc9fdfadb9cdae7901667c00250fa2126aed9958a75c966bd950b4e490f46046a7422278fcd5035ed888110665c", &(0x7f0000000500)="c8a7bc9999447d31a167eddd607556cb3759c2b64a3f8aae1222387b6b567ac7dd532c172dcdc470b931197ae023dc03f8e782fe553ba27b3c884218b15e84ad67c952c9e661114cbe63a7d1044eabe9d21c601aea13a15c87174f85501adada2c4a5de01811203f97fced811efb58e72106ffb8304a3b56681481ced978197f5baea82df2560b9fdcbad459a181d856267a85f9fbfe2a", 0x3b88}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bfa, 0x4, 0x8, 0xffffff9a, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x200007, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0x9, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x4, 0x4, 0x8, 0x69, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x6, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xbffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x5, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x6, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc459, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x40008, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x881, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) listen(r2, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x1}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0xa3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0xa000400) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 17.533747612s ago: executing program 9 (id=4533): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @mcast1, 0x3}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/204, 0xcc}], 0x1, 0x1ff, 0xffffffff) 16.062512706s ago: executing program 0 (id=4536): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000700000000000000", @ANYRES32=r1], 0x20}}, 0x0) 15.82828218s ago: executing program 9 (id=4537): socket(0x40000000015, 0x805, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\x00 \x00', "be0ea450d5a5fd03"}, 0x38) (async, rerun: 64) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='mounts\x00') writev(r2, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x2) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x8090) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket(0x3, 0x0, 0x1) (async) socket(0x2b, 0xa, 0x1) (async) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async, rerun: 32) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r6, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) 13.146552409s ago: executing program 9 (id=4541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000001aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 13.019943443s ago: executing program 9 (id=4542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0x8b}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 12.933342919s ago: executing program 0 (id=4543): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)="5a91bd3a72b4ba6c77830bd3", 0xc}], 0x1, 0x0, 0x0, 0x4008004}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf2503000000200007800c000400ff0f00000000000008000100030000000800020045000000400002803c00038008000200ffffffff08000200000006000800010004000000080002000e000000080001000200000008000200cefbffff08000200010001001800058007002100696200000c00028008000400dc010000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) 12.641406561s ago: executing program 2 (id=4544): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='cq_schedule\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x21, 0x1}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000020c0)=[{{&(0x7f0000000440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000500)=""/216, 0xd8}], 0x2, &(0x7f0000000680)=""/96, 0x60}, 0x800}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/77, 0x4d}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000700)=""/21, 0x15}], 0x3}}, {{&(0x7f0000000a80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/222, 0xde}, {&(0x7f0000000c00)=""/135, 0x87}, {&(0x7f0000000cc0)=""/36, 0x24}], 0x3, &(0x7f0000000d40)=""/200, 0xc8}, 0x2}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/121, 0x79}, {&(0x7f0000000f40)=""/36, 0x24}, {&(0x7f0000000f80)=""/195, 0xc3}], 0x3, &(0x7f00000010c0)=""/4096, 0x1000}, 0x1}], 0x4, 0x120, &(0x7f0000002200)={r7, r8+10000000}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r2, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3ff, 0x1, 0x1, 0x0, 0x2}) 11.63045772s ago: executing program 0 (id=4546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x1}]}) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176, 0x0, 0x0, 0x700}}], 0x400000000000172, 0x4000000) 10.484788786s ago: executing program 2 (id=4548): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008004) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) read$msr(r5, &(0x7f0000000380)=""/120, 0x78) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005540)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_FILTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0xc0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) 9.863419745s ago: executing program 2 (id=4550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, 0x0, 0x24040004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r6}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000280)=""/164, 0xa4, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.601912691s ago: executing program 1 (id=4551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000000e00)=[{{&(0x7f0000000500)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/177, 0xb1}], 0x1, &(0x7f0000000700)=""/146, 0x92}, 0x8}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/51, 0x33}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000000c00)=""/221, 0xdd}], 0x6, &(0x7f0000000d80)=""/76, 0x4c}, 0x8}], 0x2, 0x10122, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'macvlan0\x00', @local}) pipe2$watch_queue(0x0, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) r10 = socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getpgid(0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x3, 0x2, @thr={&(0x7f0000000300)="d0", &(0x7f0000000440)="76ae315ff2a0b9a25888ddb27ecbf80b3d43d916706d5e8e2d85eedb7a6467ab5bb7c672cf13c2579628a8aeb20f6d5e63aaf74f49cae3cffd188d32b28a240e804b1584999eff687a3b02c394e056428012c35f0abb556782894fceca74bdee867cdfc167d5d5253f93db1424f457e8a1c526e5e5b57f9bd1e817c35dbdf082df443a17246df8c5ec8ad54129ca5ed710793bcaf67dbb893197c2eef82597b052cbffa9691266a2bc4c95a3a7074bd036"}}, &(0x7f00000000c0)) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) 8.516414545s ago: executing program 2 (id=4553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x203fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/mem_sleep', 0x189102, 0x0) write$binfmt_script(r5, &(0x7f0000020280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x200, 0x10c000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000480)={'\x00', 0x3, 0x1, 0x0, 0x80000001, 0x20000006}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(0xffffffffffffffff) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x100, 0xffffffff, 0x0, 0x0, r7}, &(0x7f00000003c0), &(0x7f0000000140)) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000020340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x5100, 0x0) socket$alg(0x26, 0x5, 0x0) 4.912500805s ago: executing program 7 (id=4556): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)="5a91bd3a72b4ba6c77830bd3", 0xc}], 0x1, 0x0, 0x0, 0x4008004}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf2503000000200007800c000400ff0f00000000000008000100030000000800020045000000400002803c00038008000200ffffffff08000200000006000800010004000000080002000e000000080001000200000008000200cefbffff08000200010001001800058007002100696200000c00028008000400dc010000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) 3.956842847s ago: executing program 7 (id=4557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000007000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.851516724s ago: executing program 7 (id=4558): syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)=0x57a7e89c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @private0}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46d, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/1133], 0x0) r2 = openat$kvm(0x0, &(0x7f00000005c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) userfaultfd(0x80001) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0xa, 0x2002) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 3.475205624s ago: executing program 2 (id=4559): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800e7ff844c032f7ad18b262ae258e76c416c66e2bbfa1ac8c90cbc81a33e912bde6a4d2ce48f35868e3381c3f17276e0ae3986287cfdce0073f5de", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010000000000080002000100000004000480"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="003c6b78f1b696a9865ab565c6959e26c09d8b3d255863e76bf755b4989011b7bb54728a94e9c58c6a86b3baee4c77bec9b61c7be9a9254fb9713e7b022d48eb5f1f7bcd688a1d50505e14392b52f678e0ece4a1460c2cd2515a20b69e2c2c45ab6815664b", @ANYRES16=0x0, @ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000200)=0x80, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='sys_exit\x00', r7, 0x0, 0x5}, 0x18) membarrier(0x2, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x5, 0x4, 0x1, {0x0, 0x0, r3}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) creat(&(0x7f00000000c0)='./file0\x00', 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 3.447685612s ago: executing program 0 (id=4560): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0xf7467122dc5ee482) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/135) 3.354773785s ago: executing program 9 (id=4561): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x4004804) socket$inet6_udp(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$pppl2tp(0x18, 0x1, 0x1) mlock(&(0x7f000069f000/0x2000)=nil, 0x2000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) 3.258336901s ago: executing program 0 (id=4562): r0 = fsopen(&(0x7f0000000680)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x339000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070601030000000000000000000000000500010007000000864913031a2a7dca85f6e48b8b0b7aac7b6636d4298bc5e363e70c731988251ebdd71c877c34e813e5d0970dcc9d6d72e8e67d4e168512378afff6691911b3c1e136e87f9cfa05150ad1e2ae332df473273971f049f3e6dc6f4b5a032c05003bf10879040aee01002c6c38fce31c60d96a8896b9823c6e90b034b9746cb076b7205c1908e6d0441389ec2b83cffb5d4223ae8674e77fea69786e37"], 0x1c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) close(0x3) 3.209917939s ago: executing program 7 (id=4563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, 0x0, 0x24040004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r6}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000280)=""/164, 0xa4, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.179881551s ago: executing program 1 (id=4564): socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x240400c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80801, 0x0) ioctl$BLKTRACESTART(r3, 0x125f, 0x56ab) 3.178428282s ago: executing program 2 (id=4565): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x4d) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r1, &(0x7f00000000c0)=""/68, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x3) mlockall(0x0) mlockall(0x5) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x2000c084) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009cf23207f17230380830102030109020000e2"], 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r5 = memfd_secret(0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x11, r5, 0xffffe000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) getdents64(r1, &(0x7f0000001600)=""/4108, 0x100c) 1.772583496s ago: executing program 0 (id=4566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) r6 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x25, 0x2, 0x3, "a677c17a5a000000000000000000000000000000000000000000004000", 0x31324d59}) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) 1.255183553s ago: executing program 1 (id=4567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x800) 1.094168488s ago: executing program 1 (id=4568): r0 = socket(0x2, 0x3, 0xff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001540)={[0x6]}, 0x8, 0x800) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="988b07c593", @ANYRES16=r2, @ANYBLOB="000229bd7000fcdbdf25670000000800c300000000005e00c500b0e6da48fa13a4c8520822e21b5b61a3e8ebe13225b3cf0c50a16d66eff3fdf1674189376fa398f967ff14786c6242316dd6c75a47e82f662875a77bfc7c892bff85ddb588fd9392fa63391103f74941a44a132d5574788108e800000800c300018000000e00c5002248418f4d00356e581d0000"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) lsm_get_self_attr(0x68, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x6, 0x2b, 0xffeffffe}, {0x4}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) unshare(0x22020600) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000040)={0x7, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x10}, &(0x7f0000000080)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0) 921.202541ms ago: executing program 1 (id=4569): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0xfffffffffffffd76, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000040000008500000008000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) fdatasync(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x30}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x4}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r6, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x6, 0x8, 0x221c, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r7, 0x3, 0x4, 0x0, 0xd}, 0x50) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 174.095865ms ago: executing program 7 (id=4570): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140048001000010049429bf2001000000500000a20000000000a03000000000000000000070000040900010073797a300000000078000000090a010400000000000000000700000808000a40004a00000900020073797a30000000000900010073797a3000000000080005400000000d34001280300001800e000100636f6e6e6c696d69740000001c00028008000140003000000800024000000000080001400000000308000340000001", @ANYRES16=r0], 0xc0}}, 0x20004010) 75.196891ms ago: executing program 9 (id=4571): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x24500, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000ffffffff}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_migrate_pages\x00', r6, 0x0, 0x7}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) 25.242686ms ago: executing program 1 (id=4572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0xfffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 0s ago: executing program 7 (id=4573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fsmount(r1, 0x1, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) mknod$loop(0x0, 0x2480, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)='Y') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000140)=0x10) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) kernel console output (not intermixed with test programs): 067] ceph: No mds server is up or the cluster is laggy [ 1112.475651][T20075] set match dimension is over the limit! [ 1113.413627][ T791] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1113.655008][T20083] set match dimension is over the limit! [ 1113.802486][ T791] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1113.897120][ T791] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1113.919964][ T791] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1113.950144][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.972893][T20073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1114.010335][T20073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1114.031846][ T791] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1114.350611][ T58] usb 2-1: USB disconnect, device number 42 [ 1115.365621][T20095] kthread_run failed with err -4 [ 1115.417692][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.319424][ T30] audit: type=1400 audit(1766001966.851:1786): avc: denied { relabelfrom } for pid=20113 comm="syz.9.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1116.402221][ T30] audit: type=1400 audit(1766001966.851:1787): avc: denied { relabelto } for pid=20113 comm="syz.9.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1116.429952][T20114] syzkaller0: entered promiscuous mode [ 1116.437244][T20114] syzkaller0: entered allmulticast mode [ 1117.454879][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1119.253586][T20157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3823'. [ 1120.815746][T20146] tipc: Enabled bearer , priority 0 [ 1120.828112][T20155] bond1: option mode: unable to set because the bond device is up [ 1120.881721][T20167] set match dimension is over the limit! [ 1120.902387][T20142] tipc: Disabling bearer [ 1121.259662][ T58] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1122.029133][ T58] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1122.038197][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.141999][ T58] usb 9-1: config 0 descriptor?? [ 1122.220621][ T30] audit: type=1400 audit(1766001972.852:1788): avc: denied { map } for pid=20179 comm="syz.7.3828" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.353950][ T58] ath6kl: Failed to submit usb control message: -110 [ 1123.514698][ T58] ath6kl: unable to send the bmi data to the device: -110 [ 1123.541341][ T58] ath6kl: Unable to send get target info: -110 [ 1123.579145][ T58] ath6kl: Failed to init ath6kl core: -110 [ 1123.585208][ T58] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1124.039890][T20206] tipc: Enabling of bearer rejected, failed to enable media [ 1124.717822][ T58] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1124.908268][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 1124.942680][ T58] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1124.958668][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.969539][ T58] usb 2-1: config 0 descriptor?? [ 1125.259439][T20226] cgroup: subsys name conflicts with all [ 1125.263523][T20204] bond2: entered promiscuous mode [ 1125.271283][T20204] bond2: entered allmulticast mode [ 1125.318915][T20204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1125.428724][T20229] netlink: get zone limit has 4 unknown bytes [ 1125.536149][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 1125.557648][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1125.590945][ T58] usb 2-1: USB disconnect, device number 43 [ 1125.626218][ T5927] usb 9-1: USB disconnect, device number 74 [ 1125.808925][ T30] audit: type=1400 audit(1766001976.442:1789): avc: denied { write } for pid=20231 comm="syz.7.3845" path="socket:[78158]" dev="sockfs" ino=78158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1125.877325][ T30] audit: type=1400 audit(1766001976.462:1790): avc: denied { write } for pid=20231 comm="syz.7.3845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 1126.381217][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 1128.080406][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3861'. [ 1128.138576][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3861'. [ 1128.765811][ T30] audit: type=1400 audit(1766001979.393:1791): avc: denied { getopt } for pid=20284 comm="syz.9.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1129.100723][ T30] audit: type=1400 audit(1766001979.733:1792): avc: denied { watch watch_reads } for pid=20294 comm="syz.7.3863" path="/147/file0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1129.263119][ T30] audit: type=1326 audit(1766001979.893:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20294 comm="syz.7.3863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f090cb8f749 code=0x0 [ 1129.787464][T20306] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 1131.068159][ T30] audit: type=1400 audit(1766001981.633:1794): avc: denied { execute } for pid=20317 comm="syz.7.3871" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=79118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1134.672428][T20364] set match dimension is over the limit! [ 1134.929439][T20373] binder: 20372:20373 ioctl c0306201 0 returned -14 [ 1134.945407][T20373] FAULT_INJECTION: forcing a failure. [ 1134.945407][T20373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.960454][T20373] CPU: 0 UID: 0 PID: 20373 Comm: syz.1.3889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.960472][T20373] Tainted: [L]=SOFTLOCKUP [ 1134.960476][T20373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.960482][T20373] Call Trace: [ 1134.960486][T20373] [ 1134.960490][T20373] dump_stack_lvl+0x16c/0x1f0 [ 1134.960508][T20373] should_fail_ex+0x512/0x640 [ 1134.960527][T20373] _copy_from_user+0x2e/0xd0 [ 1134.960543][T20373] kstrtouint_from_user+0xd6/0x1d0 [ 1134.960556][T20373] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1134.960567][T20373] ? __lock_acquire+0x436/0x2890 [ 1134.960581][T20373] ? lock_acquire+0x179/0x330 [ 1134.960596][T20373] proc_fail_nth_write+0x83/0x220 [ 1134.960609][T20373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1134.960624][T20373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1134.960633][T20373] vfs_write+0x2a0/0x11d0 [ 1134.960648][T20373] ? __pfx___mutex_lock+0x10/0x10 [ 1134.960664][T20373] ? __pfx_vfs_write+0x10/0x10 [ 1134.960681][T20373] ? __fget_files+0x20e/0x3c0 [ 1134.960700][T20373] ksys_write+0x12a/0x250 [ 1134.960714][T20373] ? __pfx_ksys_write+0x10/0x10 [ 1134.960731][T20373] do_syscall_64+0xcd/0xf80 [ 1134.960746][T20373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.960756][T20373] RIP: 0033:0x7fb60438e1ff [ 1134.960765][T20373] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1134.960775][T20373] RSP: 002b:00007fb6051da030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1134.960787][T20373] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb60438e1ff [ 1134.960793][T20373] RDX: 0000000000000001 RSI: 00007fb6051da0a0 RDI: 000000000000000c [ 1134.960799][T20373] RBP: 00007fb6051da090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.960805][T20373] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 1134.960811][T20373] R13: 00007fb6045e6038 R14: 00007fb6045e5fa0 R15: 00007ffce26e9118 [ 1134.960825][T20373] [ 1135.338893][T20384] input: syz1 as /devices/virtual/input/input68 [ 1136.506314][T20400] tipc: Enabled bearer , priority 0 [ 1136.608972][T20400] syzkaller0: entered promiscuous mode [ 1136.614675][T20400] syzkaller0: entered allmulticast mode [ 1136.645875][T20400] tipc: Resetting bearer [ 1137.806117][T20399] tipc: Resetting bearer [ 1138.241457][ T30] audit: type=1400 audit(1766001988.874:1795): avc: denied { read } for pid=20425 comm="syz.1.3905" name="file0" dev="fuse" ino=35184372088832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1138.291310][ T30] audit: type=1400 audit(1766001988.904:1796): avc: denied { open } for pid=20425 comm="syz.1.3905" path="/108/file0/file0" dev="fuse" ino=35184372088832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1138.521409][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3907'. [ 1141.709204][T20399] tipc: Disabling bearer [ 1141.720090][T20432] tipc: Enabling of bearer rejected, failed to enable media [ 1146.147177][T20501] tipc: Enabled bearer , priority 0 [ 1146.208380][T20502] syzkaller0: entered promiscuous mode [ 1146.214601][T20502] syzkaller0: entered allmulticast mode [ 1146.224593][T20505] syzkaller0: mtu less than device minimum [ 1146.254909][T20499] tipc: Resetting bearer [ 1147.843382][T20499] tipc: Disabling bearer [ 1148.828955][T20527] tipc: Enabling of bearer rejected, failed to enable media [ 1149.633620][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 1149.643242][T20544] /dev/nullb0: Can't lookup blockdev [ 1149.838611][T20555] Bluetooth: hci4: Frame reassembly failed (-84) [ 1149.853183][T20555] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 1149.975465][ T5927] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1150.405169][ T5927] usb 9-1: Using ep0 maxpacket: 32 [ 1150.550702][ T5927] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1150.565336][ T5927] usb 9-1: config 0 has no interface number 0 [ 1150.574869][ T5927] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1150.586018][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.594638][ T5927] usb 9-1: Product: syz [ 1150.600980][ T5927] usb 9-1: Manufacturer: syz [ 1150.608713][ T5927] usb 9-1: SerialNumber: syz [ 1150.619353][ T5927] usb 9-1: config 0 descriptor?? [ 1150.628335][ T5927] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1151.843366][ T5927] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1151.854105][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1151.872113][ T5816] Bluetooth: hci4: command 0x1003 tx timeout [ 1152.367011][ T5927] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1152.745072][ T30] audit: type=1326 audit(1766002003.386:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.7.3943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f090cb8f749 code=0x0 [ 1153.074916][ T5926] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1153.238446][ T5926] usb 2-1: config 8 has an invalid interface number: 8 but max is 1 [ 1153.251167][ T5926] usb 2-1: config 8 has an invalid interface number: 8 but max is 1 [ 1153.259717][ T5926] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1153.270581][ T5926] usb 2-1: config 8 has no interface number 0 [ 1153.277682][ T5926] usb 2-1: config 8 interface 8 has no altsetting 1 [ 1153.290008][ T5926] usb 2-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 1153.299249][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.307625][ T5926] usb 2-1: Product: syz [ 1153.312977][ T5926] usb 2-1: Manufacturer: syz [ 1153.318003][ T5926] usb 2-1: SerialNumber: syz [ 1153.450817][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.477502][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.735124][ T30] audit: type=1400 audit(1766002004.176:1798): avc: denied { getopt } for pid=20585 comm="syz.1.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1153.814100][T20593] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 1154.533831][T20587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.576292][T20587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.584754][ T30] audit: type=1400 audit(1766002004.446:1799): avc: denied { relabelfrom } for pid=20585 comm="syz.1.3944" name="NETLINK" dev="sockfs" ino=79911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1154.659306][ T30] audit: type=1400 audit(1766002004.466:1800): avc: denied { relabelto } for pid=20585 comm="syz.1.3944" name="NETLINK" dev="sockfs" ino=79911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 1154.724476][T20597] vivid-007: disconnect [ 1154.736863][T20596] vivid-007: reconnect [ 1154.876617][T20605] fuse: Bad value for 'fd' [ 1155.505665][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1155.513251][T19886] usb 9-1: USB disconnect, device number 75 [ 1155.521973][T19886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1155.540045][T19886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1155.552924][T19886] quatech2 9-1:0.51: device disconnected [ 1155.566414][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3950'. [ 1155.871566][ T5926] qmi_wwan 2-1:8.8: probe with driver qmi_wwan failed with error -22 [ 1155.929677][ T5926] usb 2-1: USB disconnect, device number 44 [ 1156.284143][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1157.484537][ T5927] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1157.509264][T20648] set match dimension is over the limit! [ 1157.655589][ T5927] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1157.663758][ T5927] usb 2-1: config 0 has no interface number 0 [ 1157.670355][ T5927] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1157.680489][ T5927] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1157.689706][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.697905][ T5927] usb 2-1: Product: syz [ 1157.702060][ T5927] usb 2-1: Manufacturer: syz [ 1157.706777][ T5927] usb 2-1: SerialNumber: syz [ 1157.713147][ T5927] usb 2-1: config 0 descriptor?? [ 1157.774662][ T5926] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1158.050374][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1158.060173][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1158.072702][ T5926] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1158.081822][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.089854][ T5926] usb 9-1: Product: syz [ 1158.093996][ T5926] usb 9-1: Manufacturer: syz [ 1158.098668][ T5926] usb 9-1: SerialNumber: syz [ 1158.463116][ T5926] usb 9-1: config 0 descriptor?? [ 1158.556234][ T5926] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress d4 [ 1158.996347][ T5926] usb 9-1: USB disconnect, device number 76 [ 1159.568680][T20641] syzkaller0: entered allmulticast mode [ 1159.595063][T20641] syzkaller0 (unregistering): left allmulticast mode [ 1159.707670][ T5927] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1159.726104][ T5927] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1159.742463][ T5927] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1159.753064][ T5927] usb 2-1: USB disconnect, device number 45 [ 1160.439274][T20690] FAULT_INJECTION: forcing a failure. [ 1160.439274][T20690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.452567][T20690] CPU: 1 UID: 0 PID: 20690 Comm: syz.9.3974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.452593][T20690] Tainted: [L]=SOFTLOCKUP [ 1160.452599][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1160.452610][T20690] Call Trace: [ 1160.452616][T20690] [ 1160.452623][T20690] dump_stack_lvl+0x16c/0x1f0 [ 1160.452649][T20690] should_fail_ex+0x512/0x640 [ 1160.452678][T20690] _copy_to_user+0x32/0xd0 [ 1160.452705][T20690] simple_read_from_buffer+0xcb/0x170 [ 1160.452731][T20690] proc_fail_nth_read+0x197/0x240 [ 1160.452750][T20690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1160.452770][T20690] ? rw_verify_area+0xcf/0x6c0 [ 1160.452789][T20690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1160.452807][T20690] vfs_read+0x1e4/0xcf0 [ 1160.452829][T20690] ? __pfx___mutex_lock+0x10/0x10 [ 1160.452854][T20690] ? __pfx_vfs_read+0x10/0x10 [ 1160.452882][T20690] ? __fget_files+0x20e/0x3c0 [ 1160.452913][T20690] ksys_read+0x12a/0x250 [ 1160.452934][T20690] ? __pfx_ksys_read+0x10/0x10 [ 1160.452953][T20690] ? rcu_is_watching+0x12/0xc0 [ 1160.452977][T20690] do_syscall_64+0xcd/0xf80 [ 1160.453007][T20690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.453024][T20690] RIP: 0033:0x7f155df8e15c [ 1160.453039][T20690] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1160.453056][T20690] RSP: 002b:00007f155c1d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1160.453073][T20690] RAX: ffffffffffffffda RBX: 00007f155e1e6180 RCX: 00007f155df8e15c [ 1160.453088][T20690] RDX: 000000000000000f RSI: 00007f155c1d50a0 RDI: 000000000000000a [ 1160.453098][T20690] RBP: 00007f155c1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.453108][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.453118][T20690] R13: 00007f155e1e6218 R14: 00007f155e1e6180 R15: 00007fff564d79b8 [ 1160.453143][T20690] [ 1161.235171][T20697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1161.474682][ T5926] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1162.240561][T20707] syzkaller1: entered promiscuous mode [ 1162.250181][T20707] syzkaller1: entered allmulticast mode [ 1162.340405][ T5926] usb 10-1: Using ep0 maxpacket: 8 [ 1162.347185][ T5926] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.360680][ T5926] usb 10-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1162.382143][T20714] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1162.391895][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.410590][ T5926] usb 10-1: config 0 descriptor?? [ 1162.429023][ T5926] uvcvideo 10-1:0.0: Found UVC 0.00 device (2833:0201) [ 1162.438731][ T5926] uvcvideo 10-1:0.0: No valid video chain found. [ 1162.555447][ T5927] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1162.821566][ T8320] usb 10-1: USB disconnect, device number 101 [ 1162.895307][ T5927] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 1162.903508][ T5927] usb 2-1: config 4 has no interface number 0 [ 1162.912141][ T5927] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1162.922558][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.931212][ T5927] usb 2-1: Product: syz [ 1162.936318][ T5927] usb 2-1: Manufacturer: syz [ 1162.940935][ T5927] usb 2-1: SerialNumber: syz [ 1162.951518][ T5927] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1163.775461][T20710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.787141][T20710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.796562][T20710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.805329][T20710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.823999][ T5927] vp7045: USB control message 'in' went wrong. [ 1163.830185][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1163.852716][ T5927] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1163.867809][ T5927] usb 2-1: USB disconnect, device number 46 [ 1164.572949][T20741] bond1: option mode: unable to set because the bond device is up [ 1165.426961][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 1165.513003][T20754] syzkaller1: entered promiscuous mode [ 1165.516313][T20752] /dev/nullb0: Can't lookup blockdev [ 1165.525275][T20754] syzkaller1: entered allmulticast mode [ 1166.161379][T20776] bond3: option mode: unable to set because the bond device is up [ 1166.518955][T20784] tipc: Enabled bearer , priority 10 [ 1166.548406][ T30] audit: type=1400 audit(1766002017.167:1801): avc: denied { read append } for pid=20779 comm="syz.1.4004" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1167.785847][T20780] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1167.792201][T20780] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1167.891191][T20799] xt_hashlimit: max too large, truncated to 1048576 [ 1167.901973][T20780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1167.908197][T20780] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1167.929625][T20780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1167.935708][T20780] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1167.975064][T20780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1167.981011][T20780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1167.987604][T20780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1167.993528][T20780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1168.002493][T20780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1168.477834][T20815] xt_bpf: check failed: parse error [ 1168.527464][T20817] bond1: option mode: unable to set because the bond device is up [ 1168.723180][ T5816] Bluetooth: hci8: command 0x0406 tx timeout [ 1169.919376][T20835] program syz.9.4017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1169.933330][ T5816] Bluetooth: hci0: command 0x080f tx timeout [ 1170.003324][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 1170.009544][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1170.016212][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 1170.414749][T20843] __vm_enough_memory: pid: 20843, comm: syz.7.4020, bytes: 21199893389312 not enough memory for the allocation [ 1170.818075][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 1171.138187][T20853] bond3: option mode: unable to set because the bond device is up [ 1171.192698][T17585] usb 10-1: new full-speed USB device number 102 using dummy_hcd [ 1171.423477][T17585] usb 10-1: config 0 has an invalid interface number: 49 but max is 0 [ 1171.431744][T17585] usb 10-1: config 0 has no interface number 0 [ 1171.438217][T17585] usb 10-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 1171.452327][T17585] usb 10-1: config 0 interface 49 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1171.464432][T17585] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1172.146027][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 1172.485178][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1172.491210][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1172.497338][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 1172.508996][T17585] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.517256][T17585] usb 10-1: Product: syz [ 1172.521493][T17585] usb 10-1: Manufacturer: syz [ 1172.526240][T17585] usb 10-1: SerialNumber: syz [ 1172.533151][T17585] usb 10-1: config 0 descriptor?? [ 1173.022094][T20847] bond1: option arp_validate: invalid value (18446744073709551615) [ 1173.074351][T20847] bond1 (unregistering): Released all slaves [ 1173.178310][T17585] usb 10-1: USB disconnect, device number 102 [ 1173.377347][T20886] binder: 20883:20886 ioctl c0306201 200000000640 returned -22 [ 1174.284354][T20898] "syz.7.4038" (20898) uses obsolete ecb(arc4) skcipher [ 1174.336566][T20900] bond3: option mode: unable to set because the bond device is up [ 1174.562476][T16839] Bluetooth: hci3: command 0x0c1a tx timeout [ 1174.617446][ T30] audit: type=1400 audit(1766002025.258:1802): avc: denied { accept } for pid=20911 comm="syz.9.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1174.832262][T20924] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1175.128018][T20931] fuse: Bad value for 'fd' [ 1175.152257][T18879] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1175.326633][T18879] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1175.348812][T18879] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1175.370178][T18879] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1175.389221][T18879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.421868][T20926] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1175.436761][T18879] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1175.515167][T20941] bond3: option mode: unable to set because the bond device is up [ 1175.695589][T20954] ip6t_srh: unknown srh match flags 4000 [ 1176.121198][ T5926] usb 10-1: USB disconnect, device number 103 [ 1177.610309][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.480341][T20974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1178.513527][ T8320] libceph: connect (1)[c::]:6789 error -101 [ 1178.519826][ T8320] libceph: mon0 (1)[c::]:6789 connect error [ 1178.526574][ T8320] libceph: connect (1)[c::]:6789 error -101 [ 1178.568551][ T8320] libceph: mon0 (1)[c::]:6789 connect error [ 1178.887752][T20978] ceph: No mds server is up or the cluster is laggy [ 1178.888546][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 1178.910988][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 1179.175654][T20992] bond1: option mode: unable to set because the bond device is up [ 1179.248521][T20994] input: syz1 as /devices/virtual/input/input70 [ 1179.686215][ T30] audit: type=1400 audit(1766002030.249:1803): avc: denied { mounton } for pid=20993 comm="syz.7.4068" path="/186/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1179.780167][T21004] overlayfs: failed to clone upperpath [ 1180.524689][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4074'. [ 1181.548249][T21030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1181.833571][T21040] FAULT_INJECTION: forcing a failure. [ 1181.833571][T21040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.876139][T21040] CPU: 0 UID: 0 PID: 21040 Comm: syz.9.4080 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.876168][T21040] Tainted: [L]=SOFTLOCKUP [ 1181.876173][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.876182][T21040] Call Trace: [ 1181.876188][T21040] [ 1181.876195][T21040] dump_stack_lvl+0x16c/0x1f0 [ 1181.876221][T21040] should_fail_ex+0x512/0x640 [ 1181.876248][T21040] _copy_from_user+0x2e/0xd0 [ 1181.876270][T21040] sctp_setsockopt+0x206e/0xb8c0 [ 1181.876297][T21040] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1181.876324][T21040] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1181.876350][T21040] ? find_held_lock+0x2b/0x80 [ 1181.876380][T21040] ? selinux_socket_setsockopt+0x6a/0x80 [ 1181.876399][T21040] ? sock_common_setsockopt+0x2e/0xf0 [ 1181.876419][T21040] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1181.876441][T21040] do_sock_setsockopt+0xf3/0x1d0 [ 1181.876463][T21040] __sys_setsockopt+0x1a0/0x230 [ 1181.876482][T21040] __x64_sys_setsockopt+0xbd/0x160 [ 1181.876496][T21040] ? do_syscall_64+0x91/0xf80 [ 1181.876515][T21040] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.876534][T21040] do_syscall_64+0xcd/0xf80 [ 1181.876553][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.876571][T21040] RIP: 0033:0x7f155df8f749 [ 1181.876585][T21040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.876602][T21040] RSP: 002b:00007f155c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1181.876618][T21040] RAX: ffffffffffffffda RBX: 00007f155e1e6090 RCX: 00007f155df8f749 [ 1181.876629][T21040] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 1181.876639][T21040] RBP: 00007f155c1f6090 R08: 000000000000009c R09: 0000000000000000 [ 1181.876648][T21040] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 1181.876657][T21040] R13: 00007f155e1e6128 R14: 00007f155e1e6090 R15: 00007fff564d79b8 [ 1181.876680][T21040] [ 1182.953215][T21051] tipc: Enabling of bearer rejected, already enabled [ 1183.143605][T21057] set match dimension is over the limit! [ 1183.698714][T16839] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1183.751323][T21065] syzkaller1: entered promiscuous mode [ 1183.756852][T21065] syzkaller1: entered allmulticast mode [ 1184.293750][T21070] bond1: option mode: unable to set because the bond device is up [ 1184.338295][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4091'. [ 1184.354271][T21074] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.4091'. [ 1186.889430][T21097] tmpfs: Unknown parameter 'mpo' [ 1186.935098][T21115] bond3: option mode: unable to set because the bond device is up [ 1188.689803][T21132] syzkaller1: entered promiscuous mode [ 1188.697589][T21132] syzkaller1: entered allmulticast mode [ 1188.709273][ T30] audit: type=1400 audit(1766002039.350:1804): avc: denied { getopt } for pid=21130 comm="syz.9.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1189.100646][ T8320] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1189.562245][ T8320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.573341][ T8320] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1189.583150][ T8320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.605260][ T8320] usb 2-1: config 0 descriptor?? [ 1189.631820][ T8320] pwc: Askey VC010 type 2 USB webcam detected. [ 1190.084712][T21137] tipc: Enabled bearer , priority 0 [ 1190.191347][T21160] syzkaller0: entered promiscuous mode [ 1190.196871][T21160] syzkaller0: entered allmulticast mode [ 1190.245574][ T5927] IPVS: starting estimator thread 0... [ 1190.257829][T21156] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1190.367603][T21164] set match dimension is over the limit! [ 1190.384761][T21161] IPVS: using max 38 ests per chain, 91200 per kthread [ 1190.613846][ T8320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1190.877907][ T8320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1191.787166][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4116'. [ 1191.797440][T21168] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.4116'. [ 1191.931116][T21136] tipc: Resetting bearer [ 1191.983172][T21136] tipc: Disabling bearer [ 1192.071023][ T8320] pwc: recv_control_msg error -71 req 04 val 1400 [ 1192.078330][ T8320] pwc: recv_control_msg error -71 req 02 val 2000 [ 1192.100718][ T8320] pwc: recv_control_msg error -71 req 02 val 2100 [ 1192.111071][ T8320] pwc: recv_control_msg error -71 req 04 val 1500 [ 1192.127832][ T8320] pwc: recv_control_msg error -71 req 02 val 2500 [ 1192.148870][ T8320] pwc: recv_control_msg error -71 req 02 val 2400 [ 1192.166109][ T8320] pwc: recv_control_msg error -71 req 02 val 2600 [ 1192.166369][T21178] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1192.181370][ T8320] pwc: recv_control_msg error -71 req 02 val 2900 [ 1192.219365][ T8320] pwc: recv_control_msg error -71 req 02 val 2800 [ 1192.239342][ T8320] pwc: recv_control_msg error -71 req 04 val 1100 [ 1192.259681][ T8320] pwc: recv_control_msg error -71 req 04 val 1200 [ 1192.282389][ T8320] pwc: Registered as video103. [ 1192.288642][ T8320] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 1192.346134][ T8320] usb 2-1: USB disconnect, device number 47 [ 1192.379227][T21178] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 1193.089013][T21176] bond1: option mode: unable to set because the bond device is up [ 1193.987655][T21205] tipc: Enabling of bearer rejected, already enabled [ 1194.043609][ T30] audit: type=1400 audit(1766002044.691:1805): avc: denied { ioctl } for pid=21207 comm="syz.7.4127" path="socket:[81880]" dev="sockfs" ino=81880 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1195.722152][ T30] audit: type=1400 audit(1766002046.351:1806): avc: denied { read write } for pid=19392 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1195.769753][ T30] audit: type=1400 audit(1766002046.351:1807): avc: denied { open } for pid=19392 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1196.698144][ T30] audit: type=1400 audit(1766002046.351:1808): avc: denied { ioctl } for pid=19392 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1196.724061][ T30] audit: type=1400 audit(1766002046.441:1809): avc: denied { execmem } for pid=21223 comm="syz.9.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1196.849634][ T30] audit: type=1400 audit(1766002046.731:1810): avc: denied { read } for pid=21223 comm="syz.9.4130" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1196.973951][ T30] audit: type=1400 audit(1766002046.731:1811): avc: denied { open } for pid=21223 comm="syz.9.4130" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1197.072872][ T30] audit: type=1400 audit(1766002046.881:1812): avc: denied { create } for pid=21223 comm="syz.9.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1197.171712][ T30] audit: type=1400 audit(1766002046.881:1813): avc: denied { bind } for pid=21223 comm="syz.9.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1197.354045][ T30] audit: type=1400 audit(1766002046.881:1814): avc: denied { name_bind } for pid=21223 comm="syz.9.4130" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1198.593326][T21247] gre0: entered promiscuous mode [ 1198.598349][T21247] gre0: entered allmulticast mode [ 1199.059346][ T5926] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1199.059427][ T5927] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1199.162601][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1199.162713][ T30] audit: type=1400 audit(1766002049.801:1841): avc: denied { ioctl } for pid=21248 comm="syz.7.4134" path="socket:[82962]" dev="sockfs" ino=82962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1199.195163][ T30] audit: type=1400 audit(1766002049.801:1842): avc: denied { bind } for pid=21248 comm="syz.7.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1199.257068][ T5926] usb 10-1: Using ep0 maxpacket: 32 [ 1199.272713][ T5926] usb 10-1: config 211 has an invalid interface number: 98 but max is 0 [ 1199.289349][ T5926] usb 10-1: config 211 has no interface number 0 [ 1199.298388][ T5926] usb 10-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1199.308959][ T30] audit: type=1400 audit(1766002049.911:1843): avc: denied { setopt } for pid=21248 comm="syz.7.4134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1199.339686][ T5926] usb 10-1: config 211 interface 98 has no altsetting 0 [ 1199.358991][ T30] audit: type=1400 audit(1766002049.931:1844): avc: denied { read } for pid=21248 comm="syz.7.4134" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1199.385839][ T5926] usb 10-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1199.407564][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.430049][ T5926] usb 10-1: Product: syz [ 1199.434918][ T5926] usb 10-1: Manufacturer: syz [ 1199.440601][ T5926] usb 10-1: SerialNumber: syz [ 1199.458026][T21239] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1199.469940][ T30] audit: type=1400 audit(1766002049.931:1845): avc: denied { open } for pid=21248 comm="syz.7.4134" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1199.518192][ T30] audit: type=1400 audit(1766002049.931:1846): avc: denied { ioctl } for pid=21248 comm="syz.7.4134" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1199.518918][ T5927] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1199.559010][ T5927] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1199.559051][ T5927] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1199.559068][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.561612][T21244] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1199.564164][ T5927] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1199.571984][ T30] audit: type=1400 audit(1766002050.061:1847): avc: denied { create } for pid=21250 comm="syz.0.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1199.572028][ T30] audit: type=1400 audit(1766002050.061:1848): avc: denied { read } for pid=21253 comm="syz.1.4138" dev="nsfs" ino=4026533000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1199.572082][ T30] audit: type=1400 audit(1766002050.061:1849): avc: denied { open } for pid=21253 comm="syz.1.4138" path="net:[4026533000]" dev="nsfs" ino=4026533000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1199.572119][ T30] audit: type=1400 audit(1766002050.061:1850): avc: denied { create } for pid=21253 comm="syz.1.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1199.863842][T21256] fuse: Bad value for 'fd' [ 1201.373383][T21244] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4133'. [ 1202.206034][ T5926] mct_u232 10-1:211.98: MCT U232 converter detected [ 1202.230005][ T5926] mct_u232 ttyUSB0: expected endpoint missing [ 1202.267872][ T5926] usb 10-1: USB disconnect, device number 104 [ 1202.278358][T21275] fuse: Bad value for 'rootmode' [ 1202.294018][ T5926] mct_u232 10-1:211.98: device disconnected [ 1204.278646][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1204.278663][ T30] audit: type=1400 audit(1766002053.532:1888): avc: denied { name_bind } for pid=21283 comm="syz.7.4145" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1204.307341][ T30] audit: type=1400 audit(1766002053.532:1889): avc: denied { node_bind } for pid=21283 comm="syz.7.4145" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1204.331565][ T30] audit: type=1400 audit(1766002053.772:1890): avc: denied { read write } for pid=21285 comm="syz.9.4146" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1204.361754][ T30] audit: type=1400 audit(1766002053.782:1891): avc: denied { open } for pid=21285 comm="syz.9.4146" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1204.386227][ T30] audit: type=1400 audit(1766002053.782:1892): avc: denied { ioctl } for pid=21285 comm="syz.9.4146" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1204.610333][T21296] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1204.620548][T21296] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1204.629558][T21296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1204.728736][ T30] audit: type=1400 audit(1766002055.282:1893): avc: denied { mount } for pid=21292 comm="syz.1.4148" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1205.006474][ T30] audit: type=1400 audit(1766002055.642:1894): avc: denied { unmount } for pid=18300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1205.185346][ T30] audit: type=1400 audit(1766002055.682:1895): avc: denied { open } for pid=21293 comm="syz.7.4149" path="/dev/ptyr3" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1205.532055][ T30] audit: type=1400 audit(1766002055.692:1896): avc: denied { ioctl } for pid=21293 comm="syz.7.4149" path="/dev/ptyr3" dev="devtmpfs" ino=138 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1205.588720][ T30] audit: type=1400 audit(1766002055.692:1897): avc: denied { read } for pid=21293 comm="syz.7.4149" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1205.696403][T21305] bond1: option mode: unable to set because the bond device is up [ 1205.716004][T21306] netlink: 'syz.1.4150': attribute type 10 has an invalid length. [ 1205.789367][T21306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.800625][ T5927] usb 9-1: USB disconnect, device number 77 [ 1205.829698][T21306] bond0: (slave team0): Enslaving as an active interface with an up link [ 1206.365817][T21322] netlink: 6912 bytes leftover after parsing attributes in process `syz.7.4155'. [ 1206.392505][T21322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.959030][ T5924] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1208.054000][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.066104][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.076302][ T5924] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1208.085889][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.096764][ T5924] usb 10-1: config 0 descriptor?? [ 1208.680234][ T5924] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1209.169417][ T5924] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1209.265455][ T5924] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE [ 1209.299058][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1209.299073][ T30] audit: type=1400 audit(1766002059.932:1917): avc: denied { unmount } for pid=18300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1209.861454][T21342] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4161'. [ 1210.374950][ T5924] cp2112 0003:10C4:EA90.0026: error requesting SMBus config [ 1210.385777][ T5924] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -71 [ 1210.397936][ T5924] usb 10-1: USB disconnect, device number 105 [ 1210.461795][T17585] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1211.141326][T17585] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1211.171882][T17585] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1211.759492][T21352] bond1: option mode: unable to set because the bond device is up [ 1211.767433][T17585] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1211.793351][T17585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.990673][T21339] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1212.000911][T17585] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1212.529073][ T30] audit: type=1400 audit(1766002063.173:1918): avc: denied { create } for pid=21356 comm="syz.0.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1212.569287][T21357] set match dimension is over the limit! [ 1212.587311][T17585] usb 2-1: USB disconnect, device number 48 [ 1214.267293][ T30] audit: type=1400 audit(1766002064.493:1919): avc: denied { bind } for pid=21361 comm="syz.7.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1215.699875][ T30] audit: type=1400 audit(1766002066.343:1920): avc: denied { create } for pid=21376 comm="syz.0.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1215.721802][ T30] audit: type=1400 audit(1766002066.373:1921): avc: denied { ioctl } for pid=21376 comm="syz.0.4173" path="socket:[83220]" dev="sockfs" ino=83220 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1215.748622][ T30] audit: type=1400 audit(1766002066.373:1922): avc: denied { create } for pid=21376 comm="syz.0.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1215.810321][T21380] /dev/nullb0: Can't lookup blockdev [ 1215.848663][T21381] syzkaller1: entered promiscuous mode [ 1215.854166][T21381] syzkaller1: entered allmulticast mode [ 1215.903471][ T30] audit: type=1400 audit(1766002066.523:1923): avc: denied { create } for pid=21378 comm="syz.9.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1215.936393][ T30] audit: type=1400 audit(1766002066.523:1924): avc: denied { write } for pid=21378 comm="syz.9.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1216.988682][ T8320] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1217.022061][T21385] fuse: Bad value for 'fd' [ 1217.147155][ T8320] usb 2-1: Using ep0 maxpacket: 16 [ 1217.179317][ T30] audit: type=1400 audit(1766002067.823:1925): avc: denied { create } for pid=21382 comm="syz.1.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1217.685574][T21398] new mount options do not match the existing superblock, will be ignored [ 1217.701658][ T30] audit: type=1400 audit(1766002068.333:1926): avc: denied { mount } for pid=21382 comm="syz.1.4170" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1217.890488][ T30] audit: type=1400 audit(1766002068.333:1927): avc: denied { ioctl } for pid=21382 comm="syz.1.4170" path="socket:[83305]" dev="sockfs" ino=83305 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1218.247924][ T30] audit: type=1400 audit(1766002068.893:1928): avc: denied { read } for pid=21403 comm="syz.7.4178" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1218.272700][ T30] audit: type=1400 audit(1766002068.893:1929): avc: denied { open } for pid=21403 comm="syz.7.4178" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1218.357428][T17036] usb 10-1: new full-speed USB device number 106 using dummy_hcd [ 1218.540248][T17036] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1218.561975][T17036] usb 10-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1218.572366][T17036] usb 10-1: config 150 has no interface number 0 [ 1218.579134][T17036] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1218.600401][T17036] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1218.611030][T17036] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.620931][T17036] usb 10-1: Product: syz [ 1218.625527][T17036] usb 10-1: Manufacturer: syz [ 1218.631835][T17036] usb 10-1: SerialNumber: syz [ 1218.913878][T17036] xr_serial 10-1:150.204: skipping garbage [ 1218.920002][T17036] xr_serial 10-1:150.204: xr_serial converter detected [ 1219.235943][ T8320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1219.257542][ T8320] usb 2-1: no configurations [ 1219.262843][ T8320] usb 2-1: can't read configurations, error -22 [ 1219.415166][T17036] usb 10-1: xr_serial converter now attached to ttyUSB0 [ 1219.487586][T21273] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1219.677162][T21273] usb 9-1: Using ep0 maxpacket: 8 [ 1219.799014][T21273] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1219.808050][T21273] usb 9-1: config 160 has an invalid interface number: 218 but max is 0 [ 1219.816502][T21273] usb 9-1: config 160 has no interface number 0 [ 1219.822955][T21273] usb 9-1: config 160 interface 218 has no altsetting 0 [ 1219.832082][T21273] usb 9-1: string descriptor 0 read error: -22 [ 1219.838523][T21273] usb 9-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=3b.da [ 1219.847656][T21273] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.174750][T21273] f81534a_ctrl 9-1:160.218: failed to set register 0x116: -5 [ 1220.184062][T21273] f81534a_ctrl 9-1:160.218: failed to enable ports: -5 [ 1220.191633][T21273] f81534a_ctrl 9-1:160.218: probe with driver f81534a_ctrl failed with error -5 [ 1220.203647][T21273] usb 9-1: USB disconnect, device number 78 [ 1220.332007][T17036] usb 10-1: USB disconnect, device number 106 [ 1220.344446][T17036] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1220.353398][T17036] xr_serial 10-1:150.204: device disconnected [ 1221.047038][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1221.047055][ T30] audit: type=1400 audit(1766002071.084:1940): avc: denied { write } for pid=21432 comm="syz.9.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.296404][ T30] audit: type=1400 audit(1766002071.084:1941): avc: denied { connect } for pid=21432 comm="syz.9.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.973276][ T30] audit: type=1400 audit(1766002071.084:1942): avc: denied { name_connect } for pid=21432 comm="syz.9.4186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1222.046655][ T30] audit: type=1400 audit(1766002071.334:1943): avc: denied { shutdown } for pid=21432 comm="syz.9.4186" lport=33219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1222.100406][ T30] audit: type=1400 audit(1766002071.344:1944): avc: denied { read } for pid=21432 comm="syz.9.4186" lport=33219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1222.122318][ T30] audit: type=1400 audit(1766002072.724:1945): avc: denied { create } for pid=21438 comm="syz.1.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1222.143641][ T30] audit: type=1400 audit(1766002072.734:1946): avc: denied { bind } for pid=21438 comm="syz.1.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1222.242953][T21446] fuse: Bad value for 'fd' [ 1222.253264][ T30] audit: type=1400 audit(1766002072.734:1947): avc: denied { setopt } for pid=21438 comm="syz.1.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1222.273283][ T30] audit: type=1400 audit(1766002072.734:1948): avc: denied { ioctl } for pid=21438 comm="syz.1.4187" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1222.489829][ T30] audit: type=1400 audit(1766002073.134:1949): avc: denied { append } for pid=21453 comm="syz.7.4192" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1222.965141][T21461] /dev/nullb0: Can't lookup blockdev [ 1223.214720][T17036] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1223.431521][T21471] input: syz0 as /devices/virtual/input/input72 [ 1223.460117][T17036] usb 10-1: config 0 has an invalid interface number: 57 but max is 0 [ 1223.468577][T17036] usb 10-1: config 0 has no interface number 0 [ 1223.474852][T17036] usb 10-1: too many endpoints for config 0 interface 57 altsetting 68: 230, using maximum allowed: 30 [ 1223.652349][T17036] usb 10-1: config 0 interface 57 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1223.719834][T17036] usb 10-1: config 0 interface 57 has no altsetting 0 [ 1223.809290][T17036] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1223.826246][T17036] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.756233][T17036] usb 10-1: Product: syz [ 1224.760517][T17036] usb 10-1: Manufacturer: syz [ 1224.765195][T17036] usb 10-1: SerialNumber: syz [ 1224.792347][T17036] usb 10-1: config 0 descriptor?? [ 1225.018797][T17036] hub 10-1:0.57: bad descriptor, ignoring hub [ 1225.025467][T17036] hub 10-1:0.57: probe with driver hub failed with error -5 [ 1225.035412][T17036] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1225.049936][T17036] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1225.058588][T17036] dib0700: firmware download failed at 7 with -22 [ 1225.066458][ T6430] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1225.097322][T17036] usb 10-1: USB disconnect, device number 107 [ 1225.226521][ T6430] usb 2-1: Using ep0 maxpacket: 16 [ 1225.233469][ T6430] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.245252][ T6430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1225.257793][ T6430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1225.277010][ T6430] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1225.291712][ T6430] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.308969][ T6430] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1225.319952][ T6430] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1225.328139][ T6430] usb 2-1: Manufacturer: syz [ 1225.337805][ T6430] usb 2-1: config 0 descriptor?? [ 1225.437145][T21490] fuse: Bad value for 'fd' [ 1225.586316][ T6430] rc_core: IR keymap rc-hauppauge not found [ 1225.606531][ T6430] Registered IR keymap rc-empty [ 1225.637339][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1225.843634][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1225.866832][ T6430] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1225.908817][ T6430] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input73 [ 1226.056769][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1226.096257][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1226.116140][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.076121][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.213547][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1227.213578][ T30] audit: type=1400 audit(1766002077.774:1966): avc: denied { bind } for pid=21482 comm="syz.1.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1227.306347][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.425619][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.446101][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.486306][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.499949][T21526] tipc: Enabling of bearer rejected, failed to enable media [ 1227.526392][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.546427][ T6430] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1227.597491][ T6430] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1227.618196][ T6430] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1227.638249][ T30] audit: type=1400 audit(1766002078.265:1967): avc: denied { create } for pid=21527 comm="syz.7.4215" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1227.669199][T17558] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1227.672432][ T30] audit: type=1400 audit(1766002078.275:1968): avc: denied { getopt } for pid=21527 comm="syz.7.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1227.875140][T17558] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1227.887153][T17558] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1227.898181][T17558] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1227.907437][T17558] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.942778][T21522] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1227.967871][ T30] audit: type=1400 audit(1766002078.615:1969): avc: denied { append } for pid=21531 comm="syz.8.4212" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1227.969281][T17558] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.022217][ T30] audit: type=1400 audit(1766002078.665:1970): avc: denied { write } for pid=21531 comm="syz.8.4212" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1228.130590][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1228.140903][T21538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1228.150273][T21538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1228.208827][T21540] /dev/nullb0: Can't lookup blockdev [ 1228.230255][T21522] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4211'. [ 1228.284156][T21544] ip6gre1: entered allmulticast mode [ 1228.547763][T17558] usb 10-1: USB disconnect, device number 108 [ 1229.017621][ T6430] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1229.026943][ T5924] usb 2-1: USB disconnect, device number 51 [ 1229.131936][T21558] syzkaller0: entered promiscuous mode [ 1229.137790][T21558] syzkaller0: entered allmulticast mode [ 1229.177211][ T6430] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.187711][ T6430] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.197578][ T6430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.221119][ T6430] usb 9-1: config 0 descriptor?? [ 1229.229027][ T6430] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.388559][ T5924] usb 10-1: new full-speed USB device number 109 using dummy_hcd [ 1229.388688][T21572] 9p: Bad value for 'rfdno' [ 1229.533257][ T30] audit: type=1400 audit(1766002080.175:1971): avc: denied { create } for pid=21569 comm="syz.1.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1230.065370][T21548] tipc: Enabled bearer , priority 0 [ 1230.077814][T21548] syzkaller0: entered promiscuous mode [ 1230.083737][T21548] syzkaller0: entered allmulticast mode [ 1230.311035][ T6430] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.460990][ T5924] usb 10-1: not running at top speed; connect to a high speed hub [ 1230.483525][ T5924] usb 10-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 1230.522535][ T30] audit: type=1400 audit(1766002081.165:1972): avc: denied { set_context_mgr } for pid=21579 comm="syz.1.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1230.585164][ T5924] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1230.633492][ T5924] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1230.633519][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.633538][ T5924] usb 10-1: Product: syz [ 1230.633571][ T5924] usb 10-1: Manufacturer: syz [ 1230.633586][ T5924] usb 10-1: SerialNumber: syz [ 1230.876946][ T30] audit: type=1400 audit(1766002081.525:1973): avc: denied { ioctl } for pid=21557 comm="syz.9.4225" path="socket:[83766]" dev="sockfs" ino=83766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1230.973338][ T5924] usb 10-1: 0:2 : does not exist [ 1230.986749][ T30] audit: type=1400 audit(1766002081.575:1974): avc: denied { write } for pid=21557 comm="syz.9.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1231.017120][ T6430] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1231.050444][ T5924] usb 10-1: USB disconnect, device number 109 [ 1231.058460][T21592] bond1: option mode: unable to set because the bond device is up [ 1231.330154][ T30] audit: type=1400 audit(1766002081.965:1975): avc: denied { write } for pid=21595 comm="syz.0.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1231.666079][T21547] tipc: Resetting bearer [ 1232.441597][T21617] binder: 21616:21617 ioctl c0306201 200000000640 returned -22 [ 1232.595687][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1232.595720][ T30] audit: type=1400 audit(1766002083.245:1984): avc: denied { unlink } for pid=18300 comm="syz-executor" name="file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1233.853336][T21547] tipc: Disabling bearer [ 1234.635896][T21627] bond1: option mode: unable to set because the bond device is up [ 1234.739388][ T6430] pwc: recv_control_msg error -71 req 04 val 1400 [ 1234.761095][ T6430] pwc: recv_control_msg error -71 req 02 val 2000 [ 1234.785579][ T6430] pwc: recv_control_msg error -71 req 02 val 2100 [ 1234.809751][ T6430] pwc: recv_control_msg error -71 req 04 val 1500 [ 1234.966227][ T30] audit: type=1400 audit(1766002085.615:1985): avc: denied { watch watch_reads } for pid=21642 comm="syz.1.4252" path="/178/bus" dev="overlay" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1236.581526][ T6430] pwc: recv_control_msg error -71 req 02 val 2500 [ 1236.601962][ T6430] pwc: recv_control_msg error -71 req 02 val 2400 [ 1236.945341][ T6430] pwc: recv_control_msg error -71 req 02 val 2600 [ 1236.945419][ T30] audit: type=1400 audit(1766002087.406:1986): avc: denied { read } for pid=21649 comm="syz.9.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1236.952206][ T6430] pwc: recv_control_msg error -71 req 02 val 2900 [ 1236.979120][ T6430] pwc: recv_control_msg error -71 req 02 val 2800 [ 1236.986058][ T6430] pwc: recv_control_msg error -71 req 04 val 1100 [ 1236.993931][ T6430] pwc: recv_control_msg error -71 req 04 val 1200 [ 1237.002406][ T6430] pwc: Registered as video103. [ 1237.008670][ T6430] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input74 [ 1237.023626][ T6430] usb 9-1: USB disconnect, device number 79 [ 1237.037868][ T30] audit: type=1400 audit(1766002087.486:1987): avc: denied { ioctl } for pid=21649 comm="syz.9.4254" path="socket:[83935]" dev="sockfs" ino=83935 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1237.117549][ T30] audit: type=1400 audit(1766002087.676:1988): avc: denied { name_bind } for pid=21655 comm="syz.0.4253" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1237.309213][ T30] audit: type=1400 audit(1766002087.956:1989): avc: denied { getopt } for pid=21657 comm="syz.0.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1237.862312][T21673] bond1: option mode: unable to set because the bond device is up [ 1238.007350][ T30] audit: type=1400 audit(1766002088.646:1990): avc: denied { write } for pid=21675 comm="syz.9.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1238.105382][T21680] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4261'. [ 1238.114521][T21680] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4261'. [ 1238.151426][ T30] audit: type=1400 audit(1766002088.796:1991): avc: denied { write } for pid=21670 comm="syz.7.4258" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1238.177268][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.255739][ T30] audit: type=1400 audit(1766002088.906:1992): avc: denied { watch watch_reads } for pid=21665 comm="syz.8.4261" path="/proc/1963/map_files" dev="proc" ino=83986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1238.374788][T17558] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1238.539719][T17558] usb 2-1: config 1 has an invalid interface number: 140 but max is 0 [ 1238.551366][T17558] usb 2-1: config 1 has no interface number 0 [ 1238.557868][T17558] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1238.567000][T17558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.798609][ T30] audit: type=1400 audit(1766002089.446:1993): avc: denied { read } for pid=21679 comm="syz.1.4263" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1238.824664][T17558] usb 2-1: string descriptor 0 read error: -71 [ 1238.832356][T17558] usb 2-1: MBOX3: Invalid descriptor size=18. [ 1238.841956][T17558] usb 2-1: USB disconnect, device number 52 [ 1238.912336][T21688] batadv0: entered promiscuous mode [ 1238.919150][T21688] batadv0: entered allmulticast mode [ 1238.929117][T21688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.154753][T17558] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1239.162642][ T30] audit: type=1400 audit(1766002089.796:1994): avc: denied { setattr } for pid=21687 comm="syz.8.4266" name="PHONET" dev="sockfs" ino=84011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1239.555762][ T30] audit: type=1400 audit(1766002090.186:1995): avc: denied { read write } for pid=21700 comm="syz.1.4272" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1239.699497][ T30] audit: type=1400 audit(1766002090.186:1996): avc: denied { open } for pid=21700 comm="syz.1.4272" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1239.706645][T21701] tipc: Enabled bearer , priority 0 [ 1239.734904][T17558] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.749673][T17558] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1239.759200][T17558] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.771319][T17558] usb 10-1: config 0 descriptor?? [ 1239.780088][T17558] pwc: Askey VC010 type 2 USB webcam detected. [ 1239.780662][T21701] syzkaller0: entered promiscuous mode [ 1239.791990][T21701] syzkaller0: entered allmulticast mode [ 1239.798160][T21701] tipc: Resetting bearer [ 1239.828641][ T30] audit: type=1400 audit(1766002090.476:1997): avc: denied { sys_module } for pid=21700 comm="syz.1.4272" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1240.201398][T17558] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1240.430909][T21690] (syz.9.4268,21690,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1240.475572][T21690] (syz.9.4268,21690,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1240.498297][T17558] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1240.645800][T21700] tipc: Resetting bearer [ 1240.659682][T21690] (syz.9.4268,21690,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1240.675754][T21690] (syz.9.4268,21690,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1241.303299][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1241.325727][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1243.557909][ T30] audit: type=1400 audit(1766002094.196:1998): avc: denied { kexec_image_load } for pid=21739 comm="syz.0.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1243.605274][ T30] audit: type=1400 audit(1766002094.256:1999): avc: denied { create } for pid=21739 comm="syz.0.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1243.662903][ T30] audit: type=1400 audit(1766002094.306:2000): avc: denied { connect } for pid=21739 comm="syz.0.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1243.694056][ T30] audit: type=1400 audit(1766002094.306:2001): avc: denied { write } for pid=21739 comm="syz.0.4284" path="socket:[85150]" dev="sockfs" ino=85150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1245.269874][T21700] tipc: Disabling bearer [ 1245.874934][T17558] pwc: recv_control_msg error -71 req 04 val 1400 [ 1245.902303][T17558] pwc: recv_control_msg error -71 req 02 val 2000 [ 1246.078570][T17558] pwc: recv_control_msg error -71 req 02 val 2100 [ 1246.114358][T17558] pwc: recv_control_msg error -71 req 04 val 1500 [ 1246.137196][T17558] pwc: recv_control_msg error -71 req 02 val 2500 [ 1246.144328][T17558] pwc: recv_control_msg error -71 req 02 val 2400 [ 1246.151121][T17558] pwc: recv_control_msg error -71 req 02 val 2600 [ 1246.159403][T17558] pwc: recv_control_msg error -71 req 02 val 2900 [ 1246.172653][T17558] pwc: recv_control_msg error -71 req 02 val 2800 [ 1246.273813][ T30] audit: type=1400 audit(1766002096.817:2002): avc: denied { write } for pid=21764 comm="syz.9.4291" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1246.466927][ T30] audit: type=1400 audit(1766002096.817:2003): avc: denied { open } for pid=21764 comm="syz.9.4291" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1246.516938][T17558] pwc: recv_control_msg error -71 req 04 val 1100 [ 1246.524151][ T30] audit: type=1400 audit(1766002096.927:2004): avc: denied { bind } for pid=21764 comm="syz.9.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1246.548541][T17558] pwc: recv_control_msg error -71 req 04 val 1200 [ 1246.557729][ T30] audit: type=1400 audit(1766002096.927:2005): avc: denied { listen } for pid=21764 comm="syz.9.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1246.578310][ T30] audit: type=1400 audit(1766002096.927:2006): avc: denied { write } for pid=21764 comm="syz.9.4291" path="socket:[85203]" dev="sockfs" ino=85203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1246.602726][ T30] audit: type=1400 audit(1766002096.957:2007): avc: denied { create } for pid=21764 comm="syz.9.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1246.708899][T17558] pwc: Registered as video103. [ 1246.725945][T17558] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input76 [ 1246.742042][T17558] usb 10-1: USB disconnect, device number 110 [ 1247.311066][T21785] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1247.593568][T17558] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1248.504633][T17558] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1248.520373][T17558] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1248.544676][T17558] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1248.572484][T17558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.616479][T21792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1248.641190][T17558] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1248.687257][T21805] tipc: Enabled bearer , priority 0 [ 1248.739589][T21805] syzkaller0: entered promiscuous mode [ 1248.757638][T21805] syzkaller0: entered allmulticast mode [ 1248.763999][T21805] tipc: Resetting bearer [ 1248.887467][T21792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4299'. [ 1249.040619][ T5924] usb 2-1: USB disconnect, device number 53 [ 1249.261251][T21815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1249.271731][T21817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1249.554405][T21804] tipc: Resetting bearer [ 1251.603228][T21820] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1251.807807][T21820] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1251.817331][T21820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.826186][T21820] usb 2-1: Product: syz [ 1251.830404][T21820] usb 2-1: Manufacturer: syz [ 1251.835139][T21820] usb 2-1: SerialNumber: syz [ 1251.887675][T21820] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1251.911301][ T5924] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1252.134673][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1252.134686][ T30] audit: type=1400 audit(1766002102.787:2011): avc: denied { append } for pid=21836 comm="syz.1.4310" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1252.165329][T21837] random: crng reseeded on system resumption [ 1252.177437][ T30] audit: type=1400 audit(1766002102.817:2012): avc: denied { open } for pid=21836 comm="syz.1.4310" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1252.307477][T21842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.322356][T21842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.712315][ T791] usb 2-1: USB disconnect, device number 54 [ 1252.953072][ T5924] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1252.960117][ T5924] ath9k_htc: Failed to initialize the device [ 1252.983337][ T791] usb 2-1: ath9k_htc: USB layer deinitialized [ 1253.945107][ T30] audit: type=1400 audit(1766002104.158:2013): avc: denied { append } for pid=21853 comm="syz.1.4312" name="v4l-subdev7" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1254.465635][T21804] tipc: Disabling bearer [ 1254.476536][T21830] bond1: option mode: unable to set because the bond device is up [ 1254.566116][ T30] audit: type=1400 audit(1766002105.218:2014): avc: denied { read write } for pid=21860 comm="syz.7.4314" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1254.591360][ T30] audit: type=1400 audit(1766002105.218:2015): avc: denied { open } for pid=21860 comm="syz.7.4314" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1254.622537][ T30] audit: type=1400 audit(1766002105.268:2016): avc: denied { read } for pid=21860 comm="syz.7.4314" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1254.690688][ T30] audit: type=1400 audit(1766002105.268:2017): avc: denied { open } for pid=21860 comm="syz.7.4314" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1255.563401][T17558] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1255.714243][T17558] usb 10-1: config 0 has an invalid interface number: 57 but max is 0 [ 1255.722492][T17558] usb 10-1: config 0 has no interface number 0 [ 1255.728869][T17558] usb 10-1: too many endpoints for config 0 interface 57 altsetting 68: 230, using maximum allowed: 30 [ 1255.742808][T17558] usb 10-1: config 0 interface 57 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1255.756330][T17558] usb 10-1: config 0 interface 57 has no altsetting 0 [ 1255.772650][T17558] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1255.783678][T17558] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.793372][T17558] usb 10-1: Product: syz [ 1255.798689][T17558] usb 10-1: Manufacturer: syz [ 1255.805277][T17558] usb 10-1: SerialNumber: syz [ 1255.815934][T17558] usb 10-1: config 0 descriptor?? [ 1256.053635][T21871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.067147][T21871] batadv_slave_0: entered promiscuous mode [ 1256.463832][T17558] hub 10-1:0.57: bad descriptor, ignoring hub [ 1256.477967][T17558] hub 10-1:0.57: probe with driver hub failed with error -5 [ 1256.487477][T17558] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1256.499394][T17558] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1256.507860][T17558] dib0700: firmware download failed at 7 with -22 [ 1256.538425][T17558] usb 10-1: USB disconnect, device number 111 [ 1257.101544][T21888] bond1: option mode: unable to set because the bond device is up [ 1257.519083][ T30] audit: type=1400 audit(1766002108.168:2018): avc: denied { write } for pid=21899 comm="syz.1.4327" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1257.562980][ T30] audit: type=1400 audit(1766002108.198:2019): avc: denied { map } for pid=21899 comm="syz.1.4327" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1258.208189][ T30] audit: type=1400 audit(1766002108.388:2020): avc: denied { lock } for pid=21899 comm="syz.1.4327" path="socket:[85544]" dev="sockfs" ino=85544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1258.232118][ T30] audit: type=1400 audit(1766002108.388:2021): avc: denied { call } for pid=21899 comm="syz.1.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1258.464420][ T30] audit: type=1400 audit(1766002109.038:2022): avc: denied { write } for pid=21904 comm="syz.9.4329" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1259.672380][ T5924] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1259.932146][ T5924] usb 10-1: Using ep0 maxpacket: 16 [ 1259.952779][ T5924] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 1260.007829][ T5924] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 25803, setting to 1024 [ 1260.064085][ T5924] usb 10-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1260.114558][ T5924] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1260.138924][ T5924] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.40 [ 1260.166985][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.197252][ T5924] usb 10-1: Product: syz [ 1260.211392][ T5924] usb 10-1: Manufacturer: Ж [ 1260.239117][ T5924] usb 10-1: SerialNumber: syz [ 1260.263756][T21920] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1260.991870][ T30] audit: type=1400 audit(1766002111.638:2023): avc: denied { mount } for pid=21928 comm="syz.1.4335" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1261.019344][T21929] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1261.961141][ T5924] usbhid 10-1:1.0: can't add hid device: -71 [ 1261.971895][ T5924] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1261.992050][ T5924] usb 10-1: USB disconnect, device number 112 [ 1262.517270][T21944] sctp: [Deprecated]: syz.7.4340 (pid 21944) Use of int in max_burst socket option deprecated. [ 1262.517270][T21944] Use struct sctp_assoc_value instead [ 1262.710095][ T30] audit: type=1400 audit(1766002113.359:2024): avc: denied { unmount } for pid=18300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1262.988435][T21948] mkiss: ax0: crc mode is auto. [ 1264.629934][ T30] audit: type=1400 audit(1766002115.239:2025): avc: denied { create } for pid=21949 comm="syz.0.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1265.155224][ T30] audit: type=1400 audit(1766002115.239:2026): avc: denied { setopt } for pid=21949 comm="syz.0.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1265.295727][ T30] audit: type=1400 audit(1766002115.949:2027): avc: denied { mount } for pid=21956 comm="syz.7.4343" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1265.739490][T21967] fuse: Bad value for 'fd' [ 1266.620371][ T30] audit: type=1400 audit(1766002116.879:2028): avc: denied { nlmsg_read } for pid=21974 comm="syz.0.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1266.901038][T21978] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4348'. [ 1266.903257][ T30] audit: type=1400 audit(1766002117.549:2029): avc: denied { create } for pid=21975 comm="syz.9.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1266.965843][ T30] audit: type=1400 audit(1766002117.549:2030): avc: denied { setopt } for pid=21975 comm="syz.9.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1266.966330][T21986] tipc: Enabled bearer , priority 0 [ 1267.123486][ T30] audit: type=1400 audit(1766002117.779:2031): avc: denied { read write } for pid=21990 comm="syz.1.4351" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1267.161119][T21986] syzkaller0: entered promiscuous mode [ 1267.168502][ T30] audit: type=1400 audit(1766002117.779:2032): avc: denied { open } for pid=21990 comm="syz.1.4351" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1267.194987][T21986] syzkaller0: entered allmulticast mode [ 1267.201320][T21986] tipc: Resetting bearer [ 1267.243164][T21978] kvm: user requested TSC rate below hardware speed [ 1267.389845][ T30] audit: type=1400 audit(1766002118.039:2033): avc: denied { accept } for pid=21995 comm="syz.9.4352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1267.441293][T21996] macvtap0: entered promiscuous mode [ 1267.448243][T21996] macvtap0: left promiscuous mode [ 1268.246645][T21985] tipc: Resetting bearer [ 1269.050511][ T30] audit: type=1400 audit(1766002119.579:2034): avc: denied { mount } for pid=22003 comm="syz.9.4355" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1269.693743][T22014] binder: 22011:22014 ioctl c0306201 200000000640 returned -22 [ 1270.856622][ T30] audit: type=1400 audit(1766002121.510:2035): avc: denied { read } for pid=22025 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1270.887891][ T30] audit: type=1400 audit(1766002121.540:2036): avc: denied { open } for pid=22025 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1270.888120][T20866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1270.923066][ T30] audit: type=1400 audit(1766002121.540:2037): avc: denied { ioctl } for pid=22025 comm="syz-executor" path="socket:[85777]" dev="sockfs" ino=85777 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1270.953121][T20866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1270.962154][T20866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1270.985952][T20866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1270.993342][T20866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.002641][ T30] audit: type=1400 audit(1766002121.660:2038): avc: denied { mounton } for pid=22025 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1272.009406][T21985] tipc: Disabling bearer [ 1272.066377][ T30] audit: type=1400 audit(1766002122.720:2039): avc: denied { unmount } for pid=19392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1272.919261][T22025] chnl_net:caif_netlink_parms(): no params data found [ 1273.112810][T16839] Bluetooth: hci4: command tx timeout [ 1273.144199][T22025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.155257][T22025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.170151][T22025] bridge_slave_0: entered allmulticast mode [ 1273.181232][T22025] bridge_slave_0: entered promiscuous mode [ 1273.191440][T22025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.208674][ T30] audit: type=1400 audit(1766002123.850:2040): avc: denied { lock } for pid=22045 comm="syz.7.4365" path="socket:[84839]" dev="sockfs" ino=84839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1273.228986][T22025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.244632][T22025] bridge_slave_1: entered allmulticast mode [ 1273.300961][T18879] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1273.329324][T22059] /dev/nullb0: Can't lookup blockdev [ 1273.349689][T22025] bridge_slave_1: entered promiscuous mode [ 1273.479875][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4369'. [ 1273.505424][T22025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.526097][ T30] audit: type=1400 audit(1766002124.180:2041): avc: denied { read } for pid=22060 comm="syz.0.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1273.575990][T18879] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.609260][T22025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.619345][T18879] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1273.635126][T18879] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1273.646962][T18879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.666325][T22048] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1273.674501][T22025] team0: Port device team_slave_0 added [ 1273.684543][T18879] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.698443][T22025] team0: Port device team_slave_1 added [ 1273.748877][T22025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.755929][T22025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.785700][T22025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.808327][T22025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.816285][T22025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.854126][T22025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.902403][T22048] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4366'. [ 1274.067593][ T5928] usb 10-1: USB disconnect, device number 113 [ 1274.113778][T22025] hsr_slave_0: entered promiscuous mode [ 1274.119860][T22025] hsr_slave_1: entered promiscuous mode [ 1274.171707][T22025] debugfs: 'hsr0' already exists in 'hsr' [ 1274.177595][T22025] Cannot create hsr debugfs directory [ 1274.469807][T22070] tipc: Enabled bearer , priority 0 [ 1274.687700][T22070] syzkaller0: entered promiscuous mode [ 1274.718563][T22070] syzkaller0: entered allmulticast mode [ 1274.824508][T22070] tipc: Resetting bearer [ 1275.191076][T16839] Bluetooth: hci4: command tx timeout [ 1275.347933][T13347] tipc: Resetting bearer [ 1275.473447][T22069] tipc: Resetting bearer [ 1276.030273][T22090] xt_bpf: check failed: parse error [ 1276.651373][ T30] audit: type=1400 audit(1766002127.310:2042): avc: denied { mount } for pid=22096 comm="syz.0.4378" name="/" dev="ramfs" ino=84948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1277.270739][T16839] Bluetooth: hci4: command tx timeout [ 1277.466551][T22102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4380'. [ 1278.078710][T22108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22108 comm=syz.1.4380 [ 1278.107127][ T30] audit: type=1400 audit(1766002128.760:2043): avc: denied { ioctl } for pid=22109 comm="syz.9.4382" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1278.472681][T22115] NFSD: Failed to start, no listeners configured. [ 1279.350283][T16839] Bluetooth: hci4: command tx timeout [ 1279.622276][T22129] kAFS: unable to lookup cell '(' [ 1280.558205][ T30] audit: type=1400 audit(1766002131.211:2044): avc: denied { bind } for pid=22136 comm="syz.0.4389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1281.884569][T22069] tipc: Disabling bearer [ 1282.354017][ T30] audit: type=1400 audit(1766002132.631:2045): avc: denied { ioctl } for pid=22144 comm="syz.0.4391" path="socket:[87072]" dev="sockfs" ino=87072 ioctlcmd=0x6101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1282.379721][ T30] audit: type=1400 audit(1766002132.641:2046): avc: denied { accept } for pid=22144 comm="syz.0.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1282.405733][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1282.413729][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1282.420362][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1282.502469][T22149] infiniband syz2: set active [ 1282.507165][T22149] infiniband syz2: added erspan0 [ 1282.513108][ T8320] erspan0 speed is unknown, defaulting to 1000 [ 1282.555538][T22149] RDS/IB: syz2: added [ 1282.561538][T22149] smc: adding ib device syz2 with port count 1 [ 1282.567901][T22149] smc: ib device syz2 port 1 has no pnetid [ 1282.574858][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1282.883338][ T8320] erspan0 speed is unknown, defaulting to 1000 [ 1282.904268][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1282.989267][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1283.077344][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1283.160019][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1283.241170][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1283.323208][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1283.405709][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1283.487982][T22149] erspan0 speed is unknown, defaulting to 1000 [ 1284.388931][T22025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1285.288744][T22025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1285.363318][T22165] bond1: option mode: unable to set because the bond device is up [ 1285.374204][ T30] audit: type=1400 audit(1766002136.021:2047): avc: denied { write } for pid=22170 comm="syz.9.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1285.400023][ T30] audit: type=1400 audit(1766002136.051:2048): avc: denied { connect } for pid=22170 comm="syz.9.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1285.427511][T22025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1285.496749][T22025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1285.583340][ T30] audit: type=1804 audit(1766002136.231:2049): pid=22173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.4400" name="/newroot/255/file0" dev="tmpfs" ino=1353 res=1 errno=0 [ 1285.631336][ T5928] usb 10-1: new full-speed USB device number 114 using dummy_hcd [ 1285.753707][T22025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.791249][T22025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.817578][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.824763][T13389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.833101][ T30] audit: type=1400 audit(1766002136.491:2050): avc: denied { map } for pid=22170 comm="syz.9.4397" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1285.872891][ T5928] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1285.875458][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.887818][T13389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.908417][ T30] audit: type=1400 audit(1766002136.511:2051): avc: denied { bind } for pid=22170 comm="syz.9.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1285.916394][ T5928] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1285.979253][ T5928] usb 10-1: can't read configurations, error -71 [ 1286.345958][T22025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.444205][ T30] audit: type=1400 audit(1766002137.091:2052): avc: denied { remount } for pid=22181 comm="syz.7.4401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1286.680188][T22198] binder: 22194:22198 ioctl c0306201 200000000640 returned -22 [ 1286.836079][T22025] veth0_vlan: entered promiscuous mode [ 1286.864300][T22025] veth1_vlan: entered promiscuous mode [ 1286.934003][T22025] veth0_macvtap: entered promiscuous mode [ 1286.962613][ T30] audit: type=1400 audit(1766002137.612:2053): avc: denied { bind } for pid=22188 comm="syz.0.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1287.027423][T22025] veth1_macvtap: entered promiscuous mode [ 1287.038108][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 1287.076390][T22191] vlan0: entered allmulticast mode [ 1287.083108][T22191] veth0_vlan: entered allmulticast mode [ 1287.096813][T21820] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1287.150220][T22025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.329917][T21820] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1287.488485][T22025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.496359][ T30] audit: type=1400 audit(1766002138.112:2054): avc: denied { ioctl } for pid=22203 comm="syz.9.4404" path="socket:[87285]" dev="sockfs" ino=87285 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1287.531641][T21820] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1287.554355][T21820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1287.564582][T21820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.579714][ T9055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.625605][ T9055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.639619][T22199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1287.661199][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.673746][T21820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1287.703053][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.449939][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.504199][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.589878][ T30] audit: type=1400 audit(1766002139.182:2055): avc: denied { map } for pid=22208 comm="syz.0.4405" path="socket:[87375]" dev="sockfs" ino=87375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1288.642977][T22212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1288.718459][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.745677][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.826587][ T30] audit: type=1400 audit(1766002139.462:2056): avc: denied { mounton } for pid=22025 comm="syz-executor" path="/root/syzkaller.fpBNNR/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1288.937531][T21820] usb 2-1: USB disconnect, device number 55 [ 1288.939123][T22215] input: syz1 as /devices/virtual/input/input77 [ 1288.974490][ T30] audit: type=1400 audit(1766002139.462:2057): avc: denied { mount } for pid=22025 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1289.027751][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1289.072366][ T30] audit: type=1400 audit(1766002139.472:2058): avc: denied { mounton } for pid=22025 comm="syz-executor" path="/root/syzkaller.fpBNNR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1289.224025][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1289.236004][ T30] audit: type=1400 audit(1766002139.472:2059): avc: denied { mounton } for pid=22025 comm="syz-executor" path="/root/syzkaller.fpBNNR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=86562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1289.326457][T22223] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4409'. [ 1289.701182][ T30] audit: type=1400 audit(1766002139.522:2060): avc: denied { mounton } for pid=22025 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1289.738078][ T30] audit: type=1400 audit(1766002139.522:2061): avc: denied { mount } for pid=22025 comm="syz-executor" name="/" dev="gadgetfs" ino=22340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1289.772927][ T30] audit: type=1400 audit(1766002139.522:2062): avc: denied { mount } for pid=22025 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1289.818615][ T30] audit: type=1400 audit(1766002139.522:2063): avc: denied { mounton } for pid=22025 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1289.947126][T22227] erspan0 speed is unknown, defaulting to 1000 [ 1290.760268][T17558] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1291.468827][T17558] usb 3-1: Using ep0 maxpacket: 32 [ 1291.691268][T17558] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1291.770444][T17558] usb 3-1: config 0 has no interface number 0 [ 1291.801869][T17558] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1291.923138][T17558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.933476][T17558] usb 3-1: Product: syz [ 1291.937673][T17558] usb 3-1: Manufacturer: syz [ 1291.942347][T17558] usb 3-1: SerialNumber: syz [ 1291.952753][T17558] usb 3-1: config 0 descriptor?? [ 1292.392696][T17558] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1292.411616][T22254] program syz.7.4416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1293.148842][T17558] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1293.192689][T17558] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1293.225234][T17558] usb 3-1: USB disconnect, device number 31 [ 1293.438176][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.485766][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.574715][T22272] "syz.2.4421" (22272) uses obsolete ecb(arc4) skcipher [ 1293.662437][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1293.662448][ T30] audit: type=1400 audit(1766002144.282:2068): avc: denied { read } for pid=22268 comm="syz.0.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1294.026826][T22276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1294.067240][T22281] tipc: Enabling of bearer rejected, already enabled [ 1294.140457][T22263] fuse: Bad value for 'fd' [ 1294.673181][T22288] veth1_to_bond: entered allmulticast mode [ 1295.008024][ T5924] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1295.646915][ T30] audit: type=1400 audit(1766002146.293:2069): avc: denied { listen } for pid=22300 comm="syz.7.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1295.756824][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.783467][ T5924] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1295.825254][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.854934][ T5924] usb 3-1: config 0 descriptor?? [ 1295.875691][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 1296.003225][T22286] veth1_to_bond: left allmulticast mode [ 1296.341043][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1296.551907][T22295] (syz.2.4426,22295,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1296.570034][T22295] (syz.2.4426,22295,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1296.591104][T22295] (syz.2.4426,22295,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1296.608450][ T30] audit: type=1400 audit(1766002147.253:2070): avc: denied { execute } for pid=22306 comm="syz.1.4429" dev="hugetlbfs" ino=87562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1296.636096][T22295] (syz.2.4426,22295,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1296.644237][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1296.677018][ T30] audit: type=1400 audit(1766002147.253:2071): avc: denied { execute_no_trans } for pid=22306 comm="syz.1.4429" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=87562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1297.090676][T22315] tipc: Trying to set illegal importance in message [ 1297.310167][T22321] overlayfs: failed to clone upperpath [ 1297.331576][ T5924] pwc: recv_control_msg error -71 req 04 val 1400 [ 1297.920024][ T5924] pwc: recv_control_msg error -71 req 02 val 2000 [ 1297.928415][ T5924] pwc: recv_control_msg error -71 req 02 val 2100 [ 1297.948384][ T8771] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.962810][ T5924] pwc: recv_control_msg error -71 req 04 val 1500 [ 1297.970067][ T5924] pwc: recv_control_msg error -71 req 02 val 2500 [ 1297.982978][ T5924] pwc: recv_control_msg error -71 req 02 val 2400 [ 1297.994424][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 1298.002686][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 1298.009632][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 1298.016572][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 1298.023642][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 1298.031628][ T5924] pwc: Registered as video103. [ 1298.038130][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78 [ 1298.053044][ T5924] usb 3-1: USB disconnect, device number 32 [ 1298.108138][T22323] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1298.187754][T22323] overlayfs: overlapping lowerdir path [ 1298.258984][ T30] audit: type=1400 audit(1766002148.913:2072): avc: denied { read write } for pid=22327 comm="syz.7.4434" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1298.288305][ T8771] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.337340][ T30] audit: type=1400 audit(1766002148.913:2073): avc: denied { open } for pid=22327 comm="syz.7.4434" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1298.389148][ T30] audit: type=1400 audit(1766002148.963:2074): avc: denied { ioctl } for pid=22327 comm="syz.7.4434" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1298.519010][T22332] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1298.573905][ T8771] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.798330][ T8771] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.304355][T22338] tipc: Enabling of bearer rejected, already enabled [ 1299.444104][ T30] audit: type=1326 audit(1766002150.093:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22342 comm="syz.9.4439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155df8f749 code=0x77ff0000 [ 1299.590473][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.736548][ T30] audit: type=1400 audit(1766002150.383:2076): avc: denied { ioctl } for pid=22353 comm="syz.2.4442" path="socket:[87632]" dev="sockfs" ino=87632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1300.105810][ T8771] bridge_slave_1: left allmulticast mode [ 1300.121213][ T8771] bridge_slave_1: left promiscuous mode [ 1300.187472][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.213846][ T30] audit: type=1400 audit(1766002150.863:2077): avc: denied { getopt } for pid=22353 comm="syz.2.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1300.244755][ T8771] bridge_slave_0: left allmulticast mode [ 1300.257416][ T8771] bridge_slave_0: left promiscuous mode [ 1300.263087][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.778769][ T8771] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1300.844047][ T8771] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1301.355267][T22371] overlay: ./file0 is not a directory [ 1301.432952][T22372] overlay: ./file0 is not a directory [ 1303.418903][ T8771] bond1 (unregistering): Released all slaves [ 1303.938367][ T8771] bond2 (unregistering): Released all slaves [ 1304.299175][ T8771] bond3 (unregistering): Released all slaves [ 1304.453804][ T8771] bond0 (unregistering): Released all slaves [ 1304.532614][T22396] binder: 22385:22396 ioctl c0306201 0 returned -14 [ 1304.610913][ T8771] bond4 (unregistering): Released all slaves [ 1304.750926][ T8771] bond5 (unregistering): Released all slaves [ 1304.766546][T22363] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4444'. [ 1304.843298][T22387] bond1: option mode: unable to set because the bond device is up [ 1304.879682][ T8771] : left promiscuous mode [ 1304.972386][ T8771] tipc: Disabling bearer [ 1304.981783][ T8771] tipc: Left network mode [ 1305.081796][ T30] audit: type=1400 audit(1766002155.734:2078): avc: denied { mount } for pid=22401 comm="syz.2.4458" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1305.106140][T22402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1305.147966][T22402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1305.170516][ T30] audit: type=1400 audit(1766002155.764:2079): avc: denied { mounton } for pid=22401 comm="syz.2.4458" path="/9/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1305.196185][T22402] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 1305.293776][ T30] audit: type=1400 audit(1766002155.954:2080): avc: denied { unmount } for pid=22025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1305.541005][ T30] audit: type=1400 audit(1766002156.194:2081): avc: denied { create } for pid=22411 comm="syz.2.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1305.580370][T22415] tipc: Enabling of bearer rejected, already enabled [ 1305.620847][ T30] audit: type=1400 audit(1766002156.194:2082): avc: denied { setopt } for pid=22411 comm="syz.2.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1305.701070][ T8771] hsr_slave_0: left promiscuous mode [ 1305.717774][ T8771] hsr_slave_1: left promiscuous mode [ 1305.724548][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.757608][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.843678][ T8771] pim6reg (unregistering): left allmulticast mode [ 1309.844080][T22445] fuse: Bad value for 'fd' [ 1309.892837][ T30] audit: type=1400 audit(1766002160.544:2083): avc: denied { ioctl } for pid=22444 comm="syz.9.4470" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1310.110658][ T8771] team0 (unregistering): Port device team_slave_1 removed [ 1310.161869][ T8771] team0 (unregistering): Port device team_slave_0 removed [ 1310.537834][T22461] zonefs (nullb0) ERROR: Not a zoned block device [ 1310.567420][ T30] audit: type=1400 audit(1766002161.214:2084): avc: denied { map } for pid=22460 comm="syz.7.4474" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1310.636148][ T30] audit: type=1400 audit(1766002161.214:2085): avc: denied { execute } for pid=22460 comm="syz.7.4474" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1310.964113][T22426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1318.572014][T22489] tipc: Enabling of bearer rejected, already enabled [ 1318.675274][ T8320] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1318.797223][ T8771] IPVS: stop unused estimator thread 0... [ 1318.882995][ T8320] usb 2-1: Using ep0 maxpacket: 16 [ 1319.028221][ T8320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.150136][ T8320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.210776][ T8320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1319.281508][ T8320] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1319.335305][ T8320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.384512][ T8320] usb 2-1: config 0 descriptor?? [ 1319.522241][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4485'. [ 1319.562082][T22497] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1319.818407][ T8320] input: HID 0955:7214 Haptics as /devices/virtual/input/input80 [ 1319.852798][ T8320] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 1319.880851][ T8320] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1320.046847][ T8937] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1320.061271][T21958] usb 2-1: USB disconnect, device number 56 [ 1320.068039][ T8937] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1320.097120][ T8937] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1320.109370][ T8937] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1320.349025][T21820] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1321.330517][T21820] usb 10-1: device descriptor read/64, error -71 [ 1321.495148][T22520] /dev/nullb0: Can't lookup blockdev [ 1322.194852][T21820] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1322.364841][T21820] usb 10-1: device descriptor read/64, error -71 [ 1322.486285][T21820] usb usb10-port1: attempt power cycle [ 1322.655644][ T30] audit: type=1400 audit(1766002173.316:2086): avc: denied { getopt } for pid=22537 comm="syz.0.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1322.884759][T21820] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1322.924179][T21820] usb 10-1: device descriptor read/8, error -71 [ 1322.973344][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4502'. [ 1322.994729][T22548] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4502'. [ 1323.097811][ T30] audit: type=1400 audit(1766002173.756:2087): avc: denied { write } for pid=22549 comm="syz.9.4503" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1323.339054][T22556] sp0: Synchronizing with TNC [ 1323.365492][ T30] audit: type=1400 audit(1766002174.026:2088): avc: denied { read append } for pid=22555 comm="syz.9.4505" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1323.429793][ T30] audit: type=1400 audit(1766002174.026:2089): avc: denied { open } for pid=22555 comm="syz.9.4505" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1324.060724][ T30] audit: type=1400 audit(1766002174.626:2090): avc: denied { create } for pid=22569 comm="syz.2.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1324.150145][T22555] [U] è [ 1325.073612][T22579] binder: 22578:22579 ioctl c0306201 200000000640 returned -22 [ 1325.156441][ T30] audit: type=1400 audit(1766002175.816:2091): avc: denied { setopt } for pid=22580 comm="syz.2.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1325.255310][ T30] audit: type=1400 audit(1766002175.856:2092): avc: denied { execute } for pid=22580 comm="syz.2.4512" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 1325.394207][ T30] audit: type=1400 audit(1766002175.856:2093): avc: denied { ioctl } for pid=22580 comm="syz.2.4512" path="socket:[88611]" dev="sockfs" ino=88611 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1325.804616][ T30] audit: type=1400 audit(1766002176.386:2094): avc: denied { setopt } for pid=22591 comm="syz.2.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1326.442461][T22604] set match dimension is over the limit! [ 1327.053597][ T30] audit: type=1400 audit(1766002177.406:2095): avc: denied { execute_no_trans } for pid=22601 comm="syz.2.4518" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1327.244357][T18879] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1327.401851][T22611] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4519'. [ 1327.504557][T18879] usb 2-1: device descriptor read/64, error -71 [ 1327.906667][T18879] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1327.947421][ T30] audit: type=1400 audit(1766002178.606:2096): avc: denied { unmount } for pid=19392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1328.054936][T18879] usb 2-1: device descriptor read/64, error -71 [ 1328.289571][T18879] usb usb2-port1: attempt power cycle [ 1328.340782][ T30] audit: type=1400 audit(1766002178.996:2097): avc: denied { bind } for pid=22622 comm="syz.2.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1328.664232][T18879] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1328.705375][T18879] usb 2-1: device descriptor read/8, error -71 [ 1328.982982][T22644] erspan0 speed is unknown, defaulting to 1000 [ 1328.984073][T18879] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1329.467390][T18879] usb 2-1: device descriptor read/8, error -71 [ 1329.734098][T18879] usb usb2-port1: unable to enumerate USB device [ 1331.094250][T22670] netlink: 'syz.0.4535': attribute type 33 has an invalid length. [ 1331.102068][T22670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4535'. [ 1333.393572][ T791] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1333.605395][ T791] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1333.663966][ T791] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1333.718074][ T791] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1333.767686][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.821957][T22677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1333.918645][ T791] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1334.170360][T22677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1334.449520][ T791] usb 3-1: USB disconnect, device number 33 [ 1334.943642][ T791] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 1335.174962][ T791] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1335.189315][ T791] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1335.200887][ T791] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1335.210564][ T791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.240685][T22695] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1335.318656][ T791] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1335.666257][ T791] usb 10-1: USB disconnect, device number 120 [ 1335.685250][ T6095] bond_slave_0: left promiscuous mode [ 1335.717866][ T6095] bond_slave_1: left promiscuous mode [ 1335.836305][ T30] audit: type=1400 audit(1766002186.497:2098): avc: denied { ioctl } for pid=22709 comm="syz.7.4545" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1338.130209][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.176848][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.245440][ T6095] bond0 (unregistering): Released all slaves [ 1338.824408][ T6095] bond1 (unregistering): Released all slaves [ 1339.989123][ T6095] bond2 (unregistering): Released all slaves [ 1340.821710][ T6095] bond3 (unregistering): (slave vlan2): Releasing active interface [ 1340.830706][ T6095] bond3 (unregistering): Released all slaves [ 1341.224196][ T6095] bond4 (unregistering): Released all slaves [ 1344.204086][T22747] macvlan0: entered allmulticast mode [ 1344.217470][ T6095] tipc: Disabling bearer [ 1344.253493][ T6095] tipc: Left network mode [ 1344.258623][ T30] audit: type=1400 audit(1766002194.918:2099): avc: denied { read write } for pid=22769 comm="syz.2.4559" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1344.322972][ T30] audit: type=1400 audit(1766002194.948:2100): avc: denied { open } for pid=22769 comm="syz.2.4559" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1347.154965][ T30] audit: type=1400 audit(1766002197.668:2101): avc: denied { execute } for pid=22802 comm="syz.1.4569" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1347.429100][ T6095] hsr_slave_0: left promiscuous mode [ 1347.458368][ T6095] hsr_slave_1: left promiscuous mode [ 1347.475788][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.505524][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.561311][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.570811][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.686240][ T6095] veth1_macvtap: left promiscuous mode [ 1347.736710][ T6095] veth1_vlan: left promiscuous mode [ 1347.742131][T21958] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1347.760140][ T6095] veth0_vlan: left promiscuous mode [ 1348.010948][T21958] usb 3-1: Using ep0 maxpacket: 32 [ 1454.169622][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1454.176682][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6095/1:b..l P22818/1:b..l P22791/1:b..l [ 1454.187559][ C1] rcu: (detected by 1, t=10502 jiffies, g=129725, q=269 ncpus=2) [ 1454.195332][ C1] task:syz.2.4565 state:R running task stack:27544 pid:22791 tgid:22779 ppid:22025 task_flags:0x40054c flags:0x00080002 [ 1454.209703][ C1] Call Trace: [ 1454.212965][ C1] [ 1454.215885][ C1] ? __schedule+0x10b9/0x6150 [ 1454.220538][ C1] __schedule+0x1139/0x6150 [ 1454.225032][ C1] ? __pfx___schedule+0x10/0x10 [ 1454.229855][ C1] ? find_held_lock+0x2b/0x80 [ 1454.234505][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1454.239851][ C1] preempt_schedule_common+0x44/0xc0 [ 1454.245126][ C1] preempt_schedule_thunk+0x16/0x30 [ 1454.250298][ C1] _raw_spin_unlock+0x3e/0x50 [ 1454.254946][ C1] unmap_page_range+0x1047/0x43c0 [ 1454.259954][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1454.265311][ C1] ? uprobe_munmap+0x93/0x600 [ 1454.269960][ C1] unmap_single_vma+0x153/0x240 [ 1454.274811][ C1] unmap_vmas+0x218/0x470 [ 1454.279122][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1454.283946][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1454.288865][ C1] exit_mmap+0x1b0/0xb60 [ 1454.293081][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1454.297822][ C1] ? __lock_acquire+0x436/0x2890 [ 1454.302736][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1454.308270][ C1] __mmput+0x12a/0x410 [ 1454.312337][ C1] mmput+0x62/0x70 [ 1454.316057][ C1] do_exit+0x7d7/0x2bd0 [ 1454.320192][ C1] ? __pfx_do_exit+0x10/0x10 [ 1454.324755][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1454.329752][ C1] ? find_held_lock+0x2b/0x80 [ 1454.334421][ C1] do_group_exit+0xd3/0x2a0 [ 1454.338912][ C1] get_signal+0x2671/0x26d0 [ 1454.343403][ C1] ? rcu_is_watching+0x12/0xc0 [ 1454.348151][ C1] ? __pfx_get_signal+0x10/0x10 [ 1454.352985][ C1] ? rcu_is_watching+0x12/0xc0 [ 1454.357717][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1454.363238][ C1] ? down_interruptible+0x66/0xa0 [ 1454.368240][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1454.374365][ C1] ? raw_ioctl+0x106/0x2e60 [ 1454.378845][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 1454.383590][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 1454.388865][ C1] do_syscall_64+0x4ee/0xf80 [ 1454.393442][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.399314][ C1] RIP: 0033:0x7fe3d078f34b [ 1454.403699][ C1] RSP: 002b:00007fe3d15dbf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.412078][ C1] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007fe3d078f34b [ 1454.420021][ C1] RDX: 00007fe3d15dcfe0 RSI: 0000000080085502 RDI: 0000000000000007 [ 1454.427966][ C1] RBP: 00007fe3d15dcfe0 R08: 0000000000000080 R09: 00007fe3d15dbfd8 [ 1454.435912][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1454.443939][ C1] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fe3d081f52a [ 1454.451888][ C1] [ 1454.454881][ C1] task:syz.7.4573 state:R running task stack:27544 pid:22818 tgid:22810 ppid:17419 task_flags:0x40044c flags:0x00080000 [ 1454.468315][ C1] Call Trace: [ 1454.471566][ C1] [ 1454.474468][ C1] ? __schedule+0x10b9/0x6150 [ 1454.479117][ C1] __schedule+0x1139/0x6150 [ 1454.483597][ C1] ? __pfx___schedule+0x10/0x10 [ 1454.488420][ C1] ? find_held_lock+0x2b/0x80 [ 1454.493071][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1454.498411][ C1] preempt_schedule_common+0x44/0xc0 [ 1454.503665][ C1] preempt_schedule_thunk+0x16/0x30 [ 1454.508847][ C1] _raw_spin_unlock+0x3e/0x50 [ 1454.513496][ C1] unmap_page_range+0x1047/0x43c0 [ 1454.518503][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1454.523848][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1454.528761][ C1] ? uprobe_munmap+0x93/0x600 [ 1454.533425][ C1] unmap_single_vma+0x153/0x240 [ 1454.538271][ C1] unmap_vmas+0x218/0x470 [ 1454.542574][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1454.547405][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1454.552353][ C1] exit_mmap+0x1b0/0xb60 [ 1454.556571][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1454.561312][ C1] ? __lock_acquire+0x436/0x2890 [ 1454.566227][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1454.571750][ C1] __mmput+0x12a/0x410 [ 1454.575797][ C1] mmput+0x62/0x70 [ 1454.579490][ C1] do_exit+0x7d7/0x2bd0 [ 1454.583632][ C1] ? lock_acquire+0x179/0x330 [ 1454.588307][ C1] ? __pfx_do_exit+0x10/0x10 [ 1454.592876][ C1] ? find_held_lock+0x2b/0x80 [ 1454.597555][ C1] do_group_exit+0xd3/0x2a0 [ 1454.602059][ C1] get_signal+0x2671/0x26d0 [ 1454.606545][ C1] ? __pfx_get_signal+0x10/0x10 [ 1454.611371][ C1] ? do_futex+0x122/0x350 [ 1454.615686][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1454.621210][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1454.627341][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1454.632601][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 1454.637862][ C1] do_syscall_64+0x4ee/0xf80 [ 1454.642435][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.648299][ C1] RIP: 0033:0x7f090cb8f749 [ 1454.652687][ C1] RSP: 002b:00007f090adb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1454.661070][ C1] RAX: fffffffffffffe00 RBX: 00007f090cde6188 RCX: 00007f090cb8f749 [ 1454.669013][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f090cde6188 [ 1454.677139][ C1] RBP: 00007f090cde6180 R08: 0000000000000000 R09: 0000000000000000 [ 1454.685084][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.693045][ C1] R13: 00007f090cde6218 R14: 00007fff0abc11e0 R15: 00007fff0abc12c8 [ 1454.701018][ C1] [ 1454.704288][ C1] task:kworker/u8:19 state:R running task stack:23544 pid:6095 tgid:6095 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1454.717813][ C1] Workqueue: netns cleanup_net [ 1454.722569][ C1] Call Trace: [ 1454.725829][ C1] [ 1454.728743][ C1] ? __schedule+0x10b9/0x6150 [ 1454.733405][ C1] __schedule+0x1139/0x6150 [ 1454.737885][ C1] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1454.744537][ C1] ? __pfx___schedule+0x10/0x10 [ 1454.749359][ C1] ? mark_held_locks+0x49/0x80 [ 1454.754117][ C1] preempt_schedule_irq+0x51/0x90 [ 1454.759127][ C1] irqentry_exit+0x1d8/0x8c0 [ 1454.763689][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1454.769639][ C1] RIP: 0010:queue_work_on+0x86/0x1f0 [ 1454.774898][ C1] Code: 3a 00 45 84 f6 74 38 e8 48 2d 3a 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 06 28 3a 00 48 85 db 0f 85 4f 01 00 00 45 31 f6 25 2d 3a 00 44 89 f0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 [ 1454.794476][ C1] RSP: 0018:ffffc90004eff370 EFLAGS: 00000293 [ 1454.800516][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184ba1c [ 1454.808471][ C1] RDX: ffff88801db60000 RSI: ffffffff8184ba26 RDI: 0000000000000007 [ 1454.816461][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 1454.824407][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000008 [ 1454.832361][ C1] R13: ffff8880222ab800 R14: 0000000000000001 R15: ffff88806c01c610 [ 1454.840309][ C1] ? queue_work_on+0x13c/0x1f0 [ 1454.845050][ C1] ? queue_work_on+0x146/0x1f0 [ 1454.849799][ C1] addr_event.constprop.0+0x391/0x560 [ 1454.855149][ C1] inet6addr_event+0x116/0x180 [ 1454.859902][ C1] ? __pfx_inet6addr_event+0x10/0x10 [ 1454.865164][ C1] notifier_call_chain+0xbc/0x3e0 [ 1454.870160][ C1] ? __pfx_inet6addr_event+0x10/0x10 [ 1454.875603][ C1] atomic_notifier_call_chain+0x71/0x1c0 [ 1454.881218][ C1] addrconf_ifdown.isra.0+0xea7/0x1b90 [ 1454.886656][ C1] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1454.892526][ C1] addrconf_notify+0x220/0x19f0 [ 1454.897351][ C1] ? ip6mr_device_event+0x1bc/0x230 [ 1454.902521][ C1] notifier_call_chain+0xbc/0x3e0 [ 1454.907515][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 1454.912790][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 1454.918663][ C1] netif_close_many+0x319/0x630 [ 1454.923489][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 1454.929020][ C1] ? netif_close_many_and_unlock+0x24/0x270 [ 1454.934898][ C1] unregister_netdevice_many_notify+0x56e/0x2590 [ 1454.941197][ C1] ? batadv_tt_local_event+0x455/0x7f0 [ 1454.946633][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1454.953366][ C1] ? unregister_netdevice_queue+0x22e/0x3c0 [ 1454.959231][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1454.965444][ C1] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 1454.971228][ C1] default_device_exit_batch+0x995/0xc80 [ 1454.976835][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1454.982960][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1454.988388][ C1] ? __pfx___might_resched+0x10/0x10 [ 1454.993642][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1454.999767][ C1] ops_undo_list+0x363/0xab0 [ 1455.004331][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 1455.009412][ C1] ? cleanup_net+0x347/0x830 [ 1455.013972][ C1] ? idr_destroy+0x62/0x2e0 [ 1455.018445][ C1] cleanup_net+0x41b/0x830 [ 1455.022835][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1455.027746][ C1] process_one_work+0x9ba/0x1b20 [ 1455.032661][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1455.038008][ C1] ? assign_work+0x1a0/0x250 [ 1455.042570][ C1] worker_thread+0x6c8/0xf10 [ 1455.047134][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1455.052215][ C1] kthread+0x3c5/0x780 [ 1455.056255][ C1] ? __pfx_kthread+0x10/0x10 [ 1455.060819][ C1] ? rcu_is_watching+0x12/0xc0 [ 1455.065552][ C1] ? __pfx_kthread+0x10/0x10 [ 1455.070114][ C1] ret_from_fork+0x983/0xb10 [ 1455.074678][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1455.079769][ C1] ? __switch_to+0x7af/0x10d0 [ 1455.084432][ C1] ? __pfx_kthread+0x10/0x10 [ 1455.088994][ C1] ret_from_fork_asm+0x1a/0x30 [ 1455.093741][ C1] [ 1455.096732][ C1] rcu: rcu_preempt kthread starved for 10592 jiffies! g129725 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1455.107979][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1455.117915][ C1] rcu: RCU grace-period kthread stack dump: [ 1455.123773][ C1] task:rcu_preempt state:R running task stack:27240 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1455.137211][ C1] Call Trace: [ 1455.140468][ C1] [ 1455.143390][ C1] ? __schedule+0x10b9/0x6150 [ 1455.148570][ C1] __schedule+0x1139/0x6150 [ 1455.153051][ C1] ? __lock_acquire+0x436/0x2890 [ 1455.157962][ C1] ? __mod_timer+0x8f2/0xd30 [ 1455.162528][ C1] ? __pfx___schedule+0x10/0x10 [ 1455.167360][ C1] ? find_held_lock+0x2b/0x80 [ 1455.172024][ C1] ? schedule+0x2d7/0x3a0 [ 1455.176324][ C1] schedule+0xe7/0x3a0 [ 1455.180365][ C1] schedule_timeout+0x123/0x290 [ 1455.185186][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1455.190527][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1455.195783][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1455.201559][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1455.206989][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1455.211725][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1455.216981][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.222151][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1455.227059][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1455.231883][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1455.237660][ C1] rcu_gp_kthread+0x26d/0x380 [ 1455.242310][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1455.247492][ C1] ? rcu_is_watching+0x12/0xc0 [ 1455.252225][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.257393][ C1] ? __kthread_parkme+0x19e/0x250 [ 1455.262387][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1455.267557][ C1] kthread+0x3c5/0x780 [ 1455.271612][ C1] ? __pfx_kthread+0x10/0x10 [ 1455.276182][ C1] ? rcu_is_watching+0x12/0xc0 [ 1455.280933][ C1] ? __pfx_kthread+0x10/0x10 [ 1455.285508][ C1] ret_from_fork+0x983/0xb10 [ 1455.290076][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1455.295159][ C1] ? __switch_to+0x7af/0x10d0 [ 1455.299805][ C1] ? __pfx_kthread+0x10/0x10 [ 1455.304367][ C1] ret_from_fork_asm+0x1a/0x30 [ 1455.309110][ C1] [ 1455.312101][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1455.318389][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1455.323569][ C0] NMI backtrace for cpu 0 [ 1455.323581][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.323598][ C0] Tainted: [L]=SOFTLOCKUP [ 1455.323603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1455.323611][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1455.323630][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1455.323642][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1455.323654][ C0] RAX: 0000000005a995e9 RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 1455.323663][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: ffffffff8bf2b380 [ 1455.323671][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1455.323680][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1455.323688][ C0] R13: ffffffff8e097b40 R14: ffffffff9088afd0 R15: 0000000000000000 [ 1455.323696][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 1455.323710][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1455.323718][ C0] CR2: 0000200000060030 CR3: 0000000074ee2000 CR4: 00000000003526f0 [ 1455.323727][ C0] Call Trace: [ 1455.323733][ C0] [ 1455.323738][ C0] default_idle+0x13/0x20 [ 1455.323755][ C0] default_idle_call+0x6c/0xb0 [ 1455.323771][ C0] do_idle+0x38d/0x510 [ 1455.323791][ C0] ? __pfx_do_idle+0x10/0x10 [ 1455.323810][ C0] cpu_startup_entry+0x4f/0x60 [ 1455.323827][ C0] rest_init+0x16b/0x2b0 [ 1455.323844][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1455.323858][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1455.323871][ C0] start_kernel+0x3ef/0x4d0 [ 1455.323892][ C0] x86_64_start_reservations+0x18/0x30 [ 1455.323911][ C0] x86_64_start_kernel+0x130/0x190 [ 1455.323930][ C0] common_startup_64+0x13e/0x148 [ 1455.323949][ C0]