last executing test programs: 34m50.200707636s ago: executing program 32 (id=710): openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="fcffffff0000000000000000ff010000850000000e000000850000005000000095318ed036cc6d45c0f1ee32de39345321c386f39838902ace84298d66568ce134e5cb3083d19cf2c6e88af517ff49726135e40e4b8f5eee6f7142c0e9cd70dff536c89dca81ad9ae21125a6acff6944ed07cde5d787a7d37f915deadee6947d565bfb1ad5a43f094d3cc8198550a61c93ab"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a000000", 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x1) 18m15.535789822s ago: executing program 33 (id=3820): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f000001b000)={0x8, {"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", 0x1000}}, 0x1006) socket$inet(0x2, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 16m0.312582981s ago: executing program 1 (id=4162): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 15m59.207347451s ago: executing program 1 (id=4164): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x404000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0xc018, r1}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x4, 0x4eee}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r4, r5, r6, r7, r8, r9, r10, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x1}, {0x5, 0x5, 0xa}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x7}], 0x10, 0x8}, 0x94) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 15m52.915191783s ago: executing program 5 (id=4179): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 15m51.953883615s ago: executing program 5 (id=4182): socket$netlink(0x10, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sync() sync() sync() sync() openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0xa7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sync() 15m43.931606162s ago: executing program 34 (id=4164): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x404000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0xc018, r1}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x4, 0x4eee}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r4, r5, r6, r7, r8, r9, r10, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x1}, {0x5, 0x5, 0xa}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x7}], 0x10, 0x8}, 0x94) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 15m39.414794351s ago: executing program 35 (id=4176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) 15m36.889465778s ago: executing program 36 (id=4182): socket$netlink(0x10, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sync() sync() sync() sync() openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0xa7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sync() 15m31.87114542s ago: executing program 37 (id=4191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) madvise(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x13) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x102) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup3(r3, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000180), 0x0) 15m29.414885731s ago: executing program 38 (id=4193): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x404000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0xc018, r1}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005617c71608ce174f7e64d2e032675c9de8cfa30a9922bb80510d28e9998059497a5fb1a98962e4f22465d596697c38b8bb267d5a9dc38df2d18ce6b412c9cbbeff3862fa7b57ca82", @ANYRES32=0x1, @ANYBLOB="018000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000100"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x4, 0x4eee}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r4, r5, r6, r7, r8, r9, r10, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x1}, {0x5, 0x5, 0xa}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x7}], 0x10, 0x8}, 0x94) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 15m7.869893046s ago: executing program 39 (id=4203): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 15m1.22785161s ago: executing program 40 (id=4204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x13) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x102) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup3(r3, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000180), 0x0) 14m59.396179174s ago: executing program 0 (id=4221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 14m57.929428611s ago: executing program 0 (id=4223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 14m56.632400537s ago: executing program 0 (id=4225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) 14m53.223911884s ago: executing program 0 (id=4228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_setup(0x0, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0x3e60, &(0x7f0000000240)={0x0, 0x7b66, 0x400, 0x0, 0x2b8}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x1b, {0xfca4, 0xc}, 0x5}, 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {0x0}, 0x5}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r5, &(0x7f0000000000)=""/182, 0xb6) 14m51.426347098s ago: executing program 0 (id=4231): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 14m50.620195127s ago: executing program 0 (id=4233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x404000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0xc018, r1}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005617c71608ce174f7e64d2e032675c9de8cfa30a9922bb80510d28e9998059497a5fb1a98962e4f22465d596697c38b8bb267d5a9dc38df2d18ce6b412c9cbbeff3862fa7b57ca822643293e467a69a83ce53d83a8", @ANYRES32=0x1, @ANYBLOB="018000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000100"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x4, 0x4eee}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r4, r5, r6, r7, r8, r9, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x1}, {0x5, 0x5, 0xa}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x7}], 0x10, 0x8}, 0x94) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 14m39.779177324s ago: executing program 1 (id=4207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) madvise(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x13) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x102) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup3(r3, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000180), 0x0) 14m37.795769472s ago: executing program 1 (id=4244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x18, 0x80000, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c6176655f31"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014006350400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) 14m35.163775598s ago: executing program 41 (id=4233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x404000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0xc018, r1}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005617c71608ce174f7e64d2e032675c9de8cfa30a9922bb80510d28e9998059497a5fb1a98962e4f22465d596697c38b8bb267d5a9dc38df2d18ce6b412c9cbbeff3862fa7b57ca822643293e467a69a83ce53d83a8", @ANYRES32=0x1, @ANYBLOB="018000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000100"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x4, 0x4eee}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r4, r5, r6, r7, r8, r9, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x1}, {0x5, 0x5, 0xa}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x7}], 0x10, 0x8}, 0x94) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 14m35.014970666s ago: executing program 1 (id=4250): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 14m34.14762196s ago: executing program 1 (id=4251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m28.280063831s ago: executing program 4 (id=4262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m23.748325426s ago: executing program 4 (id=4263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m21.75083405s ago: executing program 4 (id=4267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m19.067486043s ago: executing program 42 (id=4251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m19.058508805s ago: executing program 4 (id=4269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m17.610489823s ago: executing program 4 (id=4273): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xb}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 14m16.93211982s ago: executing program 4 (id=4274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) madvise(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x13) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x102) write$dsp(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup3(r3, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000180), 0x0) 14m5.163218476s ago: executing program 5 (id=4247): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_setup(0x0, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = io_uring_setup(0x3e60, &(0x7f0000000240)={0x0, 0x7b66, 0x400, 0x0, 0x2b8}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x1b, {0xfca4, 0xc}, 0x5}, 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {0x0}, 0x5}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r5, &(0x7f0000000000)=""/182, 0xb6) 14m3.624582479s ago: executing program 2 (id=4289): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x144, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a54}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x750}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x144}}, 0x20000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400"/15], 0x48) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 14m2.638430723s ago: executing program 5 (id=4291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m2.262361134s ago: executing program 2 (id=4292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 14m1.64239746s ago: executing program 43 (id=4274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) madvise(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x13) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x102) write$dsp(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup3(r3, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000180), 0x0) 14m0.149676004s ago: executing program 2 (id=4295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x144, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a54}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x750}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x144}}, 0x20000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce25"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400"/15], 0x48) mmap(&(0x7f000039c000/0x6000)=nil, 0x6000, 0x4, 0xab9f1d0e47981691, r6, 0x2c9ab000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 13m59.915091619s ago: executing program 5 (id=4296): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 13m59.480139705s ago: executing program 5 (id=4297): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(0x0, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) mkdirat(r3, &(0x7f0000000440)='./file0\x00', 0x45) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x40, 0x4, 0x31424752, 0x4, 0x3, [{0xfffffffc, 0x9}, {}, {0x0, 0x2d2}, {0x3ff, 0x3}, {0x4, 0x4}, {0xfffffffa, 0x1003}, {0x1, 0x80000001}, {0x80000000, 0x5}], 0x0, 0x7, 0x0, 0x0, 0x2}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13m58.67099227s ago: executing program 2 (id=4298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x320, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e4e, @mcast2, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x101}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x270, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc, 0x3, "9d4537319cc32c3a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "d44655bf54b82786ed28127b9ece29ea8eec9a17de4eb7967219cab4cc006d02ed902c9db0704dc87a8908c8d029ef378934d1b949cc8445c9a80828675fa64d4bf4a05f61da563c2743222fd172ef64566f4ad1eda16c751b306ee04666b38237f9ab581653dff55ae057b7f890294f474ff978d4ed924f492da7f48f7374ec4a0a0b84663e5b00d4ccb8fb82cd064673f0a61474adaacdd9d5f3954c5f444c53becfb971f01f56bdb1eb4d4b0b5d2507b69141b353f520d6dc6338fb1616da0a31bcf32049e0edabda7ef08df93c210b7b96f7d01895ae9f337fcc618dc2d899b8a61f8f43"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "376ccf0313527d8f163b64647f80f7f1e7de00186d68adaae0ff5a686c761910beff45a349916c7a807bdf4b161fd45b2b6b2d529ac4a80211233e77825363df03235baa775c527d2d2583028c784c2836cf"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "2a9d435d77d6d5d5d875616ef168206a8926c312c1b5ae6f848e1d5763ac69950b7a7d44fac75ba6f9b69d631ee0c278cb7670d2b4f5945289e71e1a3ee5b84c134fc032857027fd6de4fdaf08f151904211cf5a816d2344d832e7fe9b8a531ffccda0c5e1369995d1812444682b2d78ec8aca15cccd0f745b89674127a5cfa727749d48a9a28779d356ad22dac42d42ae3f43ee12579f780522ddf346ec00b18cdd38f6a578bb459afff8ca02140e90c5be0ed3db86d73bda257fae7baa771ed2b8a269646946465dea1d40eaf8babf0794cdcf1c5321738addcb74ef41a1b141a1e2b3d80d26b368880e9999e8c7e98601f3c3a4"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8004}, 0x10000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000800)="c4e149646d040f72f002660ffd1594fb0000c4e1fde764c200c4c1e1d234cfc744240009000000c7442402494c85bdc7442406000000000f011c2466bad004ec660fe12e3e360f01ca2e0f01cf", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13m57.336480852s ago: executing program 2 (id=4302): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x63, 0x7) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 13m55.906638293s ago: executing program 2 (id=4304): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xa2b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r3, &(0x7f0000000180), 0x100000000000003c) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1fc, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x24}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb647}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9508}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x69a6f3bc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x477}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb18}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9de}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe5f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40840}, 0x20000840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 13m44.261276451s ago: executing program 44 (id=4297): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(0x0, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) mkdirat(r3, &(0x7f0000000440)='./file0\x00', 0x45) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x40, 0x4, 0x31424752, 0x4, 0x3, [{0xfffffffc, 0x9}, {}, {0x0, 0x2d2}, {0x3ff, 0x3}, {0x4, 0x4}, {0xfffffffa, 0x1003}, {0x1, 0x80000001}, {0x80000000, 0x5}], 0x0, 0x7, 0x0, 0x0, 0x2}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13m40.686882072s ago: executing program 45 (id=4304): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xa2b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r3, &(0x7f0000000180), 0x100000000000003c) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1fc, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x24}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb647}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9508}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x69a6f3bc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x477}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb18}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9de}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe5f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40840}, 0x20000840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m9.657358165s ago: executing program 7 (id=5931): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xe903, 0x0, 0x0, 0x41100, 0x44}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x7fffffff, 0xffffffffffffffff}) 1m9.309319816s ago: executing program 7 (id=5932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xfffffffa, "eed4040f10536b102886dbfaad8bbe0059551b426909a481a5ffd9e31bdb7a83", 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x16ca9000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x418001, 0x185) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) socket$inet6(0xa, 0x2, 0x0) 1m6.937977835s ago: executing program 8 (id=5939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc2201, 0x0) write$P9_RLERROR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x13) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x86) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x60000000}) (async) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000810905830300b3"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) (async) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8, 0x7, 0xe48, 0x9f1, 0x17, "de98cd550c0f9c4a"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200f907e487c7e67c0e2c246afca731e64a24fe3195331b44aef548a21905b77236df1e000000004ff6fda5e88ebef8293be093538763b42b52d2304345d49843beb8151a778037af137f6210aa2c16f2f6a8ba6f79f67f6a6a065dde8877b312e99d70b9c0ed3def78543780650e6aeb78d6e51883d83106c4370116a5819eaecbd5be60a2a11a939f84eb178fbf45351a6284de6404247343aa01c1e4aa3c1c89056ea26f87797c5363f4e5694572a9b12435f93a1be869049eefb3ccf88e72082ab76d87"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000080000000100000f0500010002000000050000000a000000040000000000000e020000000000000000300000cf0000002e00314e0efeb3e6196db03c251cb206fe55139aea8eef18ac516d786dffcb8cbd665e04999b9d8be37c161cc20ee98562369c4ba7d27bcab4"], &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6, 0xa2}, 0x28) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$COMEDI_BUFINFO(r8, 0xc02c640e, &(0x7f00000003c0)={0x10, 0x8000, 0x97, 0x2, 0x1, 0x519, 0x101}) 1m6.157392853s ago: executing program 7 (id=5947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r4, &(0x7f0000000340)=""/111, 0x6f) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000210000dd0a00000000000063a10400000000009500000000000000b5aa6d3de061b46d263418c941d9533e2aae62471a862195647beeb66f6d36ef607daf186da82a35943e5bf573cf5c228b1091681cdbd7d2992c6e498abbd31b5e2ff12f3d9ad6b2d8d0b02f1881a67a5cad2bc9e9b26da1685a4a855489bbdcc51d77130c84f97f9fdcbe202447604a1ed7223e552c8de0a144a352cbf163397b1ce902c1ca3cc54fa9997b535409ce670977dc54eff90e1c979b27a6adf4eea481a24dd1091f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000388a83b0081"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x108, &(0x7f0000000080)=0x2, 0x0, 0x4) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r10 = eventfd2(0x5b800, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000240)={0x3, r10}) 1m5.714010787s ago: executing program 9 (id=5948): socket(0x400000000010, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120001000000000904"], 0x0) socket(0x10, 0x80002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x3, r3, 0x0}]) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r4, &(0x7f0000000240)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}) write$selinux_load(r2, &(0x7f0000000280)=ANY=[], 0x2000) 1m5.260413905s ago: executing program 7 (id=5951): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x4}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_vhci(&(0x7f0000004d40)=ANY=[@ANYBLOB="043e3a0d011b00010004010008aaaaaaaaaa1020ebf8d48fc3d966cc3b3c405ec6339b167ba2ae7df6ef00"/52], 0x3d) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @echo}}}}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x40045436, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb5, 0xf9, 0xc8, 0x8, 0xfe9, 0xdb98, 0x300c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0x5b, 0x11, 0x58}}]}}]}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0) 1m3.994657253s ago: executing program 3 (id=5953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = socket$packet(0x11, 0x3, 0x300) read$FUSE(r0, &(0x7f0000010340)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) close(r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = fcntl$dupfd(r4, 0x406, r0) read$msr(r9, &(0x7f00000000c0)=""/41, 0x29) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) 1m3.954689956s ago: executing program 3 (id=5954): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xfffffffffffffe83, @string={0x39, 0x3, "ce2f9f8f2ddfd117df71d6f984d6ea57b3d418628a893f5f87003b718ab72195cb9ebcc46e33f6a5b5b980e17a71e02668d69d5e7bca1a"}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 1m3.740761985s ago: executing program 8 (id=5957): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x29, 0x4b, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 1m3.660625961s ago: executing program 8 (id=5958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'macvtap0\x00'}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}}, 0x8090) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x160, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "baee2694bfd5ec8572fa5095b0c81bdf916a0d6335a1c4cee447bf1e253b926a25b7e0d5bc3d4676e86f6ef1e422c65b5837e1306068df8ea5af9adaee3007695eff4c1dae7146e5e640bb0b63ea9105fa1b6a8ec0dee721a22b043670160d2a17f6f869a87e45f53b8edeb755b6a83a64fcd37a1fe51f91003974b8234fa4e084f829e1d1b817ca6c09c236997b6506a384e8ce7a97883ec44ac1309d1d8ba13c1b560857688b50518809b981674968d52be33f02c20720b7b2ee40ccf1bd1a44e02dc07b3347e00dd3dc1ebbfe416551fb54e4b7862ab51e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x45, 0x6, "76879a646f144bbf093508708f0ed94bab9ba8cb1f48aa1d72ff94f3b845727082ee6e0a1db29996cb1fcb21d273bde6c2ae5577cf247dfdbf151579d372cbb522"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}]}]}], {0x14}}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c040) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) tkill(0xffffffffffffffff, 0xf) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xba}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x2c}}, 0x4000) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000b00)=0xea3, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x140c, 0x300, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8800) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd0, r11, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x2f, 0x45, "4869af16f03703f729cc4786c65d52ec095c34e26f94b3eeb94d2018b95f328de4a040369c5b6019b004de"}, @NL80211_ATTR_TESTDATA={0x8a, 0x45, "3ccedb77211e818dd1be6183250885b102b519ea87368a5697799326790252167e4e22d4bacf42e6302155ddfb7cbf6f0ff9922d349cda190ec3bde7ffec33cd6d7affe20953f572cab500e19eaec8049eebb825342c017e912ea0a13488a1ad973f19974538af77a98a5f825327169310d6334b89981475719ec314318febab95a9520901d7"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, r12, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) syz_open_dev$dri(&(0x7f0000001100), 0x7, 0xc9402) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 1m3.410872071s ago: executing program 8 (id=5959): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xaa01, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0xffffffffffffffbf, 0x0, 0x106, 0x6}}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000380)=0x4, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000340)=0x6) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) pread64(r1, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) 1m3.181173236s ago: executing program 3 (id=5960): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xaa01, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0xff0f000000000000, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0xffffffffffffffbf, 0x0, 0x106, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000340)=0x6) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pread64(r1, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) 1m3.01628664s ago: executing program 9 (id=5961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x200008d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(0xffffffffffffffff, 0x0, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x24044880}, 0x4044081) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)={0x4e, 0x0, [{0x179, 0x0, 0xf3c}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m2.922912386s ago: executing program 6 (id=5962): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x30, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) munmap(&(0x7f0000cf7000/0x1000)=nil, 0x1000) (async, rerun: 32) r0 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [0xfff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) (async, rerun: 32) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xf4) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000a0a01080000009b89bf8a00000000000500000608020073797a3200"/44], 0x28}, 0x1, 0x0, 0x0, 0x2004c010}, 0x10) (async) r4 = socket(0x10, 0x80003, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r5, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) (async, rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x39, 0x2810, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 20.26410992s ago: executing program 7 (id=5963): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x115200, 0x52) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 20.263620239s ago: executing program 3 (id=5964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 20.26280181s ago: executing program 6 (id=5965): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="58000000020603000000000000000000078008001240000000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f72740000007267b7762298fae228ee59db779509aeda66de6cede76bb27feda82936f2f2abfa47500513b28761c2b3d93c5efe0dffbb6d68e68548fea8f0da82aeeddace0c645efb9af550144167a8614add42dc1d2d2201b3c9b4276224814205463695823cfa162a005984b46a185e97eec232d3c8bb1635cd31866335659e95cecb5c466b0807cd4d8590a3629295592efdcb6dd36b28117ac932a6c9db3698ce63ed0e22d3b8d84603a3a39bd192f3c278001787d9a17cc9a19b512afa1344571bff000000000000ae3623badbb60cf6482466275afe6e50a6ab514a3c9704a860fa3f381c37e8778db0a4d53dbf6913ee32020b4f2ec68b70c274821eca84492bfac81f80699100b7e4bf442a77222aefd48aad5265cc654fcacda7f6aa81f6075326a4e5ba2744e95374d0e6eca388815463c30ecf7305f407755e2de0f1d798530e778f1341e2ea413d58a32074b16a6968547f80edd71a05e754c7dcdcbe6cb687df309c7bf27056370ad276d14181c293dd9d31471488154cd64c7cfb6d05fcf41222f9121d6e5af915b638e17e9812ad58ed59bca397d9448ac5cb8a5a5e61b0498c5f5245bafc08a414b0c858477c09f0e6802dc564e6b18ebdf7dbaef79d363300d40ae47d0daf5598632a3f892f165a4af7056c429218531402d829ddf3de050bfebb1aa814c87a57e9b87f6026c9c546dd663f0496f4c22a09219b70a58c51c5454a5111bb0d487fe870631a7d2852695d2d76"], 0x58}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) unlink(0x0) mknod$loop(&(0x7f0000000180)='./file1\x00', 0x800, 0x1) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000240), 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r1, 0x0, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000f8ff00000000000000004b52775f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004280)={0x1f, 0xf, &(0x7f0000000500)=ANY=[], &(0x7f0000004180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x27, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xebfa}, 0x94) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)=0x0) process_vm_writev(r8, &(0x7f0000001b40)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000008c0)=""/172, 0xac}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000004340)=""/221, 0xdd}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000000340)=""/56, 0x38}], 0x6, &(0x7f00000040c0)=[{&(0x7f0000001bc0)=""/4096, 0xfffffffffffffee5}, {&(0x7f0000002bc0)=""/223, 0xdf}, {&(0x7f0000000a40)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000002ec0)=""/47, 0x2f}, {0x0}, {0x0}, {&(0x7f0000003f80)=""/145, 0x91}, {&(0x7f0000004040)=""/117, 0x75}], 0xa, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 20.262241388s ago: executing program 9 (id=5966): r0 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x800, 0x6, 0x14a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x507, 0x966, 0x21, &(0x7f0000000000)={[0x10000]}, 0x8) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x389}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048090}, 0x484) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 20.260707756s ago: executing program 6 (id=5967): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x1, 0x7, 0xffffffffffffffff, 0x4, 0x5, 0x5}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x1, 0x7, 0xffffffffffffffff, 0x4, 0x5, 0x5}) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 20.260270569s ago: executing program 9 (id=5968): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x48, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x34, 0x3, [@m_skbedit={0x30, 0xf, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}}, 0x8080) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000400)={0x5, 0x101, 0xa, {0xf, 0x0, 0x5, 0x6}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000480)={0x0, 0x9, 0x0, '\x00', &(0x7f0000000440)=0x4}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x11c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x8, 0x7}, {0x4, 0x1}], "492fe98499ac7f43"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xc, 0x4}, {0x6, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0xbb, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0xe, 0x5}], "7199242f6403f792"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xf9, 0x7}, {0x8, 0x2}, {0x8, 0x7}, {0xe7, 0x3}, {0x7, 0x1}], "0e8676b1bfa83141"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x1a}, {0x86}, {0x7}, {0x8, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x9, 0x4}], "0bd81bc8077de1cd"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x6}, {0x8, 0x2}, {0x7}, {0x6, 0x4}, {0x4}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0xf9}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x4}, {0x3, 0x5}, {0x40, 0x2}, {0x6c, 0x4}, {0xff, 0x1}], "2e6d217f94e41f02"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x8, 0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}], "8c8f315e098abca3"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x0, 0x6}, {0x3, 0x1}, {0xf, 0x3}, {0x3, 0x6}, {0x7, 0x6}, {0x7, 0x5}, {0xc5, 0x7}, {}, {0x9}, {0x3, 0x2}, {}, {0x3, 0x7}, {0x6a, 0x7}, {0x3}], "cd867a12612cf54c"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x5, 0x1}, {0xeb, 0x7}, {0x3, 0x1}, {0x10, 0x3}, {0x6, 0x7}, {0x7}, {0x8, 0x3}, {0xf8}, {0x8, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x9, 0x3}], "c1c24ad521a0d169"}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24044081}, 0x20000000) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 20.259200217s ago: executing program 3 (id=5969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='contention_end\x00', r0}, 0xfffffffffffffe32) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x30f000) mmap$snddsp_status(&(0x7f0000435000/0x2000)=nil, 0x1000, 0x2000000, 0xa010, r1, 0x82000000) 20.258687068s ago: executing program 6 (id=5970): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000000000079000000", @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x101902) 20.254367063s ago: executing program 6 (id=5971): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001000000007e66d97a4a2691c30a"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x1, @remote, 0x2}}, 0x1000000, 0x7, 0x317, 0x1, 0xdc, 0x40}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"}) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000"], 0x74}}, 0x0) 20.250573304s ago: executing program 9 (id=5972): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc015}, 0x18, 0x0) read(r1, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x7d}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8010) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x10, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000540)={{0x0, 0xaec, 0x2, 0x7, 0xb, 0x10001, 0x4, 0x2, 0xbcfc3d1, 0x5, 0x1, 0x8, 0x7ae0, 0x8, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000fc0)={0x0, r10, "9c6eae66ecac1eb53c3f61d538a6537f52faefc346f669bf0a6ddf601ec18fc5fcc55102a00dc4b3d2f9925b6be320ce0973de3cbb3e869b2d1b5cbee655781202dcd24841e2b0a26c14056f55f82e16ddc3b981d5f88c97b761fa82f63ce6351fd27c5b8faad835a19e46df11d47eaf3ec20f123064f37e1fdb58f2756bf90783f137779f314e8ee5524944aa9188b16e54789fe774df6bd87177d97a405a88d73dec59c2704af331de8751d41bb90311a3e1cc3384851447e6f0c1d59d3f7881b7764ea3c40c836b084e5b3d90f876f79a9354962400cf323b5c9579e55213ba9fbdaeefb2a37c33c5d5d8a9baae45ea0ac7ce513d20a88a486fdba846f695", "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"}) (async) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r11) (async) r12 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81e8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000000540)={{0x0, 0xaec, 0x2, 0x7, 0xb, 0x10001, 0x4, 0x2, 0xbcfc3d1, 0x5, 0x1, 0x8, 0x7ae0, 0x8, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000000fc0)={r13, r14, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000f7cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f00000f7ec0)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {0x0, r15}], 0x4, "b1a51ecdcb192a"}) 20.250383512s ago: executing program 6 (id=5973): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r2) r3 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x498, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x7) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 20.244253366s ago: executing program 7 (id=5974): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @local, 0x5294cdaf}, @in6={0xa, 0x4e21, 0x4, @local, 0x1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7, @local, 0x7}, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x78b27507}], 0x80) writev(r0, &(0x7f0000001280)=[{&(0x7f00000000c0)="7f5dee609eb6f940d2b127d3e248f1e116802d30bc872bb1b1f8b86ac192e553929598c36e7f37ebb2393309e4b50c188fc42bc436583ef9f96427ce1c87c92904cbc9d7cabdac3381df8e5837a31c4548d7ecd31b24a333a933a0450b62a687e0eba44b6ab02c30ec620ad5c71416dcb72cdac153142349414a2c53dda6728daed7d997b3842e53c54ee11f53f67c7780ab15d34b069205fc0de8a934fb9eac72c2ef983fc03b507e2829f5b4ac24a06989e0ec6c60171e96eab69e60a50db1810e90a8dce73168dbb0f9531173ad21439db5eca1b321a9064ff7b88793524fb8ca16f586eb4379436f72d543460b2d5f851e74b653faf7db5b05d0e633003231ee5af46648cab95aac786754197a64a891b8a5ba349a4cb0299fcc764a61a0ef74f9a2516d5db452bf8096d275ab9a081b5ecb75cebc919fa203486fbfb0c1bf3581ee783284648a2b78332ec16a06fa66414da9238ae5934b9e4de5429fcd68eb9635df709ca5fe31c259cbcbaf9a134e34e7baa5596ae1a72af1dd593b386a7ba3738655828b0450e03f24d235156ccd5344acf199855b7b401571e580273fadafd559dd278809a238ef08913cf8b7d33a872086101b8c1cf5065ec648451d389346e71d0ea4fc02db97c3d7d165fae4ac59395fe7a73e182c550772499e27bfb20d8c89e91aee85b20ce556857ac3136db1210cd0daae68028005e10cb6ab41faf80cef8fe6b8b01d993e75ecccb61a2fa8311d3e73ecc0a2a64f56d2f8241ef4707191e5ca591599543fbcd18c0f5866a32e6cb96203e57b9488f9155cfcaffcead81bad9f7860226be665465f6f7dd197c077a6c1a7a2bd3335632eea63e9c7df04a2635d97bb1f8096d623b54d961c53bd0a214e9db69c83ecb01f422fab11a367f1910ba315b10ea7ea72cbfd9540d9cbc44f7bef2b1ffdc6edfb3ae036a51d0258241b64ead478b98d2bc9ff2b81caf9fc10d1bbaae74352af191ce35b1ea4374db7fd7e97f1bc1b74a20071f8f9e65b0b6650ee2956b83d3564803cd37b60dd68b3adf51f377f4c83eaca493d93fe131f8ee528d72ee6088403f73cb2abad715c5c4e02d85eb62c2a82753f8b2d6759240e25d06e4e7d3f4c266edb47c20b8f62851923e514b41afc771595da0a9624933aeb1a51cd20e8910b8956264dec8e71e5fdd176bbbfdb932775e11b23b23dd31389fb7e31099ee698784dca7237e08a30016d1f09124cafc8d77b1c8e81149fef1486368895cbf877122a46386dc01abe740e1e4d6ef9984a275d8d778672238330aea75d20ce57ab31007e84b80c5029daa7675f4dbf31f4f6a021844e408c3db8670237b9ba585b93b49561603a96a20f037e04b30e01492c6a1843d94a91b799a4a888cf1557ad0d7b156b7f3cdd966aa1cf687a8b724bd14e9017275177ed0f283635a865ccab2977f812ecdc3ba7988860c63778447cbaca773acc348178e86af7debd7d756fa0aed2d2158467c80a27ac05115511b1205288a1fc6a7709c4324f3b1b26649a9fd548e7971f0dad2970cc5db3776d0bcf9cc3d76ef95e4b9466d3f6c0a1e74ad2b6dc1430a2ccb9cc391817707e8bb34e927c72a4541efd1dc210c658691fa8edf5708d0012fa6a48291f8bc7519c84876b91ea66d97a7cc15989b3d5680ff446d7597850a21fc3fc91d012448514b71aaed1164430b311d07c649b94b1ee1b58df670188f1a4ead4748683ce90dd0ea829d0e81e6a5ce540c69f02f0642e4478d87cbbabcadb9d5baf55b730b98722aaa3bbef37448c598695c0cd2f6886ad2b07f3ad1a7f769251f9fcaeee369096aa55f8c30be9ed0d634370a418e691605f16e91b721aec7ef6805cb3fa321f75e198a7b92d20eab8b7337e654347ba91eef3cee87e641e25ffe469ce889f102ee4dd6847fbb6aef3d6009fb365377a644882487048cb55ad4e6cc48a23eb235d8a5ee4436d54b0f28a3a879656bca4fa8f9655880206da382002d6c4e155e0353ec80006b1934de58499f74073585d26daadb97d79d8bf774e3715498e698f84d561fa0cb624b6a8be7ac3d9b12b1d8d05e42109f6cf60b47ff08677e7447ac597746ee81527e0b8700bfc1c4ec607f038ef623ea83928d0f35e130efb88ae56a10650032dce4d0c4b020d76868765b823292774fb876d6600edf50d8c605d7d4d4c8c41eda7bd2ffa5431b6684692244a3fb659fda18cfd10e14723b31a2fbecb785ac26604d285239f092bc951df2df1f60427f60bb75559869cf8f0b6928be07e0bf53af6512d4e35191233554a3aa6ddef5523365e467c36c7d62ba9b3352fbfbc15a5c9433e17464a8107985ac30b5d31f9c7d51dba1a374099ec686ec54c173751f27a109e6a703ef1eb45ef800a87af9726bf41775650f6aab8e1642dc39e842877d82453dd222ed5ea75b3623ab1762aae83dd82e1d79133573cde6c1f8257c55d15cc7d778fb7dfe006ed67bb07016efb0f9128e29096c36eea4a8f5cc9d9c81823b5ea2a7d12e9760a7cf52dfb7ea1a64c92499d1b1451fb9b3f8067f53f6ca4ae983ee364888abf7a7cb55cb54e1433929192a381d7ff4646543a4d1b28d5c35a86ccc3afe43787e15fa8964734058c41a12d35795739e550748ad0ade53b6b82643deb1a53cb617763be93d32c2675b188a3274be30749c4ebf58f9fa0fb3e1144c189ecdbe0bcbc0a134b18db2f2f91483abe74f945b4270e3c5cb2165f1ab28dd4ee989c84e1a6fa5cb91affb6b6119f0f83d43ec691fc74d45e72ceaa4ed4b31777f6035ce13246acaf0b0fcdf3cc8572bfa2ac51c10ed33ec11ff4e37f5e7568bd686de8f0fc366d03750a5acc374eed804d549834c13b2b2fbb0db30249f515c2d9d10a1ccc11253c154752a1d79a03223fc6a052068f5157270834c55df550c361f4c67c1928446589fe363b0463182f6adb70ce3940132aca9e643b134a029e9f9d26c64e378c2aaf5ad10eec2a7a2bd6bddfc0363701aee74b61d3da4ded2f42efddc14b0997b3f821e1c2d9e9642be028df2cbef4b10b1f1519cd33e083f758014c4edce8353446f89e9dca0e54a3d1108efbec7ad58ca6da413301176bd9c7a0c3969354ff3260d90c6ad207e75a8a908c3a7432dadbc5103aac083eee459ce7721bdb361ab24dc8f2e1ac1a2f4e3fcc2e069568756b6c21b496370b9db80a24b4e91bd2de9bf219bcb89c198f9ffe0259505ec283853bc7fcd5ddd6b95dbe3f3fde244146b2df52347343c04c65b98389eb80f9d4c4c13ebe2ac52b78265015b1160669c903cd52b7b7a3e0d62755954c025b8648c6bd4e5b4b0882daa8e64abc77bba0fb1a2c399974cd3c2d9234630c1011dd9356047872f4c4d654f73dc034ea3c2c64fc2d88f2ae6523eb094493eb7800cb718cf264c68f5b18cdc9b36ae75aa8735167593448ab5ec68404cf584892a21735515d1cbbf82497d1038709986f5a94111dc0ab6782d52f4ce4300086140a1e25ad189c458fcf0ff201ae56f1049e32c5ae07eb85eb35ab653928a4313707d1c6ba53490604256ea41b291f88eb10a9b48d469b5145df71c911b24fd8dcf8572f91b151336e467008273c82e3ff4bbb7b9e85f27d0d74ed598d9c85d03b52f99fb98189a008265b3842691565bb312ca9e0d38e318baf38ea1bd2a1d6c0e9452ae9f8b1d1162d0b9d3f953d854839c989bdd0171b9399f50227fc7e7f7db3e7d0b628df3be369e2fe06643f7fd821371aa99d561a4a8ec8f893bdde133b798e848c05624d4fa3b6e74cfe0a1004a04530fa8b28a0cbf3734737a52439209abb9d1c05be6f5cf6616423a2f51e96ca2f41e5ab2e2ba8239ec2a8c167c9cea75b43f869227f41d0c35e8ed30dc2d11da2d21dcff95f1f79333bd22a8d82b0f8503de5c321b8b9cbb9a3be3b74f20d1f3c060cb2f1e6d1127a11762cb71a7465e6355a6788cf535d4a4b91b176e66c31f88a906abebc06752dca92b8c8bd5732259741aebf9e854c6332f6750fa1ac726dabed81736b4d2356a9770e981bfb24a6981501882569964df1f440878bf192c7e01c02b4696d2fbcab9c41ee8ee40abd4fc484cdecf86a5253c1673c5da3bef99aaf085c537fa3b648b78aed2affd2f6fbdce85c81df7607ee49a86ff51aa4439251dfbc19f02f7ade3ce24a0d6c8ae80bed49e674a94dcd1c2d81619bf5c196d6ca559f323d9823f49887ae0630745e85455e1e22ef7f77950068f55106fb0b5870805bd0e564bbcca322be86c29c8e2ec5829589ba3846fdef3d11e82b2349b797190ccc177f4fbd731683079524558e63296eea0b69e47d997fc42775097704f505cf0aa582a92e7c92378af08b56a5a22cb04e8b16672f79e9aacc5b89f7d39e2c34aad431b29c5a9ba746a87d3828fe37877791bbc871d39797832ca4d834dfb152ce04da605ea44419638349c258926e3622afde38e4e71e25eeda9f865bd4b602db61e5c4e0f0473777b09d5eb21c39a96579dadbf8b1cdefa95c2c7bd6cf6a19e731186022c1ea7e2fde5fce2c8a02b0d246fccdb9737a6793473614a6dc05647a0e9f50f518ac00de4edd924cfea991829c1f972a58d8068628678e08239c7869b1b8780a53df7c30cb947f985dd3cdaa749b4b08caad32c32607cd89b9ed23607c2e7f7da313763283e6c165bc558969c378e3735f683519d2c4653b399154160da92c8d3f004892ced04c6f6d178410da68e037028a5409a7925d74749b8bd0c7bf513a59066b5ac5abc7dd97bfe5ed758dd470d7cf8db465e58345daf01e598a0bcd3e9e8ab20ce912da329c6780a62b4f25f2101a2a85947cd452c3512a3c97dda9cb9cb0db7c20ff36c70a93558828c417bb56ffe9e4ea1d494c3390a5f689cf8452074ae8ebcd03c490d75790827e7e0a5563487570c2a63fea2e3e6c1e0203a769fb62094c9e0485d92aaaf25ce561f3125d5409a49d487741555bfd102552684fb4450306591e626bf0801d58dfb8a6c1b3c2d496d50e27d17719ecbedaee7988ea15ba9f4d0f13bbd2a062ccae4a4aadff04ae6cf419bd8cbb5b87c602e76c7cfa0e6f658e304aab9958b34496853f2cf635524f8eda28bdf0c8e869749634835ac01017a636c122f60a2546080ebc40776bef977e0e625ff6a48cfd6cc54b48865ad723d9bb74e66e49db29c26e8966be62b227166016d0376b712528d47da18448a41b10eb21767e749fb652ff0d22b4467d370618d3d5f43e3d2ab9da617256fd46926123464883bb0736b1524157e99fcd1590a537a4422a25955ddedcae9a7cacf9ba84ffd15964611cfc3ae78f872050e3eb246059902d865341a941e35994ccba41fcfa937bffc177ea004b1a1ca4ef5f32d4f431d50a674f713fdb67ab32f1b3f5a33bb1d428ec33baa7a8ed0252a802d562b5f0c1371b706cfe40635affe3fd498665bb364cde23e69911c554009497cc1d386e4711c165fc0e90920c72661de40d728690be735d04c09eff318c84371f73c07b10196ba175878b5f53ee9e727d40741fb4800d50754f38abb0bb74a9e73ff6ad78c360e9d3effbc96707f580f762d083e8bb7b4c8d090c802bd9514cae6e5f96120a456775a339672920a042e2cef56b95d92cb3b88e4a3941e4b1ab78e5682038a11592427f91dfe19bacb7276ad7d30bc2d051e483d0edc9c40241758ed6c32284a0f9f9a605843f639c71e222ec6bece5b5af18596497e34278b6d88b482e2320f54b466e535264058fbc63f765cc89668de6cd7b953eb021a3b359348e69f0", 0x1000}, {&(0x7f00000010c0)="376211a34f0b9e46075b3be09bb39300d15f119db764a48046c1c8bb17335c03764ee8c60b5706eeb62f8828ee656aa01da2cf4355e0083b2c0bdeeaa07d7c4d4c7e488914ec2cd146322f921c72e619ebc0358b64025a928b3bcc2f7b3c460f37e2cc33b9202103da32ea8f062c07f66e121cf2feba56835a2020c04cd125f0e2c28d66413cf0f783709056a137504d7632e4b0d218b71f51452dec0f21d6987803d6d19419078a66ecccd76a14cad801cbe54f4293c3c2173d3a0f3e7de8f926622555356de0122d97055438c23bf3f807c8bacabc9aa389b6f7e0aa2a106e897acbba9529d5dad91ed3cbe92b57", 0xef}, {&(0x7f00000011c0)="c63df2321a1f629a9ba7f7affbeac5aa2a2fbb5d1b5d385906e7ce515c44291ff199c39fee8a6b67b4cb0d2207d5aa13426a31841ee67c405543bad9aa4704c168046afab739c2aa615e3356b4dbe0f90a7b764793fdde67bdb2128cb137f4f46b4bdbbcee0233fb23f0c938e352182c238f8b4700a318f1f7027b59602ca949a820344eb8ee2012", 0x88}], 0x3) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000001300)={0x3, 0x20, [0x1, 0x8, 0xf367, 0xcf], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0]}) r1 = userfaultfd(0x80801) r2 = geteuid() quotactl_fd$Q_SETINFO(r1, 0x0, r2, &(0x7f0000001340)={0x8001, 0x9, 0x0, 0x7}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000001380)) pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000001900)=[{&(0x7f0000001440)="8a3a6ea76ac800e06d9597f3f4bd9e90ec0e1d296c6e4b56ea2fa331fc6010d1ac57d2a1b0c3d1202e0eab25adaa3bf671c56f7964af24f1b65714cc0afab71a30", 0x41}, {&(0x7f00000014c0)="c4c03c81577538bb9d19faed326dd1adf35a7be99a0597ba567a03f55d6fdbbfa35d38b4b129c9dbf42fc84664e1ac0e35d75dd67b910fb3783b3c6e1da83b8f970c67afa6d542fa096ca004466fb7462ffc0c7aa8f90ad6ab2097b9439ad608135725c5860a8df73af80316702bf4e01eb32da92fb5e568a7ae0c9d22b4eca070a1c16cb0e3ef9307acba6edb45a90df4f0a9ac388f99248d207d3dfe11e3cf4fafcaa0e37be24109928b4fc29f6b31ae916f56cbd3a54826a6d13c398c19a92038d7bf650c7daa3b9c60017fc549ac2452c1264293ebcd61d4d0cb28f16355eca762435db2ea6eed97", 0xea}, {&(0x7f00000015c0)="a4387ccbc1315a9af9c9404e82851514449159a5bc57c1797c9406fe241a19b4cccf6e99c0aa012c81a5f318b877334739549fff4f9ea5088c9e5b5a44046f5d113ae9e1ab32e3c8f494fb5f12164587ba2566e8df1f6198e39679ad2f74fe197f066ee54be748a8b150b9419d6a7f6c0322cad3e033016f1444e6939922cbb5668aa040f6a93e", 0x87}, {&(0x7f0000001680)="183f3a9c1c08672e703a7ee0d6f2d7d519b65f9c2cafc3e68e6702a5c66b560c53f8dfe74b3b82f728cd221a5a2efa4e8de90030e881eab153db2975a0a276b281b295c7ea152780d84f21dd58087a5a3251ea959c99d3d1b3741ed69ebcfa59d4e1505785e941e81466eec8c35925e41b531c6251585609c2d31658f975cba4c5daec147519a931f253a8892f2f4e07688723cf45575350fe58", 0x9a}, {&(0x7f0000001740)="f0e2246da5e766a453227339369aa01897c4749ab1b64963416462c10e4aa688d5abbd9bbb6b16b1c730b2ebacb2cb61f1731941a69a08870af6338a160cd0d5b9acb0a0746449a527906acb2e22cd3ebee06ceed23c8a9dec3db015244ec9ce0707cf9a60968f7f3a90252efd79ab5b67ba848e48088101fdb476634897", 0x7e}, {&(0x7f00000017c0)="028a4e54f2cebad5eb527d9acfb14c9bae5015c098e32dbaf2c82624d99dc35339d0f9ad80ba738357f2c5aa01eefbaa306eed7ab5ab38160a089e8b7cca0d0dede202e05d87b75086734155358a8682ac8e60819cbe32cb934fdc05109b0152f349713bd1596162", 0x68}, {&(0x7f0000001840)="729db73c74580dae57653cd71485dadf83c2ff5402d4962e0e595f08d271fd70362f23bb8a6e8d5f0a06e9e6699dcf978cf8c1e2ab8391d66e81827154a4ba4e68708e033bbf1aab32bf069d55ffad7eacde0d655bbab468c3", 0x59}, {&(0x7f00000018c0)="cc9b4fd8466ece4a514eb3afc58e7efe71f6ff048bd924f9c063d484", 0x1c}], 0x8) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000001980)={0x7fffffff, 0x5, 0x0, 0x7, 0x6, 0x4, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000019c0)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback, 0x80}, {0xa, 0x4e23, 0x9, @local, 0x4}, r6, 0xfffffff7}}, 0x48) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001ac0), 0x202080, 0x0) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000001b00)={0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000005, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6292, &(0x7f0000001b40)={0x0, 0xe46d, 0x20000, 0x1, 0x25c, 0x0, r0}, &(0x7f0000001bc0), &(0x7f0000001c00)=0x0) r10 = open$dir(&(0x7f0000001c40)='./file0\x00', 0x1, 0x22) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001d00)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, r10, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)='./file0\x00', r0, 0x0, 0x0, {0x0, r11}}) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000001d40), 0x10000, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r12, 0xf501, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001d80)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r13, r4, 0x0, 0x5, 0x3}, 0x50) syz_open_dev$video(&(0x7f0000001e40), 0x6, 0x80002) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000001e80)={0x2, 0x0, [{0x81, 0x3, 0x0, 0x0, @adapter={0x0, 0xf4, 0x9, 0x84, 0xd50}}, {0x8, 0x4, 0x0, 0x0, @sint={0x3, 0xffffe1d8}}]}) 20.243851404s ago: executing program 8 (id=5975): clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x7f, 0x7, 0x4, 0xe000, 0x1319, {r0, r1/1000+60000}, {0x5, 0x2, 0x80, 0x2, 0x4, 0x2, "d709e5a6"}, 0x7ff, 0x4, {0xffffffffffffffff}, 0x5}) close$fd_v4l2_buffer(r2) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0xdd, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480)="85574b793d3510f7f8e2495f3bfc6696ab2cdccea538e29f5df58f6651650c3da2912d79ec240d152706f302a326095894f43d2b63d1841dd5b574cc47ee60c2adab2dfd77cbf0f1ff018b4844", 0x4d}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) creat(&(0x7f0000010280)='./file0\x00', 0x182) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee01) setuid(0xee01) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x7a) keyctl$invalidate(0x15, r7) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x7, {0x7, 0x29, 0x10081, 0x2000305, 0xdcf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.242324961s ago: executing program 3 (id=5976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r5 = dup(r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r6 = socket(0xa, 0x3, 0xff) socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f00000100c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "000219", 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 19.750791177s ago: executing program 9 (id=5977): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0xf8142) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0xf4) getrandom(0xfffffffffffffffe, 0x0, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) 0s ago: executing program 8 (id=5978): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x6e, 0x20, {0x7, 0x2000}}, @wr_drn={0x6e, 0x20, {0x0, 0x1}}], 0x40}) r4 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000001340)=[{}], 0x8, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x38, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff0000f8ffffffb702000008000000b70300000500"/69], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000299605002800128009000100626f6e640000000018000280140008800800"], 0x48}, 0x1, 0x0, 0x0, 0x40060880}, 0x240400c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000011c0)={{r10, 0x1000, 0x2, 0x1, 0x1, 0x6, 0x4, 0x4, 0x5, 0x9, 0x4dc, 0xaa0, 0x9e7, 0x7, 0xebd}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$lock(r9, 0x26, &(0x7f00000000c0)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r11, 0x26, &(0x7f0000000000)={0x1}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r11, 0x25, &(0x7f00000000c0)) close(r9) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r8, 0x6) syz_kvm_assert_syzos_uexit$x86(r8, 0xffffffffffffffff) kernel console output (not intermixed with test programs): llb0" [ 2043.739210][T31006] cramfs: wrong magic [ 2044.098749][T31012] loop6: detected capacity change from 0 to 63 [ 2044.132296][T23133] buffer_io_error: 10 callbacks suppressed [ 2044.132308][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2044.132600][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2044.132983][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2044.133387][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2044.133699][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2046.424910][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5269'. [ 2046.455246][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5269'. [ 2046.473660][T31034] netlink: 'syz.7.5269': attribute type 14 has an invalid length. [ 2046.972264][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2046.972280][ T30] audit: type=1326 audit(2000000888.998:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2047.001761][ C1] vkms_vblank_simulate: vblank timer overrun [ 2047.024599][T31043] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5271'. [ 2047.101512][T31035] batadv0: entered promiscuous mode [ 2047.370494][ T30] audit: type=1326 audit(2000000889.038:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2047.480874][ T30] audit: type=1326 audit(2000000889.038:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2047.630636][ T30] audit: type=1326 audit(2000000889.038:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2047.730106][ T30] audit: type=1326 audit(2000000889.038:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2047.843339][ T30] audit: type=1326 audit(2000000889.048:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2047.917565][ T30] audit: type=1326 audit(2000000889.048:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2048.220700][ T30] audit: type=1326 audit(2000000889.048:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2048.320500][ T30] audit: type=1326 audit(2000000889.048:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2048.360316][T31044] loop6: detected capacity change from 0 to 63 [ 2048.377102][ T30] audit: type=1326 audit(2000000889.308:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31040 comm="syz.9.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2050.188649][T31065] batadv0: entered promiscuous mode [ 2052.898375][T31106] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2052.937910][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2052.937924][ T30] audit: type=1326 audit(2000000894.958:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2052.976187][T31111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'. [ 2053.030345][ T30] audit: type=1326 audit(2000000894.958:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.068315][ T30] audit: type=1326 audit(2000000894.998:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.095860][T31106] cramfs: wrong magic [ 2053.119748][ T30] audit: type=1326 audit(2000000894.998:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.195754][ T30] audit: type=1326 audit(2000000894.998:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.320500][ T30] audit: type=1326 audit(2000000894.998:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.360293][T31119] batadv0: entered promiscuous mode [ 2053.396866][T31118] loop6: detected capacity change from 0 to 63 [ 2053.415608][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.434384][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.449312][ T30] audit: type=1326 audit(2000000894.998:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.478657][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.488855][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.502137][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.510100][ T30] audit: type=1326 audit(2000000894.998:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.572036][ T30] audit: type=1326 audit(2000000894.998:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2053.598748][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.652985][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.672047][ T30] audit: type=1326 audit(2000000895.078:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31108 comm="syz.8.5283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2053.700848][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.717735][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.752320][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2053.860492][T17740] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2054.390696][T17754] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2054.601286][T31117] loop6: detected capacity change from 0 to 63 [ 2057.254171][T31166] batadv0: entered promiscuous mode [ 2057.411215][T31167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2058.512127][T31186] batadv0: entered promiscuous mode [ 2059.846535][T31204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2059.950657][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2059.950673][ T30] audit: type=1326 audit(2000000901.978:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.038149][ T30] audit: type=1326 audit(2000000902.008:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.135125][ T30] audit: type=1326 audit(2000000902.018:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.227756][ T30] audit: type=1326 audit(2000000902.018:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.323830][ T30] audit: type=1326 audit(2000000902.018:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.405107][T31215] loop6: detected capacity change from 0 to 63 [ 2060.420279][ T30] audit: type=1326 audit(2000000902.018:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.473151][T23133] buffer_io_error: 15 callbacks suppressed [ 2060.473162][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2060.502874][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2060.513267][ T30] audit: type=1326 audit(2000000902.018:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.543138][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2060.552640][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2060.587819][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2060.599339][ T30] audit: type=1326 audit(2000000902.018:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.656605][ T30] audit: type=1326 audit(2000000902.018:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2060.911462][ T30] audit: type=1326 audit(2000000902.908:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31207 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc018efc9 code=0x7ffc0000 [ 2061.576179][T31226] batadv0: entered promiscuous mode [ 2062.614897][T31234] batadv0: entered promiscuous mode [ 2062.903088][T17740] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2063.907999][T31257] loop6: detected capacity change from 0 to 63 [ 2063.925825][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2063.960835][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2063.988012][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2064.043200][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2064.066560][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2064.734114][T31273] batadv0: entered promiscuous mode [ 2065.210631][T21264] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2065.241938][T31276] loop6: detected capacity change from 0 to 63 [ 2066.197233][T31284] batadv0: entered promiscuous mode [ 2067.548663][T31302] batadv0: entered promiscuous mode [ 2068.287374][T31318] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2068.299233][T31318] cramfs: wrong magic [ 2068.325319][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2068.325334][ T30] audit: type=1326 audit(2000000910.348:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.354846][ C1] vkms_vblank_simulate: vblank timer overrun [ 2068.376739][T31319] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2068.401940][T31319] CPU: 1 UID: 0 PID: 31319 Comm: syz.7.5317 Not tainted syzkaller #0 PREEMPT(full) [ 2068.401971][T31319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2068.401985][T31319] Call Trace: [ 2068.401993][T31319] [ 2068.402004][T31319] dump_stack_lvl+0x16c/0x1f0 [ 2068.402038][T31319] sysfs_warn_dup+0x7f/0xa0 [ 2068.402074][T31319] sysfs_do_create_link_sd+0x124/0x140 [ 2068.402099][T31319] sysfs_create_link+0x61/0xc0 [ 2068.402123][T31319] device_add+0x62c/0x1aa0 [ 2068.402156][T31319] ? __pfx_device_add+0x10/0x10 [ 2068.402182][T31319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2068.402219][T31319] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2068.402257][T31319] wiphy_register+0x1eb0/0x2b20 [ 2068.402287][T31319] ? netdev_run_todo+0x864/0x1320 [ 2068.402326][T31319] ? __pfx_wiphy_register+0x10/0x10 [ 2068.402374][T31319] ieee80211_register_hw+0x253d/0x4120 [ 2068.402420][T31319] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2068.402451][T31319] ? __pfx___debug_object_init+0x10/0x10 [ 2068.402479][T31319] ? find_held_lock+0x2b/0x80 [ 2068.402501][T31319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2068.402537][T31319] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2068.402561][T31319] ? __hrtimer_setup+0x176/0x280 [ 2068.402594][T31319] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2068.402645][T31319] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2068.402679][T31319] ? __asan_memcpy+0x3c/0x60 [ 2068.402710][T31319] hwsim_new_radio_nl+0xba2/0x1330 [ 2068.402743][T31319] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2068.402785][T31319] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2068.402825][T31319] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2068.402867][T31319] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2068.402904][T31319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2068.402950][T31319] ? bpf_lsm_capable+0x9/0x10 [ 2068.402980][T31319] ? security_capable+0x7e/0x260 [ 2068.403004][T31319] ? ns_capable+0xd7/0x110 [ 2068.403035][T31319] genl_rcv_msg+0x55c/0x800 [ 2068.403068][T31319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2068.403100][T31319] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2068.403133][T31319] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 2068.403162][T31319] netlink_rcv_skb+0x158/0x420 [ 2068.403191][T31319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2068.403224][T31319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2068.403276][T31319] genl_rcv+0x28/0x40 [ 2068.403302][T31319] netlink_unicast+0x5aa/0x870 [ 2068.403331][T31319] ? __pfx_netlink_unicast+0x10/0x10 [ 2068.403367][T31319] netlink_sendmsg+0x8c8/0xdd0 [ 2068.403399][T31319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2068.403426][T31319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2068.403461][T31319] ____sys_sendmsg+0xa98/0xc70 [ 2068.403491][T31319] ? copy_msghdr_from_user+0x10a/0x160 [ 2068.403516][T31319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2068.403561][T31319] ___sys_sendmsg+0x134/0x1d0 [ 2068.403588][T31319] ? __pfx____sys_sendmsg+0x10/0x10 [ 2068.403610][T31319] ? __lock_acquire+0x622/0x1c90 [ 2068.403677][T31319] __sys_sendmsg+0x16d/0x220 [ 2068.403703][T31319] ? __pfx___sys_sendmsg+0x10/0x10 [ 2068.403742][T31319] ? __secure_computing+0x28e/0x3b0 [ 2068.403772][T31319] do_syscall_64+0xcd/0xfa0 [ 2068.403800][T31319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.403827][T31319] RIP: 0033:0x7f1b4598efc9 [ 2068.403845][T31319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2068.403867][T31319] RSP: 002b:00007f1b467eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.403885][T31319] RAX: ffffffffffffffda RBX: 00007f1b45be6180 RCX: 00007f1b4598efc9 [ 2068.403899][T31319] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2068.403911][T31319] RBP: 00007f1b45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2068.403925][T31319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2068.403937][T31319] R13: 00007f1b45be6218 R14: 00007f1b45be6180 R15: 00007ffc67882918 [ 2068.403971][T31319] [ 2068.791291][ C1] vkms_vblank_simulate: vblank timer overrun [ 2068.829384][ T30] audit: type=1326 audit(2000000910.348:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.852850][ C1] vkms_vblank_simulate: vblank timer overrun [ 2068.858899][ T30] audit: type=1326 audit(2000000910.348:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.882315][ C1] vkms_vblank_simulate: vblank timer overrun [ 2068.888399][ T30] audit: type=1326 audit(2000000910.348:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.911890][ T30] audit: type=1326 audit(2000000910.348:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.935305][ C1] vkms_vblank_simulate: vblank timer overrun [ 2068.942263][ T30] audit: type=1326 audit(2000000910.388:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.965585][ C1] vkms_vblank_simulate: vblank timer overrun [ 2068.971965][ T30] audit: type=1326 audit(2000000910.388:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2068.995456][ T30] audit: type=1326 audit(2000000910.388:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2069.018869][ C1] vkms_vblank_simulate: vblank timer overrun [ 2069.025752][ T30] audit: type=1326 audit(2000000910.388:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2069.049081][ C1] vkms_vblank_simulate: vblank timer overrun [ 2069.215272][ T30] audit: type=1326 audit(2000000911.238:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31310 comm="syz.7.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2069.267679][T31322] batadv0: entered promiscuous mode [ 2069.356433][T31325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2070.398479][T31327] loop6: detected capacity change from 0 to 63 [ 2070.424821][T23133] buffer_io_error: 10 callbacks suppressed [ 2070.424832][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2070.451028][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2070.479952][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2070.506626][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2070.557238][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2070.892310][T31339] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2072.109750][T31339] /dev/nullb0: Can't open blockdev [ 2072.243709][T31358] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2072.608111][T31350] batadv0: entered promiscuous mode [ 2072.908840][T31358] cramfs: wrong magic [ 2073.346519][T31376] batadv0: entered promiscuous mode [ 2073.832417][T29542] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2075.771886][T31394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2076.037295][T31403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2077.200525][T31411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5333'. [ 2077.209504][T31411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5333'. [ 2077.220297][T31411] netlink: 'syz.8.5333': attribute type 14 has an invalid length. [ 2077.447410][T31419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2077.576819][T31424] batadv0: entered promiscuous mode [ 2078.656048][T31433] batadv0: entered promiscuous mode [ 2079.086415][T31447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2080.559529][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2080.559546][ T30] audit: type=1326 audit(2000000922.578:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2080.614795][T31462] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2080.623663][T31462] CPU: 0 UID: 0 PID: 31462 Comm: syz.8.5343 Not tainted syzkaller #0 PREEMPT(full) [ 2080.623695][T31462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2080.623710][T31462] Call Trace: [ 2080.623719][T31462] [ 2080.623728][T31462] dump_stack_lvl+0x16c/0x1f0 [ 2080.623762][T31462] sysfs_warn_dup+0x7f/0xa0 [ 2080.623797][T31462] sysfs_do_create_link_sd+0x124/0x140 [ 2080.623823][T31462] sysfs_create_link+0x61/0xc0 [ 2080.623846][T31462] device_add+0x62c/0x1aa0 [ 2080.623877][T31462] ? __pfx_device_add+0x10/0x10 [ 2080.623908][T31462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2080.623943][T31462] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2080.623972][T31462] wiphy_register+0x1eb0/0x2b20 [ 2080.623997][T31462] ? netdev_run_todo+0x864/0x1320 [ 2080.624029][T31462] ? __pfx_wiphy_register+0x10/0x10 [ 2080.624069][T31462] ieee80211_register_hw+0x253d/0x4120 [ 2080.624106][T31462] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2080.624133][T31462] ? __pfx___debug_object_init+0x10/0x10 [ 2080.624156][T31462] ? find_held_lock+0x2b/0x80 [ 2080.624174][T31462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2080.624204][T31462] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2080.624223][T31462] ? __hrtimer_setup+0x176/0x280 [ 2080.624251][T31462] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2080.624294][T31462] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2080.624322][T31462] ? __asan_memcpy+0x3c/0x60 [ 2080.624347][T31462] hwsim_new_radio_nl+0xba2/0x1330 [ 2080.624376][T31462] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2080.624410][T31462] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2080.624439][T31462] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2080.624473][T31462] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2080.624502][T31462] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2080.624538][T31462] ? bpf_lsm_capable+0x9/0x10 [ 2080.624562][T31462] ? security_capable+0x7e/0x260 [ 2080.624584][T31462] ? ns_capable+0xd7/0x110 [ 2080.624613][T31462] genl_rcv_msg+0x55c/0x800 [ 2080.624642][T31462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2080.624669][T31462] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2080.624704][T31462] netlink_rcv_skb+0x158/0x420 [ 2080.624727][T31462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2080.624755][T31462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2080.624791][T31462] ? netlink_deliver_tap+0x1ae/0xd30 [ 2080.624818][T31462] genl_rcv+0x28/0x40 [ 2080.624841][T31462] netlink_unicast+0x5aa/0x870 [ 2080.624869][T31462] ? __pfx_netlink_unicast+0x10/0x10 [ 2080.624909][T31462] netlink_sendmsg+0x8c8/0xdd0 [ 2080.624939][T31462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2080.624976][T31462] ____sys_sendmsg+0xa98/0xc70 [ 2080.625006][T31462] ? copy_msghdr_from_user+0x10a/0x160 [ 2080.625029][T31462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2080.625069][T31462] ___sys_sendmsg+0x134/0x1d0 [ 2080.625092][T31462] ? __pfx____sys_sendmsg+0x10/0x10 [ 2080.625111][T31462] ? __lock_acquire+0x622/0x1c90 [ 2080.625170][T31462] __sys_sendmsg+0x16d/0x220 [ 2080.625192][T31462] ? __pfx___sys_sendmsg+0x10/0x10 [ 2080.625225][T31462] ? __secure_computing+0x28e/0x3b0 [ 2080.625254][T31462] do_syscall_64+0xcd/0xfa0 [ 2080.625279][T31462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2080.625297][T31462] RIP: 0033:0x7feaaff8efc9 [ 2080.625313][T31462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2080.625331][T31462] RSP: 002b:00007feab0d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2080.625350][T31462] RAX: ffffffffffffffda RBX: 00007feab01e6180 RCX: 00007feaaff8efc9 [ 2080.625363][T31462] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2080.625375][T31462] RBP: 00007feab0011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2080.625388][T31462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2080.625400][T31462] R13: 00007feab01e6218 R14: 00007feab01e6180 R15: 00007ffe18f83698 [ 2080.625428][T31462] [ 2081.156084][ T30] audit: type=1326 audit(2000000922.618:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.180460][ T30] audit: type=1326 audit(2000000922.618:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.269105][T31463] batadv0: entered promiscuous mode [ 2081.283358][ T30] audit: type=1326 audit(2000000922.618:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.307415][ T30] audit: type=1326 audit(2000000922.618:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.330938][ T30] audit: type=1326 audit(2000000922.618:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.354635][ T30] audit: type=1326 audit(2000000922.618:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.378205][ T30] audit: type=1326 audit(2000000922.618:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.401692][ T30] audit: type=1326 audit(2000000922.618:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.425499][ T30] audit: type=1326 audit(2000000923.158:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31458 comm="syz.8.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2081.484341][T31467] loop6: detected capacity change from 0 to 63 [ 2081.517039][T27682] Buffer I/O error on dev loop6, logical block 0, async page read [ 2081.526784][T27682] Buffer I/O error on dev loop6, logical block 0, async page read [ 2081.536520][T27682] Buffer I/O error on dev loop6, logical block 0, async page read [ 2081.552081][T27682] Buffer I/O error on dev loop6, logical block 0, async page read [ 2081.564564][T27682] Buffer I/O error on dev loop6, logical block 0, async page read [ 2083.044628][T31482] batadv0: entered promiscuous mode [ 2083.541822][T11819] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2084.316428][T31509] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2084.370513][T31509] CPU: 1 UID: 0 PID: 31509 Comm: syz.7.5351 Not tainted syzkaller #0 PREEMPT(full) [ 2084.370546][T31509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2084.370560][T31509] Call Trace: [ 2084.370569][T31509] [ 2084.370579][T31509] dump_stack_lvl+0x16c/0x1f0 [ 2084.370621][T31509] sysfs_warn_dup+0x7f/0xa0 [ 2084.370659][T31509] sysfs_do_create_link_sd+0x124/0x140 [ 2084.370682][T31509] sysfs_create_link+0x61/0xc0 [ 2084.370701][T31509] device_add+0x62c/0x1aa0 [ 2084.370741][T31509] ? __pfx_device_add+0x10/0x10 [ 2084.370764][T31509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2084.370797][T31509] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2084.370826][T31509] wiphy_register+0x1eb0/0x2b20 [ 2084.370851][T31509] ? netdev_run_todo+0x864/0x1320 [ 2084.370882][T31509] ? __pfx_wiphy_register+0x10/0x10 [ 2084.370923][T31509] ieee80211_register_hw+0x253d/0x4120 [ 2084.370959][T31509] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2084.370986][T31509] ? __pfx___debug_object_init+0x10/0x10 [ 2084.371010][T31509] ? find_held_lock+0x2b/0x80 [ 2084.371029][T31509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2084.371058][T31509] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2084.371077][T31509] ? __hrtimer_setup+0x176/0x280 [ 2084.371105][T31509] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2084.371148][T31509] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2084.371178][T31509] ? __asan_memcpy+0x3c/0x60 [ 2084.371204][T31509] hwsim_new_radio_nl+0xba2/0x1330 [ 2084.371233][T31509] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2084.371268][T31509] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2084.371296][T31509] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2084.371328][T31509] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2084.371357][T31509] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2084.371394][T31509] ? bpf_lsm_capable+0x9/0x10 [ 2084.371419][T31509] ? security_capable+0x7e/0x260 [ 2084.371441][T31509] ? ns_capable+0xd7/0x110 [ 2084.371470][T31509] genl_rcv_msg+0x55c/0x800 [ 2084.371499][T31509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2084.371526][T31509] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2084.371562][T31509] netlink_rcv_skb+0x158/0x420 [ 2084.371585][T31509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2084.371617][T31509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2084.371655][T31509] ? netlink_deliver_tap+0x1ae/0xd30 [ 2084.371683][T31509] genl_rcv+0x28/0x40 [ 2084.371708][T31509] netlink_unicast+0x5aa/0x870 [ 2084.371738][T31509] ? __pfx_netlink_unicast+0x10/0x10 [ 2084.371774][T31509] netlink_sendmsg+0x8c8/0xdd0 [ 2084.371802][T31509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2084.371837][T31509] ____sys_sendmsg+0xa98/0xc70 [ 2084.371864][T31509] ? copy_msghdr_from_user+0x10a/0x160 [ 2084.371885][T31509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2084.371924][T31509] ___sys_sendmsg+0x134/0x1d0 [ 2084.371947][T31509] ? __pfx____sys_sendmsg+0x10/0x10 [ 2084.371966][T31509] ? __lock_acquire+0x622/0x1c90 [ 2084.372025][T31509] __sys_sendmsg+0x16d/0x220 [ 2084.372047][T31509] ? __pfx___sys_sendmsg+0x10/0x10 [ 2084.372080][T31509] ? __secure_computing+0x28e/0x3b0 [ 2084.372108][T31509] do_syscall_64+0xcd/0xfa0 [ 2084.372133][T31509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2084.372153][T31509] RIP: 0033:0x7f1b4598efc9 [ 2084.372170][T31509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2084.372188][T31509] RSP: 002b:00007f1b467eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2084.372206][T31509] RAX: ffffffffffffffda RBX: 00007f1b45be6180 RCX: 00007f1b4598efc9 [ 2084.372221][T31509] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2084.372234][T31509] RBP: 00007f1b45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2084.372247][T31509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2084.372258][T31509] R13: 00007f1b45be6218 R14: 00007f1b45be6180 R15: 00007ffc67882918 [ 2084.372287][T31509] [ 2084.792815][T31500] batadv0: entered promiscuous mode [ 2085.449074][T31516] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2085.458007][T31516] /dev/nullb0: Can't open blockdev [ 2085.593705][T31510] loop6: detected capacity change from 0 to 63 [ 2085.627298][T31523] batadv0: entered promiscuous mode [ 2085.644127][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2085.665813][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2085.714924][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2085.740907][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2085.759586][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2089.335922][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2089.335939][ T30] audit: type=1326 audit(2000000931.358:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2089.365556][ C1] vkms_vblank_simulate: vblank timer overrun [ 2089.432522][T31570] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2089.440149][T31570] CPU: 1 UID: 0 PID: 31570 Comm: syz.7.5361 Not tainted syzkaller #0 PREEMPT(full) [ 2089.440179][T31570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2089.440188][T31570] Call Trace: [ 2089.440194][T31570] [ 2089.440199][T31570] dump_stack_lvl+0x16c/0x1f0 [ 2089.440220][T31570] sysfs_warn_dup+0x7f/0xa0 [ 2089.440244][T31570] sysfs_do_create_link_sd+0x124/0x140 [ 2089.440259][T31570] sysfs_create_link+0x61/0xc0 [ 2089.440271][T31570] device_add+0x62c/0x1aa0 [ 2089.440289][T31570] ? __pfx_device_add+0x10/0x10 [ 2089.440303][T31570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2089.440323][T31570] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2089.440342][T31570] wiphy_register+0x1eb0/0x2b20 [ 2089.440373][T31570] ? netdev_run_todo+0x864/0x1320 [ 2089.440408][T31570] ? __pfx_wiphy_register+0x10/0x10 [ 2089.440450][T31570] ieee80211_register_hw+0x253d/0x4120 [ 2089.440491][T31570] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2089.440516][T31570] ? __pfx___debug_object_init+0x10/0x10 [ 2089.440533][T31570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2089.440552][T31570] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2089.440566][T31570] ? __hrtimer_setup+0x176/0x280 [ 2089.440585][T31570] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2089.440612][T31570] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2089.440631][T31570] ? __asan_memcpy+0x3c/0x60 [ 2089.440647][T31570] hwsim_new_radio_nl+0xba2/0x1330 [ 2089.440666][T31570] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2089.440688][T31570] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2089.440706][T31570] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2089.440728][T31570] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2089.440746][T31570] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2089.440768][T31570] ? bpf_lsm_capable+0x9/0x10 [ 2089.440785][T31570] ? security_capable+0x7e/0x260 [ 2089.440799][T31570] ? ns_capable+0xd7/0x110 [ 2089.440818][T31570] genl_rcv_msg+0x55c/0x800 [ 2089.440836][T31570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2089.440853][T31570] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2089.440876][T31570] netlink_rcv_skb+0x158/0x420 [ 2089.440891][T31570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2089.440908][T31570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2089.440930][T31570] ? netlink_deliver_tap+0x1ae/0xd30 [ 2089.440947][T31570] genl_rcv+0x28/0x40 [ 2089.440962][T31570] netlink_unicast+0x5aa/0x870 [ 2089.440986][T31570] ? __pfx_netlink_unicast+0x10/0x10 [ 2089.441009][T31570] netlink_sendmsg+0x8c8/0xdd0 [ 2089.441028][T31570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2089.441051][T31570] ____sys_sendmsg+0xa98/0xc70 [ 2089.441070][T31570] ? copy_msghdr_from_user+0x10a/0x160 [ 2089.441089][T31570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2089.441115][T31570] ___sys_sendmsg+0x134/0x1d0 [ 2089.441131][T31570] ? __pfx____sys_sendmsg+0x10/0x10 [ 2089.441145][T31570] ? __lock_acquire+0x622/0x1c90 [ 2089.441182][T31570] __sys_sendmsg+0x16d/0x220 [ 2089.441196][T31570] ? __pfx___sys_sendmsg+0x10/0x10 [ 2089.441216][T31570] ? __secure_computing+0x28e/0x3b0 [ 2089.441235][T31570] do_syscall_64+0xcd/0xfa0 [ 2089.441251][T31570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.441263][T31570] RIP: 0033:0x7f1b4598efc9 [ 2089.441274][T31570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2089.441286][T31570] RSP: 002b:00007f1b467eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2089.441298][T31570] RAX: ffffffffffffffda RBX: 00007f1b45be6180 RCX: 00007f1b4598efc9 [ 2089.441307][T31570] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2089.441315][T31570] RBP: 00007f1b45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2089.441323][T31570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2089.441330][T31570] R13: 00007f1b45be6218 R14: 00007f1b45be6180 R15: 00007ffc67882918 [ 2089.441348][T31570] [ 2089.811448][ C1] vkms_vblank_simulate: vblank timer overrun [ 2089.855818][T31571] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2089.863259][T31571] cramfs: wrong magic [ 2089.895714][ T30] audit: type=1326 audit(2000000931.358:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2089.997387][ T30] audit: type=1326 audit(2000000931.408:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.021822][ T30] audit: type=1326 audit(2000000931.408:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.062071][ T30] audit: type=1326 audit(2000000931.408:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.085514][ C1] vkms_vblank_simulate: vblank timer overrun [ 2090.091744][ T30] audit: type=1326 audit(2000000931.418:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.115080][ C1] vkms_vblank_simulate: vblank timer overrun [ 2090.122487][ T30] audit: type=1326 audit(2000000931.418:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.146802][ T30] audit: type=1326 audit(2000000931.418:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.172803][ T30] audit: type=1326 audit(2000000931.428:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2090.197033][ T30] audit: type=1326 audit(2000000931.958:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31560 comm="syz.7.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2091.640711][T31574] loop6: detected capacity change from 0 to 63 [ 2091.656648][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.665177][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.673714][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.690808][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.699055][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2092.505209][T31597] batadv0: entered promiscuous mode [ 2092.681428][T17758] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2094.431594][T31620] batadv0: entered promiscuous mode [ 2095.463225][T31624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2096.733612][T31651] batadv0: entered promiscuous mode [ 2096.789948][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2096.789960][ T30] audit: type=1326 audit(2000000938.768:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2096.971243][ T30] audit: type=1326 audit(2000000938.768:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2097.141493][ T30] audit: type=1326 audit(2000000938.778:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2097.269705][ T30] audit: type=1326 audit(2000000938.778:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2097.731094][ T30] audit: type=1326 audit(2000000938.778:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2097.798834][T31653] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2097.815993][T31653] CPU: 1 UID: 0 PID: 31653 Comm: syz.7.5379 Not tainted syzkaller #0 PREEMPT(full) [ 2097.816027][T31653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2097.816042][T31653] Call Trace: [ 2097.816050][T31653] [ 2097.816061][T31653] dump_stack_lvl+0x16c/0x1f0 [ 2097.816094][T31653] sysfs_warn_dup+0x7f/0xa0 [ 2097.816130][T31653] sysfs_do_create_link_sd+0x124/0x140 [ 2097.816156][T31653] sysfs_create_link+0x61/0xc0 [ 2097.816177][T31653] device_add+0x62c/0x1aa0 [ 2097.816206][T31653] ? __pfx_device_add+0x10/0x10 [ 2097.816233][T31653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2097.816272][T31653] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2097.816307][T31653] wiphy_register+0x1eb0/0x2b20 [ 2097.816336][T31653] ? netdev_run_todo+0x864/0x1320 [ 2097.816381][T31653] ? __pfx_wiphy_register+0x10/0x10 [ 2097.816431][T31653] ieee80211_register_hw+0x253d/0x4120 [ 2097.816476][T31653] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2097.816506][T31653] ? __pfx___debug_object_init+0x10/0x10 [ 2097.816534][T31653] ? find_held_lock+0x2b/0x80 [ 2097.816557][T31653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2097.816592][T31653] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2097.816616][T31653] ? __hrtimer_setup+0x176/0x280 [ 2097.816650][T31653] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2097.816702][T31653] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2097.816736][T31653] ? __asan_memcpy+0x3c/0x60 [ 2097.816766][T31653] hwsim_new_radio_nl+0xba2/0x1330 [ 2097.816800][T31653] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2097.816841][T31653] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2097.816874][T31653] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2097.816913][T31653] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2097.816947][T31653] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2097.816990][T31653] ? bpf_lsm_capable+0x9/0x10 [ 2097.817020][T31653] ? security_capable+0x7e/0x260 [ 2097.817045][T31653] ? ns_capable+0xd7/0x110 [ 2097.817079][T31653] genl_rcv_msg+0x55c/0x800 [ 2097.817114][T31653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2097.817145][T31653] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2097.817188][T31653] netlink_rcv_skb+0x158/0x420 [ 2097.817216][T31653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2097.817248][T31653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2097.817290][T31653] ? netlink_deliver_tap+0x1ae/0xd30 [ 2097.817323][T31653] genl_rcv+0x28/0x40 [ 2097.817355][T31653] netlink_unicast+0x5aa/0x870 [ 2097.817389][T31653] ? __pfx_netlink_unicast+0x10/0x10 [ 2097.817431][T31653] netlink_sendmsg+0x8c8/0xdd0 [ 2097.817467][T31653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2097.817510][T31653] ____sys_sendmsg+0xa98/0xc70 [ 2097.817542][T31653] ? copy_msghdr_from_user+0x10a/0x160 [ 2097.817567][T31653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2097.817614][T31653] ___sys_sendmsg+0x134/0x1d0 [ 2097.817641][T31653] ? __pfx____sys_sendmsg+0x10/0x10 [ 2097.817664][T31653] ? __lock_acquire+0x622/0x1c90 [ 2097.817732][T31653] __sys_sendmsg+0x16d/0x220 [ 2097.817760][T31653] ? __pfx___sys_sendmsg+0x10/0x10 [ 2097.817799][T31653] ? __secure_computing+0x28e/0x3b0 [ 2097.817833][T31653] do_syscall_64+0xcd/0xfa0 [ 2097.817861][T31653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2097.817884][T31653] RIP: 0033:0x7f1b4598efc9 [ 2097.817902][T31653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2097.817923][T31653] RSP: 002b:00007f1b467eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2097.817944][T31653] RAX: ffffffffffffffda RBX: 00007f1b45be6180 RCX: 00007f1b4598efc9 [ 2097.817960][T31653] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2097.817975][T31653] RBP: 00007f1b45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2097.817989][T31653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2097.818002][T31653] R13: 00007f1b45be6218 R14: 00007f1b45be6180 R15: 00007ffc67882918 [ 2097.818036][T31653] [ 2098.195221][ C1] vkms_vblank_simulate: vblank timer overrun [ 2098.247818][ T30] audit: type=1326 audit(2000000938.778:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2098.271299][ T30] audit: type=1326 audit(2000000938.778:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2098.294817][ T30] audit: type=1326 audit(2000000938.778:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2098.318233][ C1] vkms_vblank_simulate: vblank timer overrun [ 2098.325282][ T30] audit: type=1326 audit(2000000938.788:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31649 comm="syz.7.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2098.348610][ C1] vkms_vblank_simulate: vblank timer overrun [ 2098.368395][T31672] batadv0: entered promiscuous mode [ 2098.635850][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.950960][T31682] batadv0: entered promiscuous mode [ 2099.434538][ T30] audit: type=1326 audit(2000000941.448:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31683 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2099.493374][T31691] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2099.508009][T31691] CPU: 0 UID: 0 PID: 31691 Comm: syz.7.5384 Not tainted syzkaller #0 PREEMPT(full) [ 2099.508042][T31691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2099.508055][T31691] Call Trace: [ 2099.508064][T31691] [ 2099.508073][T31691] dump_stack_lvl+0x16c/0x1f0 [ 2099.508106][T31691] sysfs_warn_dup+0x7f/0xa0 [ 2099.508140][T31691] sysfs_do_create_link_sd+0x124/0x140 [ 2099.508162][T31691] sysfs_create_link+0x61/0xc0 [ 2099.508181][T31691] device_add+0x62c/0x1aa0 [ 2099.508208][T31691] ? __pfx_device_add+0x10/0x10 [ 2099.508230][T31691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2099.508261][T31691] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2099.508291][T31691] wiphy_register+0x1eb0/0x2b20 [ 2099.508316][T31691] ? netdev_run_todo+0x864/0x1320 [ 2099.508348][T31691] ? __pfx_wiphy_register+0x10/0x10 [ 2099.508389][T31691] ieee80211_register_hw+0x253d/0x4120 [ 2099.508427][T31691] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2099.508452][T31691] ? __pfx___debug_object_init+0x10/0x10 [ 2099.508476][T31691] ? find_held_lock+0x2b/0x80 [ 2099.508495][T31691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2099.508533][T31691] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2099.508555][T31691] ? __hrtimer_setup+0x176/0x280 [ 2099.508585][T31691] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2099.508628][T31691] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2099.508657][T31691] ? __asan_memcpy+0x3c/0x60 [ 2099.508683][T31691] hwsim_new_radio_nl+0xba2/0x1330 [ 2099.508711][T31691] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2099.508746][T31691] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2099.508776][T31691] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2099.508810][T31691] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2099.508839][T31691] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2099.508875][T31691] ? bpf_lsm_capable+0x9/0x10 [ 2099.508900][T31691] ? security_capable+0x7e/0x260 [ 2099.508922][T31691] ? ns_capable+0xd7/0x110 [ 2099.508951][T31691] genl_rcv_msg+0x55c/0x800 [ 2099.508982][T31691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2099.509008][T31691] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2099.509044][T31691] netlink_rcv_skb+0x158/0x420 [ 2099.509067][T31691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2099.509095][T31691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2099.509130][T31691] ? netlink_deliver_tap+0x1ae/0xd30 [ 2099.509158][T31691] genl_rcv+0x28/0x40 [ 2099.509181][T31691] netlink_unicast+0x5aa/0x870 [ 2099.509208][T31691] ? __pfx_netlink_unicast+0x10/0x10 [ 2099.509242][T31691] netlink_sendmsg+0x8c8/0xdd0 [ 2099.509271][T31691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2099.509307][T31691] ____sys_sendmsg+0xa98/0xc70 [ 2099.509334][T31691] ? copy_msghdr_from_user+0x10a/0x160 [ 2099.509355][T31691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2099.509395][T31691] ___sys_sendmsg+0x134/0x1d0 [ 2099.509418][T31691] ? __pfx____sys_sendmsg+0x10/0x10 [ 2099.509437][T31691] ? __lock_acquire+0x622/0x1c90 [ 2099.509495][T31691] __sys_sendmsg+0x16d/0x220 [ 2099.509525][T31691] ? __pfx___sys_sendmsg+0x10/0x10 [ 2099.509561][T31691] ? __secure_computing+0x28e/0x3b0 [ 2099.509591][T31691] do_syscall_64+0xcd/0xfa0 [ 2099.509617][T31691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.509636][T31691] RIP: 0033:0x7f1b4598efc9 [ 2099.509652][T31691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2099.509670][T31691] RSP: 002b:00007f1b467eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2099.509689][T31691] RAX: ffffffffffffffda RBX: 00007f1b45be6180 RCX: 00007f1b4598efc9 [ 2099.509702][T31691] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2099.509715][T31691] RBP: 00007f1b45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2099.509727][T31691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.509739][T31691] R13: 00007f1b45be6218 R14: 00007f1b45be6180 R15: 00007ffc67882918 [ 2099.509770][T31691] [ 2100.805287][T31692] loop6: detected capacity change from 0 to 63 [ 2100.854077][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2100.862498][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2100.893557][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2100.907237][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2100.928932][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.226925][T31704] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2101.339485][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.356978][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.371184][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.381621][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.389795][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2101.613394][T31704] CPU: 1 UID: 0 PID: 31704 Comm: syz.6.5387 Not tainted syzkaller #0 PREEMPT(full) [ 2101.613427][T31704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2101.613441][T31704] Call Trace: [ 2101.613452][T31704] [ 2101.613462][T31704] dump_stack_lvl+0x16c/0x1f0 [ 2101.613497][T31704] sysfs_warn_dup+0x7f/0xa0 [ 2101.613533][T31704] sysfs_do_create_link_sd+0x124/0x140 [ 2101.613559][T31704] sysfs_create_link+0x61/0xc0 [ 2101.613582][T31704] device_add+0x62c/0x1aa0 [ 2101.613613][T31704] ? __pfx_device_add+0x10/0x10 [ 2101.613639][T31704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2101.613675][T31704] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2101.613709][T31704] wiphy_register+0x1eb0/0x2b20 [ 2101.613738][T31704] ? netdev_run_todo+0x864/0x1320 [ 2101.613776][T31704] ? __pfx_wiphy_register+0x10/0x10 [ 2101.613824][T31704] ieee80211_register_hw+0x253d/0x4120 [ 2101.613867][T31704] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2101.613905][T31704] ? __pfx___debug_object_init+0x10/0x10 [ 2101.613934][T31704] ? __hrtimer_setup+0xd0/0x280 [ 2101.613964][T31704] ? __hrtimer_setup+0x176/0x280 [ 2101.613993][T31704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2101.614027][T31704] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2101.614050][T31704] ? __hrtimer_setup+0x176/0x280 [ 2101.614090][T31704] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2101.614143][T31704] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2101.614178][T31704] ? __asan_memcpy+0x3c/0x60 [ 2101.614210][T31704] hwsim_new_radio_nl+0xba2/0x1330 [ 2101.614244][T31704] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2101.614284][T31704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2101.614317][T31704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2101.614356][T31704] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2101.614391][T31704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2101.614434][T31704] ? bpf_lsm_capable+0x9/0x10 [ 2101.614463][T31704] ? security_capable+0x7e/0x260 [ 2101.614490][T31704] ? ns_capable+0xd7/0x110 [ 2101.614525][T31704] genl_rcv_msg+0x55c/0x800 [ 2101.614561][T31704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2101.614594][T31704] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2101.614636][T31704] netlink_rcv_skb+0x158/0x420 [ 2101.614664][T31704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2101.614697][T31704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2101.614740][T31704] ? netlink_deliver_tap+0x1ae/0xd30 [ 2101.614773][T31704] genl_rcv+0x28/0x40 [ 2101.614800][T31704] netlink_unicast+0x5aa/0x870 [ 2101.614833][T31704] ? __pfx_netlink_unicast+0x10/0x10 [ 2101.614860][T31704] ? netlink_autobind.isra.0+0xa8/0x370 [ 2101.614900][T31704] netlink_sendmsg+0x8c8/0xdd0 [ 2101.614934][T31704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2101.614975][T31704] ____sys_sendmsg+0xa98/0xc70 [ 2101.615008][T31704] ? copy_msghdr_from_user+0x10a/0x160 [ 2101.615033][T31704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2101.615077][T31704] ? __pfx_futex_wake_mark+0x10/0x10 [ 2101.615117][T31704] ___sys_sendmsg+0x134/0x1d0 [ 2101.615141][T31704] ? futex_private_hash_put+0x176/0x300 [ 2101.615170][T31704] ? __pfx____sys_sendmsg+0x10/0x10 [ 2101.615194][T31704] ? __lock_acquire+0x622/0x1c90 [ 2101.615265][T31704] __sys_sendmsg+0x16d/0x220 [ 2101.615291][T31704] ? __pfx___sys_sendmsg+0x10/0x10 [ 2101.615316][T31704] ? __x64_sys_futex+0x1e0/0x4c0 [ 2101.615364][T31704] do_syscall_64+0xcd/0xfa0 [ 2101.615394][T31704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2101.615418][T31704] RIP: 0033:0x7f0b5ed8efc9 [ 2101.615438][T31704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2101.615459][T31704] RSP: 002b:00007f0b5fb4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2101.615482][T31704] RAX: ffffffffffffffda RBX: 00007f0b5efe6270 RCX: 00007f0b5ed8efc9 [ 2101.615498][T31704] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2101.615514][T31704] RBP: 00007f0b5ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2101.615528][T31704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2101.615542][T31704] R13: 00007f0b5efe6308 R14: 00007f0b5efe6270 R15: 00007fff1d16fd28 [ 2101.615577][T31704] [ 2102.710967][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5393'. [ 2102.780688][T31731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5393'. [ 2102.793945][T31731] netlink: 'syz.3.5393': attribute type 14 has an invalid length. [ 2102.956895][T31726] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2102.976297][T31726] cramfs: wrong magic [ 2104.445774][T31741] batadv0: entered promiscuous mode [ 2106.673878][T31751] batadv0: entered promiscuous mode [ 2106.950923][T31776] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2106.961320][T31776] cramfs: wrong magic [ 2107.232465][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2107.232483][ T30] audit: type=1326 audit(2000000949.258:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2107.285766][T31781] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2107.294686][T31781] CPU: 0 UID: 0 PID: 31781 Comm: syz.8.5400 Not tainted syzkaller #0 PREEMPT(full) [ 2107.294716][T31781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2107.294729][T31781] Call Trace: [ 2107.294737][T31781] [ 2107.294745][T31781] dump_stack_lvl+0x16c/0x1f0 [ 2107.294766][T31781] sysfs_warn_dup+0x7f/0xa0 [ 2107.294787][T31781] sysfs_do_create_link_sd+0x124/0x140 [ 2107.294801][T31781] sysfs_create_link+0x61/0xc0 [ 2107.294813][T31781] device_add+0x62c/0x1aa0 [ 2107.294831][T31781] ? __pfx_device_add+0x10/0x10 [ 2107.294846][T31781] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2107.294867][T31781] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2107.294885][T31781] wiphy_register+0x1eb0/0x2b20 [ 2107.294902][T31781] ? netdev_run_todo+0x864/0x1320 [ 2107.294922][T31781] ? __pfx_wiphy_register+0x10/0x10 [ 2107.294951][T31781] ieee80211_register_hw+0x253d/0x4120 [ 2107.294976][T31781] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2107.294992][T31781] ? __pfx___debug_object_init+0x10/0x10 [ 2107.295008][T31781] ? find_held_lock+0x2b/0x80 [ 2107.295020][T31781] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2107.295039][T31781] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2107.295060][T31781] ? __hrtimer_setup+0x176/0x280 [ 2107.295080][T31781] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2107.295108][T31781] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2107.295127][T31781] ? __asan_memcpy+0x3c/0x60 [ 2107.295144][T31781] hwsim_new_radio_nl+0xba2/0x1330 [ 2107.295163][T31781] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2107.295184][T31781] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2107.295203][T31781] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2107.295225][T31781] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2107.295243][T31781] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2107.295266][T31781] ? bpf_lsm_capable+0x9/0x10 [ 2107.295283][T31781] ? security_capable+0x7e/0x260 [ 2107.295298][T31781] ? ns_capable+0xd7/0x110 [ 2107.295316][T31781] genl_rcv_msg+0x55c/0x800 [ 2107.295335][T31781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2107.295353][T31781] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2107.295375][T31781] netlink_rcv_skb+0x158/0x420 [ 2107.295390][T31781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2107.295408][T31781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2107.295430][T31781] ? netlink_deliver_tap+0x1ae/0xd30 [ 2107.295448][T31781] genl_rcv+0x28/0x40 [ 2107.295463][T31781] netlink_unicast+0x5aa/0x870 [ 2107.295480][T31781] ? __pfx_netlink_unicast+0x10/0x10 [ 2107.295502][T31781] netlink_sendmsg+0x8c8/0xdd0 [ 2107.295520][T31781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2107.295542][T31781] ____sys_sendmsg+0xa98/0xc70 [ 2107.295560][T31781] ? copy_msghdr_from_user+0x10a/0x160 [ 2107.295574][T31781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2107.295599][T31781] ___sys_sendmsg+0x134/0x1d0 [ 2107.295614][T31781] ? __pfx____sys_sendmsg+0x10/0x10 [ 2107.295627][T31781] ? __lock_acquire+0x622/0x1c90 [ 2107.295702][T31781] __sys_sendmsg+0x16d/0x220 [ 2107.295724][T31781] ? __pfx___sys_sendmsg+0x10/0x10 [ 2107.295746][T31781] ? __secure_computing+0x28e/0x3b0 [ 2107.295767][T31781] do_syscall_64+0xcd/0xfa0 [ 2107.295783][T31781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2107.295796][T31781] RIP: 0033:0x7feaaff8efc9 [ 2107.295807][T31781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2107.295818][T31781] RSP: 002b:00007feab0d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2107.295830][T31781] RAX: ffffffffffffffda RBX: 00007feab01e6180 RCX: 00007feaaff8efc9 [ 2107.295839][T31781] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2107.295846][T31781] RBP: 00007feab0011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2107.295854][T31781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2107.295861][T31781] R13: 00007feab01e6218 R14: 00007feab01e6180 R15: 00007ffe18f83698 [ 2107.295879][T31781] [ 2107.390478][ T30] audit: type=1326 audit(2000000949.288:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2107.986963][ T30] audit: type=1326 audit(2000000949.288:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2108.170782][ T30] audit: type=1326 audit(2000000949.288:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2108.507503][ T30] audit: type=1326 audit(2000000949.288:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2108.531064][ C1] vkms_vblank_simulate: vblank timer overrun [ 2108.743067][ T30] audit: type=1326 audit(2000000949.308:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2108.766469][ C1] vkms_vblank_simulate: vblank timer overrun [ 2109.031565][ T30] audit: type=1326 audit(2000000949.308:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2110.150845][ T30] audit: type=1326 audit(2000000949.308:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2110.175949][ T30] audit: type=1326 audit(2000000949.308:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2110.319968][ T30] audit: type=1326 audit(2000000949.748:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31774 comm="syz.8.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaff8efc9 code=0x7ffc0000 [ 2113.219692][T31823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5408'. [ 2113.241207][T31823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5408'. [ 2113.251260][T31823] netlink: 'syz.3.5408': attribute type 14 has an invalid length. [ 2113.378909][T31825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2113.614201][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2113.614217][ T30] audit: type=1326 audit(2000000955.628:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2113.806076][ T30] audit: type=1326 audit(2000000955.628:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2113.964510][ T30] audit: type=1326 audit(2000000955.638:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2114.179639][ T30] audit: type=1326 audit(2000000955.638:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2114.318559][T31833] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2114.350910][ T30] audit: type=1326 audit(2000000955.638:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2114.374290][ C1] vkms_vblank_simulate: vblank timer overrun [ 2114.525242][ T30] audit: type=1326 audit(2000000955.638:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2114.700741][ T30] audit: type=1326 audit(2000000955.728:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.9.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb17e78efc9 code=0x7ffc0000 [ 2114.724217][ C1] vkms_vblank_simulate: vblank timer overrun [ 2115.183851][T31833] CPU: 0 UID: 0 PID: 31833 Comm: syz.9.5411 Not tainted syzkaller #0 PREEMPT(full) [ 2115.183882][T31833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2115.183894][T31833] Call Trace: [ 2115.183904][T31833] [ 2115.183913][T31833] dump_stack_lvl+0x16c/0x1f0 [ 2115.183947][T31833] sysfs_warn_dup+0x7f/0xa0 [ 2115.183982][T31833] sysfs_do_create_link_sd+0x124/0x140 [ 2115.184008][T31833] sysfs_create_link+0x61/0xc0 [ 2115.184030][T31833] device_add+0x62c/0x1aa0 [ 2115.184084][T31833] ? __pfx_device_add+0x10/0x10 [ 2115.184111][T31833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2115.184148][T31833] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2115.184182][T31833] wiphy_register+0x1eb0/0x2b20 [ 2115.184212][T31833] ? netdev_run_todo+0x864/0x1320 [ 2115.184250][T31833] ? __pfx_wiphy_register+0x10/0x10 [ 2115.184296][T31833] ieee80211_register_hw+0x253d/0x4120 [ 2115.184341][T31833] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2115.184370][T31833] ? __pfx___debug_object_init+0x10/0x10 [ 2115.184398][T31833] ? find_held_lock+0x2b/0x80 [ 2115.184420][T31833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2115.184454][T31833] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2115.184479][T31833] ? __hrtimer_setup+0x176/0x280 [ 2115.184513][T31833] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2115.184563][T31833] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2115.184596][T31833] ? __asan_memcpy+0x3c/0x60 [ 2115.184626][T31833] hwsim_new_radio_nl+0xba2/0x1330 [ 2115.184660][T31833] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2115.184701][T31833] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2115.184734][T31833] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2115.184773][T31833] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2115.184807][T31833] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2115.184850][T31833] ? bpf_lsm_capable+0x9/0x10 [ 2115.184879][T31833] ? security_capable+0x7e/0x260 [ 2115.184905][T31833] ? ns_capable+0xd7/0x110 [ 2115.184939][T31833] genl_rcv_msg+0x55c/0x800 [ 2115.184975][T31833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2115.185007][T31833] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2115.185055][T31833] netlink_rcv_skb+0x158/0x420 [ 2115.185084][T31833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2115.185118][T31833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2115.185163][T31833] ? netlink_deliver_tap+0x1ae/0xd30 [ 2115.185197][T31833] genl_rcv+0x28/0x40 [ 2115.185225][T31833] netlink_unicast+0x5aa/0x870 [ 2115.185258][T31833] ? __pfx_netlink_unicast+0x10/0x10 [ 2115.185298][T31833] netlink_sendmsg+0x8c8/0xdd0 [ 2115.185333][T31833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2115.185375][T31833] ____sys_sendmsg+0xa98/0xc70 [ 2115.185407][T31833] ? copy_msghdr_from_user+0x10a/0x160 [ 2115.185432][T31833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2115.185480][T31833] ___sys_sendmsg+0x134/0x1d0 [ 2115.185508][T31833] ? __pfx____sys_sendmsg+0x10/0x10 [ 2115.185531][T31833] ? __lock_acquire+0x622/0x1c90 [ 2115.185599][T31833] __sys_sendmsg+0x16d/0x220 [ 2115.185627][T31833] ? __pfx___sys_sendmsg+0x10/0x10 [ 2115.185667][T31833] ? __secure_computing+0x28e/0x3b0 [ 2115.185700][T31833] do_syscall_64+0xcd/0xfa0 [ 2115.185729][T31833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.185751][T31833] RIP: 0033:0x7fb17e78efc9 [ 2115.185771][T31833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2115.185793][T31833] RSP: 002b:00007fb17f69e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2115.185815][T31833] RAX: ffffffffffffffda RBX: 00007fb17e9e6180 RCX: 00007fb17e78efc9 [ 2115.185831][T31833] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2115.185845][T31833] RBP: 00007fb17e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 2115.185859][T31833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2115.185872][T31833] R13: 00007fb17e9e6218 R14: 00007fb17e9e6180 R15: 00007fff8061fa98 [ 2115.185906][T31833] [ 2116.045960][T31857] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2116.076836][T31857] /dev/nullb0: Can't open blockdev [ 2116.689606][T31867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2118.289944][T31874] batadv0: entered promiscuous mode [ 2118.954712][T31889] batadv0: entered promiscuous mode [ 2119.144215][T31895] batadv0: entered promiscuous mode [ 2121.757391][ T30] audit: type=1326 audit(2000000963.778:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2121.807302][T31931] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2121.815270][T31931] CPU: 1 UID: 0 PID: 31931 Comm: syz.7.5428 Not tainted syzkaller #0 PREEMPT(full) [ 2121.815298][T31931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2121.815314][T31931] Call Trace: [ 2121.815322][T31931] [ 2121.815332][T31931] dump_stack_lvl+0x16c/0x1f0 [ 2121.815366][T31931] sysfs_warn_dup+0x7f/0xa0 [ 2121.815403][T31931] sysfs_do_create_link_sd+0x124/0x140 [ 2121.815429][T31931] sysfs_create_link+0x61/0xc0 [ 2121.815451][T31931] device_add+0x62c/0x1aa0 [ 2121.815483][T31931] ? __pfx_device_add+0x10/0x10 [ 2121.815508][T31931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2121.815544][T31931] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2121.815579][T31931] wiphy_register+0x1eb0/0x2b20 [ 2121.815609][T31931] ? netdev_run_todo+0x864/0x1320 [ 2121.815647][T31931] ? __pfx_wiphy_register+0x10/0x10 [ 2121.815695][T31931] ieee80211_register_hw+0x253d/0x4120 [ 2121.815742][T31931] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2121.815772][T31931] ? __pfx___debug_object_init+0x10/0x10 [ 2121.815812][T31931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2121.815848][T31931] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2121.815873][T31931] ? __hrtimer_setup+0x176/0x280 [ 2121.815909][T31931] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 2121.815961][T31931] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2121.815995][T31931] ? __asan_memcpy+0x3c/0x60 [ 2121.816025][T31931] hwsim_new_radio_nl+0xba2/0x1330 [ 2121.816059][T31931] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2121.816100][T31931] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2121.816133][T31931] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2121.816173][T31931] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2121.816207][T31931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2121.816250][T31931] ? bpf_lsm_capable+0x9/0x10 [ 2121.816280][T31931] ? security_capable+0x7e/0x260 [ 2121.816306][T31931] ? ns_capable+0xd7/0x110 [ 2121.816341][T31931] genl_rcv_msg+0x55c/0x800 [ 2121.816376][T31931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2121.816408][T31931] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2121.816450][T31931] netlink_rcv_skb+0x158/0x420 [ 2121.816478][T31931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2121.816510][T31931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2121.816553][T31931] ? netlink_deliver_tap+0x1ae/0xd30 [ 2121.816585][T31931] genl_rcv+0x28/0x40 [ 2121.816612][T31931] netlink_unicast+0x5aa/0x870 [ 2121.816645][T31931] ? __pfx_netlink_unicast+0x10/0x10 [ 2121.816685][T31931] netlink_sendmsg+0x8c8/0xdd0 [ 2121.816719][T31931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2121.816761][T31931] ____sys_sendmsg+0xa98/0xc70 [ 2121.816798][T31931] ? copy_msghdr_from_user+0x10a/0x160 [ 2121.816825][T31931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2121.816874][T31931] ___sys_sendmsg+0x134/0x1d0 [ 2121.816904][T31931] ? __pfx____sys_sendmsg+0x10/0x10 [ 2121.816928][T31931] ? __lock_acquire+0x622/0x1c90 [ 2121.816998][T31931] __sys_sendmsg+0x16d/0x220 [ 2121.817025][T31931] ? __pfx___sys_sendmsg+0x10/0x10 [ 2121.817065][T31931] ? __secure_computing+0x28e/0x3b0 [ 2121.817099][T31931] do_syscall_64+0xcd/0xfa0 [ 2121.817128][T31931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.817150][T31931] RIP: 0033:0x7f1b4598efc9 [ 2121.817169][T31931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.817192][T31931] RSP: 002b:00007f1b467eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2121.817214][T31931] RAX: ffffffffffffffda RBX: 00007f1b45be6180 RCX: 00007f1b4598efc9 [ 2121.817230][T31931] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 2121.817245][T31931] RBP: 00007f1b45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2121.817260][T31931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2121.817274][T31931] R13: 00007f1b45be6218 R14: 00007f1b45be6180 R15: 00007ffc67882918 [ 2121.817308][T31931] [ 2122.636899][T31932] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2122.644414][T31932] cramfs: wrong magic [ 2122.676327][ T30] audit: type=1326 audit(2000000963.778:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2122.699784][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.770018][ T30] audit: type=1326 audit(2000000963.778:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2122.830455][ T30] audit: type=1326 audit(2000000963.778:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2122.870762][ T30] audit: type=1326 audit(2000000963.818:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2122.923636][ T30] audit: type=1326 audit(2000000963.818:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2122.996036][ T30] audit: type=1326 audit(2000000963.818:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2123.080617][T31936] batadv0: entered promiscuous mode [ 2123.100444][ T30] audit: type=1326 audit(2000000964.638:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2123.160413][ T30] audit: type=1326 audit(2000000964.638:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2123.263286][ T30] audit: type=1326 audit(2000000964.778:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31918 comm="syz.7.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b4598efc9 code=0x7ffc0000 [ 2123.587266][T29542] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2124.143285][T31934] loop6: detected capacity change from 0 to 63 [ 2124.203822][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2124.248882][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2124.276673][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2124.316088][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2124.367301][T23133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2129.620577][T32000] batadv0: entered promiscuous mode [ 2129.885185][T32011] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2129.894388][T32011] cramfs: wrong magic [ 2130.898381][T32028] batadv0: entered promiscuous mode [ 2131.763443][T21264] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2133.823489][T32062] batadv0: entered promiscuous mode [ 2140.146530][T32131] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2140.157102][T32131] cramfs: wrong magic [ 2140.624582][T32121] batadv0: entered promiscuous mode [ 2140.644414][T32143] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2140.796331][T32153] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2140.806208][T32153] cramfs: wrong magic [ 2141.092202][T32137] batadv0: entered promiscuous mode [ 2143.979254][T32194] batadv0: entered promiscuous mode [ 2144.402167][T32199] batadv0: entered promiscuous mode [ 2144.832748][T32213] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5478'. [ 2145.053957][T32208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2145.071320][ C0] vkms_vblank_simulate: vblank timer overrun [ 2146.863152][T32228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2147.615931][T32236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2147.868125][T32243] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2147.875933][T32243] cramfs: wrong magic [ 2149.403027][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5486'. [ 2151.206699][T32275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2151.321777][T32276] batadv0: entered promiscuous mode [ 2153.535937][T32309] batadv0: entered promiscuous mode [ 2153.566297][T32310] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5496'. [ 2153.812507][T32312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2153.852802][T32313] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2158.029704][T32361] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2158.037434][T32361] cramfs: wrong magic [ 2158.586465][T32367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5508'. [ 2160.081329][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.186455][T32388] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2160.255281][T32388] cramfs: wrong magic [ 2160.337738][T32393] batadv0: entered promiscuous mode [ 2161.236625][T17754] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2161.660377][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5516'. [ 2161.695426][T32403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 2161.730179][T32403] netlink: 'syz.3.5516': attribute type 14 has an invalid length. [ 2163.356435][T32429] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2163.371135][T32429] cramfs: wrong magic [ 2163.475600][T32426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2164.592074][T32440] batadv0: entered promiscuous mode [ 2166.481469][T32455] batadv0: entered promiscuous mode [ 2166.696655][T32465] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5528'. [ 2166.772756][T32460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2166.908121][T32473] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2167.269980][T32473] cramfs: wrong magic [ 2167.971702][T32489] batadv0: entered promiscuous mode [ 2168.274113][T32493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2168.460437][T17746] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2169.322588][T32504] batadv0: entered promiscuous mode [ 2169.956229][T32521] batadv0: entered promiscuous mode [ 2171.779059][T32543] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2171.819094][T32543] cramfs: wrong magic [ 2171.924413][T32539] batadv0: entered promiscuous mode [ 2171.961649][T32549] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2171.968657][T32549] cramfs: wrong magic [ 2172.839616][T28298] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2173.461153][T32565] batadv0: entered promiscuous mode [ 2174.825294][T32574] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2175.180794][T32574] cramfs: wrong magic [ 2175.632850][T32586] batadv0: entered promiscuous mode [ 2175.949952][T32600] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2175.977022][T32600] cramfs: wrong magic [ 2176.426979][T32603] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2176.491002][T32603] cramfs: wrong magic [ 2177.537141][T32627] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2177.608770][T32625] batadv0: entered promiscuous mode [ 2177.615196][T32627] cramfs: wrong magic [ 2179.554699][T32660] batadv0: entered promiscuous mode [ 2181.091696][T32682] batadv0: entered promiscuous mode [ 2181.299037][T32684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5566'. [ 2181.318164][T32684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5566'. [ 2182.256157][T32684] netlink: 'syz.7.5566': attribute type 14 has an invalid length. [ 2183.563079][T32703] batadv0: entered promiscuous mode [ 2183.682955][T32709] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2183.721702][T32709] cramfs: wrong magic [ 2184.189742][T32722] batadv0: entered promiscuous mode [ 2184.223449][T32723] batadv0: entered promiscuous mode [ 2186.481276][T32745] netlink: 'syz.9.5577': attribute type 10 has an invalid length. [ 2186.522927][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5577'. [ 2188.381736][T32757] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2188.411157][T32757] cramfs: wrong magic [ 2190.069978][ T311] batadv0: entered promiscuous mode [ 2190.115877][ T312] batadv0: entered promiscuous mode [ 2190.734129][ T310] batadv0: entered promiscuous mode [ 2194.823413][ T360] batadv0: entered promiscuous mode [ 2194.939397][ T361] batadv0: entered promiscuous mode [ 2195.432845][T21264] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2195.811761][ T377] batadv0: entered promiscuous mode [ 2196.934231][ T384] batadv0: entered promiscuous mode [ 2197.022994][ T406] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5598'. [ 2198.993445][ T422] batadv0: entered promiscuous mode [ 2199.897419][ T437] batadv0: entered promiscuous mode [ 2202.954602][ T476] batadv0: entered promiscuous mode [ 2203.094686][ T485] batadv0: entered promiscuous mode [ 2203.156131][ T492] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2203.169685][ T492] cramfs: wrong magic [ 2203.453943][ T501] batadv0: entered promiscuous mode [ 2207.090178][ T526] batadv0: entered promiscuous mode [ 2208.307519][T21264] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2208.611641][ T543] batadv0: entered promiscuous mode [ 2208.889249][ T554] batadv0: entered promiscuous mode [ 2209.381661][T11819] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2209.611751][ T557] batadv0: entered promiscuous mode [ 2209.674601][ T562] batadv0: entered promiscuous mode [ 2210.182598][ T581] batadv0: entered promiscuous mode [ 2210.816859][ T592] batadv0: entered promiscuous mode [ 2210.882026][ T603] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5629'. [ 2211.726138][ T617] batadv0: entered promiscuous mode [ 2212.405090][ T620] batadv0: entered promiscuous mode [ 2212.598796][ T625] batadv0: entered promiscuous mode [ 2212.660162][ T641] batadv0: entered promiscuous mode [ 2213.862522][ T663] batadv0: entered promiscuous mode [ 2215.013203][ T665] batadv0: entered promiscuous mode [ 2215.447126][ T684] batadv0: entered promiscuous mode [ 2215.861393][ T699] batadv0: entered promiscuous mode [ 2216.358115][ T706] batadv0: entered promiscuous mode [ 2218.976961][ T729] batadv0: entered promiscuous mode [ 2219.998450][T11801] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2221.513347][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2223.067909][ T750] batadv0: entered promiscuous mode [ 2227.054903][ T792] batadv0: entered promiscuous mode [ 2227.592588][T17740] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2228.652013][T21264] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2230.473186][ T802] batadv0: entered promiscuous mode [ 2239.419473][ T905] batadv0: entered promiscuous mode [ 2240.673327][ T909] batadv0: entered promiscuous mode [ 2247.951081][ T994] kvm: pic: non byte write [ 2250.021311][ T1011] kvm: pic: non byte write [ 2251.175484][ T1031] kvm: pic: non byte write [ 2254.371733][ T1099] kvm: pic: non byte write [ 2255.793889][ T1110] kvm: pic: non byte write [ 2259.165159][ T1164] kvm: pic: non byte write [ 2259.305637][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5735'. [ 2259.317403][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5735'. [ 2259.357774][ T1175] netlink: 'syz.8.5735': attribute type 14 has an invalid length. [ 2260.120703][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5736'. [ 2260.142490][ T1179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5736'. [ 2260.166916][ T1179] netlink: 'syz.7.5736': attribute type 14 has an invalid length. [ 2263.862090][ T1242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5750'. [ 2263.996692][ T1242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5750'. [ 2264.199741][ T1243] kvm: pic: non byte write [ 2264.261471][ T1242] netlink: 'syz.3.5750': attribute type 14 has an invalid length. [ 2266.362284][ T1261] kvm: pic: non byte write [ 2267.177458][ T1281] kvm: pic: non byte write [ 2268.797251][ T1312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5762'. [ 2268.877389][ T1312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5762'. [ 2271.307456][ T1347] kvm: pic: non byte write [ 2274.109611][ T1394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 2274.132140][ T1394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5779'. [ 2274.145399][ T1394] netlink: 'syz.3.5779': attribute type 14 has an invalid length. [ 2276.282975][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5785'. [ 2276.299940][ T1419] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5785'. [ 2276.868439][ T1416] kvm: pic: non byte write [ 2281.706795][ T1495] kvm: pic: non byte write [ 2282.953169][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.100165][ T1522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5805'. [ 2283.140782][ T1522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5805'. [ 2283.157848][ T1522] netlink: 'syz.8.5805': attribute type 14 has an invalid length. [ 2285.160735][ T1550] kvm: pic: non byte write [ 2289.873915][ T1603] kvm: pic: non byte write [ 2292.592229][ T1633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5827'. [ 2292.628096][ T1633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 2292.638243][ T1633] netlink: 'syz.3.5827': attribute type 14 has an invalid length. [ 2292.992810][ T1645] FAULT_INJECTION: forcing a failure. [ 2292.992810][ T1645] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2293.036847][ T1645] CPU: 0 UID: 0 PID: 1645 Comm: syz.7.5831 Not tainted syzkaller #0 PREEMPT(full) [ 2293.036871][ T1645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2293.036878][ T1645] Call Trace: [ 2293.036883][ T1645] [ 2293.036888][ T1645] dump_stack_lvl+0x16c/0x1f0 [ 2293.036909][ T1645] should_fail_ex+0x512/0x640 [ 2293.036926][ T1645] _copy_from_user+0x2e/0xd0 [ 2293.036942][ T1645] __x64_sys_timer_create+0x10d/0x1d0 [ 2293.036960][ T1645] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 2293.036984][ T1645] do_syscall_64+0xcd/0xfa0 [ 2293.036999][ T1645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.037011][ T1645] RIP: 0033:0x7f1b4598efc9 [ 2293.037021][ T1645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2293.037033][ T1645] RSP: 002b:00007f1b4682d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 2293.037044][ T1645] RAX: ffffffffffffffda RBX: 00007f1b45be5fa0 RCX: 00007f1b4598efc9 [ 2293.037052][ T1645] RDX: 0000000000000000 RSI: 0000200000533fa0 RDI: 0000000000000005 [ 2293.037060][ T1645] RBP: 00007f1b4682d090 R08: 0000000000000000 R09: 0000000000000000 [ 2293.037067][ T1645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.037074][ T1645] R13: 00007f1b45be6038 R14: 00007f1b45be5fa0 R15: 00007ffc67882918 [ 2293.037089][ T1645] [ 2293.508335][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5833'. [ 2293.527490][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5833'. [ 2293.545404][ T1650] netlink: 'syz.7.5833': attribute type 14 has an invalid length. [ 2293.600390][T21287] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2293.773233][T21287] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.810550][T21287] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2293.973196][T21287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.014996][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2294.015010][ T30] audit: type=1400 audit(2000001136.038:3858): avc: denied { watch watch_reads } for pid=1651 comm="syz.8.5834" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2294.098660][T21287] usb 7-1: config 0 descriptor?? [ 2294.261058][T21287] pwc: Askey VC010 type 2 USB webcam detected. [ 2294.677968][ T1647] netem: incorrect gi model size [ 2294.702794][ T1647] netem: change failed [ 2295.130921][T21287] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2295.633116][ T30] audit: type=1400 audit(2000001137.628:3859): avc: denied { listen } for pid=1667 comm="syz.3.5838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2295.820399][ T30] audit: type=1400 audit(2000001137.638:3860): avc: denied { read } for pid=1667 comm="syz.3.5838" path="socket:[152653]" dev="sockfs" ino=152653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2295.876737][T21287] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2295.965362][T21287] pwc: recv_control_msg error -71 req 04 val 1000 [ 2295.994826][T21287] pwc: recv_control_msg error -71 req 04 val 1300 [ 2296.010757][T21287] pwc: recv_control_msg error -71 req 04 val 1400 [ 2296.226178][T21287] pwc: recv_control_msg error -71 req 02 val 2000 [ 2296.256693][ T1675] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 2296.308600][ T1675] SELinux: failed to load policy [ 2296.458539][T21287] pwc: recv_control_msg error -71 req 02 val 2100 [ 2296.589916][T21287] pwc: recv_control_msg error -71 req 04 val 1500 [ 2296.683781][ T30] audit: type=1400 audit(2000001138.708:3861): avc: denied { ioctl } for pid=1685 comm="syz.3.5843" path="socket:[153657]" dev="sockfs" ino=153657 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2296.692813][ T1687] 0: reclassify loop, rule prio 0, protocol 800 [ 2296.900629][T21287] pwc: recv_control_msg error -71 req 02 val 2500 [ 2296.983536][T21287] pwc: recv_control_msg error -71 req 02 val 2400 [ 2297.146223][T21287] pwc: recv_control_msg error -71 req 02 val 2600 [ 2297.183618][T21287] pwc: recv_control_msg error -71 req 02 val 2900 [ 2297.236610][T21287] pwc: recv_control_msg error -71 req 02 val 2800 [ 2297.290272][T21287] pwc: recv_control_msg error -71 req 04 val 1100 [ 2297.395333][ T30] audit: type=1400 audit(2000001139.418:3862): avc: denied { bind } for pid=1692 comm="syz.3.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2297.439450][T21287] pwc: recv_control_msg error -71 req 04 val 1200 [ 2297.490966][ T30] audit: type=1400 audit(2000001139.418:3863): avc: denied { write } for pid=1692 comm="syz.3.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2297.519432][T21287] pwc: Registered as video103. [ 2297.720051][T21287] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 2297.849540][ T1699] 9pnet_fd: Insufficient options for proto=fd [ 2298.297566][ T30] audit: type=1400 audit(2000001139.868:3864): avc: denied { mounton } for pid=1695 comm="syz.6.5846" path="/syzcgroup/net/syz6/cgroup.procs" dev="cgroup" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 2298.389750][T21287] usb 7-1: USB disconnect, device number 2 [ 2298.588671][ T1707] SELinux: policydb magic number 0xc does not match expected magic number 0xf97cff8c [ 2298.606562][ T1708] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 2298.616311][ T1707] SELinux: failed to load policy [ 2298.635396][ T1708] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 2298.668923][ T1708] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 2298.752576][ T30] audit: type=1400 audit(2000001140.568:3865): avc: denied { associate } for pid=1703 comm="syz.6.5848" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2298.752813][ T30] audit: type=1400 audit(2000001140.588:3866): avc: denied { write } for pid=1704 comm="syz.3.5849" lport=48554 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2298.895670][ T30] audit: type=1400 audit(2000001140.688:3867): avc: denied { firmware_load } for pid=1700 comm="syz.9.5847" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2299.119119][ T1713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2299.190838][T21287] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2299.347553][ T30] audit: type=1400 audit(2000001141.368:3868): avc: granted { setsecparam } for pid=1717 comm="syz.7.5852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2299.392672][T21287] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 2299.412805][T21287] usb 7-1: config 1 has no interface number 0 [ 2299.427298][T21287] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2299.442685][T21287] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2299.455846][T21287] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2299.473571][T21287] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2299.483471][T21287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.495283][T21287] usb 7-1: Product: syz [ 2299.496900][ T1720] tipc: Started in network mode [ 2299.499522][T21287] usb 7-1: Manufacturer: syz [ 2299.515251][ T1720] tipc: Node identity d21c6177e727, cluster identity 4711 [ 2299.527359][ T1720] tipc: Enabled bearer , priority 0 [ 2299.539697][T21287] usb 7-1: SerialNumber: syz [ 2299.591218][T31289] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2299.591888][ T30] audit: type=1400 audit(2000001141.598:3869): avc: denied { append } for pid=1721 comm="syz.8.5854" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2299.623503][ T1723] syzkaller0: entered promiscuous mode [ 2299.639161][ T1723] syzkaller0: entered allmulticast mode [ 2299.723478][ T1706] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2299.775698][ T1723] tipc: Resetting bearer [ 2299.855426][T31289] usb 10-1: Using ep0 maxpacket: 32 [ 2299.910210][T31289] usb 10-1: config 0 has an invalid interface number: 83 but max is 0 [ 2299.928172][T31289] usb 10-1: config 0 has no interface number 0 [ 2299.949849][T31289] usb 10-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 194 [ 2299.966784][ T1706] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2300.040957][T31289] usb 10-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2300.080244][T31289] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 2300.089851][T31289] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.098174][T31289] usb 10-1: Product: syz [ 2300.107309][T31289] usb 10-1: Manufacturer: syz [ 2300.113876][T31289] usb 10-1: SerialNumber: syz [ 2300.139544][T31289] usb 10-1: config 0 descriptor?? [ 2300.153150][ T1718] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2300.163484][T31289] redrat3 10-1:0.83: Couldn't find all endpoints [ 2300.227342][ T1729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5855'. [ 2300.238968][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5855'. [ 2300.248125][ T1729] netlink: 'syz.3.5855': attribute type 14 has an invalid length. [ 2300.345331][T21287] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 2300.363128][ T1716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.400809][ T1716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2300.409922][ T30] audit: type=1400 audit(2000001142.428:3870): avc: denied { ioctl } for pid=1715 comm="syz.9.5853" path="socket:[153899]" dev="sockfs" ino=153899 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2300.560565][T20409] usb 10-1: USB disconnect, device number 2 [ 2300.588123][T21287] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 2300.602897][T21287] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 2300.673846][ T1734] lo speed is unknown, defaulting to 1000 [ 2300.680232][ T1734] lo speed is unknown, defaulting to 1000 [ 2300.694315][ T1734] lo speed is unknown, defaulting to 1000 [ 2300.882477][ T1734] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2301.006859][T21287] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 2301.013789][T21287] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 2301.025268][ T5972] tipc: Node number set to 893084023 [ 2301.033393][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.040479][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.047382][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.054417][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.061877][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.068465][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.076545][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.083510][ T1734] lo speed is unknown, defaulting to 1000 [ 2301.112388][T21287] usb 7-1: USB disconnect, device number 3 [ 2301.157387][T21287] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 2301.201480][T21287] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2301.663171][ T30] audit: type=1400 audit(2000001143.668:3871): avc: denied { map } for pid=1742 comm="syz.6.5859" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2301.683292][T17740] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 2301.715729][T17740] Bluetooth: hci5: Frame reassembly failed (-84) [ 2302.194285][ T1754] [U]  [ 2302.197192][ T1754] [U] K{ [ 2302.206863][ T1754] [U] T 1ŠFFˊ`GJǘGO/MC [ 2302.222433][ T1754] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2302.245097][ T1755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5861'. [ 2302.267395][ T1754] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2302.860470][T31289] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2302.940678][ T1754] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2302.976304][ C0] vkms_vblank_simulate: vblank timer overrun [ 2302.991139][ T1754] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2303.061564][ T1754] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2303.091873][T31289] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2303.110682][ T1754] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2303.132135][T31289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.152222][ T1723] tipc: Resetting bearer [ 2303.161085][ T1754] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< [ 2303.531506][ T1759] SELinux: failed to load policy [ 2303.653284][ T1762] CIFS mount error: No usable UNC path provided in device string! [ 2303.653284][ T1762] [ 2303.663723][ T1762] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2303.680472][T22643] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2303.741653][ T1764] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5864'. [ 2304.209636][ T5972] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2304.410927][ T5972] usb 10-1: Using ep0 maxpacket: 8 [ 2304.452004][ T5972] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 2304.465310][ T5972] usb 10-1: config 179 has no interface number 0 [ 2304.478110][ T5972] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2304.492233][ T5972] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2304.504597][ T5972] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2304.516821][ T5972] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2304.529582][ T5972] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2304.576162][ T5972] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2304.586274][ T5972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.600003][ T1768] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2305.385318][T31289] [drm:udl_init] *ERROR* Selecting channel failed [ 2305.399027][ T1754] [U] [ 2305.407382][T31352] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input42 [ 2305.502315][T31289] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 2305.520634][T31289] [drm] Initialized udl on minor 2 [ 2305.543118][T31289] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2305.596849][T31289] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2305.603765][T21287] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2305.646404][T31352] usb 10-1: USB disconnect, device number 3 [ 2305.652433][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2305.652488][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2305.657142][T19046] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2305.684240][T31289] usb 4-1: USB disconnect, device number 43 [ 2305.722036][T19046] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2305.772233][T21287] usb 7-1: no configurations [ 2305.781363][T21287] usb 7-1: can't read configurations, error -22 [ 2305.920509][T21287] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2306.215091][T21287] usb 7-1: no configurations [ 2306.220396][T21287] usb 7-1: can't read configurations, error -22 [ 2306.228979][T21287] usb usb7-port1: attempt power cycle [ 2306.341048][ T1800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 2306.462115][ T30] audit: type=1400 audit(2000001148.478:3872): avc: denied { lock } for pid=1797 comm="syz.9.5873" path="socket:[154092]" dev="sockfs" ino=154092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2306.680501][T21287] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2306.728132][T21287] usb 7-1: no configurations [ 2306.735953][T21287] usb 7-1: can't read configurations, error -22 [ 2307.139751][ T30] audit: type=1400 audit(2000001149.158:3873): avc: denied { ioctl } for pid=1812 comm="syz.3.5877" path="socket:[154128]" dev="sockfs" ino=154128 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2307.189072][T21287] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2307.241658][T21287] usb 7-1: no configurations [ 2307.258426][T21287] usb 7-1: can't read configurations, error -22 [ 2307.286161][T21287] usb usb7-port1: unable to enumerate USB device [ 2307.459745][ T1832] No such timeout policy "syz1" [ 2307.609214][ T1835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5880'. [ 2307.950430][T21287] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2308.112537][T21287] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2308.120863][T21287] usb 10-1: config 0 has no interface number 0 [ 2308.132050][T21287] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2308.141449][T21287] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.149615][T21287] usb 10-1: Product: syz [ 2308.157151][T21287] usb 10-1: Manufacturer: syz [ 2308.162176][T21287] usb 10-1: SerialNumber: syz [ 2308.198024][T21287] usb 10-1: config 0 descriptor?? [ 2308.416291][T21287] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2308.441125][ T30] audit: type=1400 audit(2000001150.458:3874): avc: denied { lock } for pid=1843 comm="syz.7.5883" path="socket:[152875]" dev="sockfs" ino=152875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2308.467952][T21287] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2308.481981][T21287] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2308.490052][T21287] usb 10-1: media controller created [ 2308.517488][T21287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2309.334928][ T1873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2310.180444][ T1879] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2310.590805][T21287] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 2310.817071][T21287] usb 10-1: USB disconnect, device number 4 [ 2310.914439][ T30] audit: type=1400 audit(2000001152.938:3875): avc: denied { accept } for pid=1881 comm="syz.3.5891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2312.769108][ T30] audit: type=1400 audit(2000001154.788:3876): avc: denied { setopt } for pid=1902 comm="syz.8.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2313.482999][ T1916] netlink: 2392 bytes leftover after parsing attributes in process `syz.7.5900'. [ 2314.223588][ T30] audit: type=1400 audit(2000001156.248:3877): avc: denied { setopt } for pid=1920 comm="syz.8.5903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2314.314066][ T5972] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2314.521939][ T1930] binder: BINDER_SET_CONTEXT_MGR already set [ 2314.528037][ T1930] binder: 1926:1930 ioctl 4018620d 200000000040 returned -16 [ 2315.021947][ T5972] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 2315.036224][ T5972] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 2315.046942][ T30] audit: type=1400 audit(2000001156.538:3878): avc: denied { map } for pid=1926 comm="syz.6.5904" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2315.077481][ T5972] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2315.087285][ T5972] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 2315.096732][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.104731][ T5972] usb 4-1: Product: syz [ 2315.109057][ T5972] usb 4-1: Manufacturer: syz [ 2315.113837][ T5972] usb 4-1: SerialNumber: syz [ 2315.127967][ T1934] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5903'. [ 2315.143110][ T1919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2315.152313][ T1919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2315.952168][ T5972] rtl8150 4-1:1.0: couldn't reset the device [ 2315.958532][ T5972] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 2316.332414][ T5972] usb 4-1: USB disconnect, device number 44 [ 2318.989999][ T2004] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 2319.059641][ T2005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2319.375510][ T2009] netlink: 'syz.9.5918': attribute type 33 has an invalid length. [ 2319.383401][ T2009] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5918'. [ 2320.446943][ T2019] sit1: entered promiscuous mode [ 2320.634452][ T2025] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5923'. [ 2320.651876][ T30] audit: type=1400 audit(2000001162.678:3879): avc: denied { remount } for pid=2021 comm="syz.3.5922" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2322.277707][ T2029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5922'. [ 2322.960362][ T30] audit: type=1400 audit(2000001164.978:3880): avc: denied { module_load } for pid=2021 comm="syz.3.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2323.165499][ T2047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5928'. [ 2323.787067][ T1774] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2323.960989][ T1774] usb 7-1: device descriptor read/64, error -71 [ 2324.280381][ T1774] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2324.420513][ T1774] usb 7-1: device descriptor read/64, error -71 [ 2324.531381][ T1774] usb usb7-port1: attempt power cycle [ 2324.890378][ T1774] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2325.470947][ T1774] usb 7-1: device descriptor read/8, error -71 [ 2325.710392][ T1774] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2325.862805][ T2073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5933'. [ 2325.890861][ T1774] usb 7-1: device descriptor read/8, error -71 [ 2326.052951][ T1774] usb usb7-port1: unable to enumerate USB device [ 2326.911026][ T30] audit: type=1400 audit(2000001168.937:3881): avc: denied { mount } for pid=2086 comm="syz.8.5937" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2327.188911][ T2094] netlink: 'syz.3.5940': attribute type 15 has an invalid length. [ 2327.198283][ T2094] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5940'. [ 2327.490380][T20409] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2327.522301][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5943'. [ 2327.532364][ T2105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5943'. [ 2327.541037][ T2107] overlayfs: failed to clone lowerpath [ 2327.542501][ T2105] netlink: 'syz.9.5943': attribute type 14 has an invalid length. [ 2327.640381][T20409] usb 7-1: Using ep0 maxpacket: 16 [ 2327.688033][T20409] usb 7-1: too many configurations: 204, using maximum allowed: 8 [ 2327.720125][T20409] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2327.802106][T20409] usb 7-1: can't read configurations, error -61 [ 2327.856506][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5947'. [ 2327.931202][T20409] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2328.100396][T20409] usb 7-1: Using ep0 maxpacket: 16 [ 2328.107712][T20409] usb 7-1: too many configurations: 204, using maximum allowed: 8 [ 2328.119037][T20409] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2328.127363][T20409] usb 7-1: can't read configurations, error -61 [ 2328.134232][T20409] usb usb7-port1: attempt power cycle [ 2328.470555][T31352] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2328.480507][T20409] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2328.503256][T20409] usb 7-1: Using ep0 maxpacket: 16 [ 2328.510141][T20409] usb 7-1: too many configurations: 204, using maximum allowed: 8 [ 2328.519709][T20409] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2328.527370][T20409] usb 7-1: can't read configurations, error -61 [ 2328.670523][T31352] usb 10-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 2328.689579][T31352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.506953][ T2125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5950'. [ 2329.518136][T20409] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2329.557434][T31352] usb 10-1: Product: syz [ 2329.585163][T31352] usb 10-1: Manufacturer: syz [ 2329.614301][T20409] usb 7-1: Using ep0 maxpacket: 16 [ 2329.625589][T31352] usb 10-1: SerialNumber: syz [ 2329.631122][T20409] usb 7-1: too many configurations: 204, using maximum allowed: 8 [ 2329.657503][T31352] usb 10-1: config 0 descriptor?? [ 2329.700445][T22643] Bluetooth: hci2: Malformed LE Event: 0x0d [ 2329.816926][ T30] audit: type=1400 audit(2000001179.721:3882): avc: denied { ioctl } for pid=2126 comm="syz.7.5951" path="/dev/ptyr3" dev="devtmpfs" ino=138 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2329.846501][T20409] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2329.863839][T20409] usb 7-1: can't read configurations, error -61 [ 2329.882371][T20409] usb usb7-port1: unable to enumerate USB device [ 2330.106560][ T2120] SELinux: policydb magic number 0x6f727473 does not match expected magic number 0xf97cff8c [ 2330.106609][ T2120] SELinux: failed to load policy [ 2330.107631][T20409] usb 10-1: USB disconnect, device number 5 [ 2330.196710][ T30] audit: type=1400 audit(2000001180.221:3883): avc: denied { create } for pid=2144 comm="syz.8.5957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2330.217973][ T30] audit: type=1400 audit(2000001180.221:3884): avc: denied { ioctl } for pid=2144 comm="syz.8.5957" path="socket:[154816]" dev="sockfs" ino=154816 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2330.242809][ C1] vkms_vblank_simulate: vblank timer overrun [ 2332.016049][ T2180] netlink: 'syz.6.5965': attribute type 4 has an invalid length. [ 2332.047914][ T2180] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5965'. [ 2332.144679][ T30] audit: type=1400 audit(2000001182.151:3885): avc: denied { create } for pid=2178 comm="syz.6.5965" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2332.294087][ T30] audit: type=1400 audit(2000001182.321:3886): avc: denied { unlink } for pid=23702 comm="syz-executor" name="file0" dev="tmpfs" ino=1832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2332.318580][ C1] vkms_vblank_simulate: vblank timer overrun [ 2332.952824][ T2203] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5970'. [ 2332.972530][ T2203] batadv0: entered promiscuous mode [ 2332.977813][ T2203] batadv0: entered allmulticast mode [ 2333.048091][ T2199] netlink: 'syz.9.5968': attribute type 3 has an invalid length. [ 2333.231264][ T2208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5971'. [ 2333.490376][T21287] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2333.660404][T21287] usb 7-1: Using ep0 maxpacket: 8 [ 2333.666756][T21287] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2333.675068][T21287] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2333.684848][T21287] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2333.695427][T21287] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2333.705406][T21287] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2333.718405][T21287] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2333.728754][T21287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.941892][T21287] usb 7-1: usb_control_msg returned -32 [ 2333.947458][T21287] usbtmc 7-1:16.0: can't read capabilities [ 2334.707740][ T2211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5971'. [ 2334.716763][ T2211] netlink: 'syz.6.5971': attribute type 5 has an invalid length. [ 2334.717209][ T2210] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 2334.724749][ T2211] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5971'. [ 2334.744691][ T2211] geneve2: entered promiscuous mode [ 2334.751409][ T2211] geneve2: entered allmulticast mode [ 2334.758820][ T1826] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 2334.768710][T17758] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 2334.777989][T17758] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 2334.788430][T17758] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 2336.164304][T20409] usb 7-1: USB disconnect, device number 16 [ 2344.402900][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2382.910288][ C1] sched: DL replenish lagged too much [ 2483.070274][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2483.077242][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22641/1:b..l [ 2483.085908][ C0] rcu: (detected by 0, t=10502 jiffies, g=176109, q=252 ncpus=2) [ 2483.093713][ C0] task:syz-executor state:R running task stack:23816 pid:22641 tgid:22641 ppid:22640 task_flags:0x400140 flags:0x00080000 [ 2483.108448][ C0] Call Trace: [ 2483.111727][ C0] [ 2483.114659][ C0] __schedule+0x1190/0x5de0 [ 2483.119172][ C0] ? post_alloc_hook+0x1af/0x230 [ 2483.124111][ C0] ? __pfx___schedule+0x10/0x10 [ 2483.128971][ C0] ? mark_held_locks+0x49/0x80 [ 2483.133738][ C0] preempt_schedule_irq+0x51/0x90 [ 2483.138759][ C0] irqentry_exit+0x36/0x90 [ 2483.143173][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2483.149151][ C0] RIP: 0010:rcu_is_watching+0x80/0xc0 [ 2483.154519][ C0] Code: 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d 70 99 02 12 <74> 07 5b 5d e9 d7 80 c7 09 e8 f2 2f 8a ff 5b 5d e9 cb 80 c7 09 48 [ 2483.174123][ C0] RSP: 0018:ffffc9000c467500 EFLAGS: 00000286 [ 2483.180186][ C0] RAX: 0000000000000001 RBX: ffff8880b84332a8 RCX: 0000000000000002 [ 2483.188150][ C0] RDX: 0000000000000000 RSI: ffffffff8bf1e9c0 RDI: ffffffff8ddb0ee0 [ 2483.196116][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2483.204082][ C0] R10: 0000000000000000 R11: 00000000000125da R12: 0000000000000000 [ 2483.212044][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2483.220025][ C0] lock_acquire+0x2cd/0x350 [ 2483.224538][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 2483.229739][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2483.235891][ C0] unwind_next_frame+0xd1/0x20a0 [ 2483.240828][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 2483.245938][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 2483.250964][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2483.257115][ C0] arch_stack_walk+0x94/0x100 [ 2483.261800][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 2483.266827][ C0] stack_trace_save+0x8e/0xc0 [ 2483.271498][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2483.276874][ C0] ? __lock_acquire+0x622/0x1c90 [ 2483.281820][ C0] save_stack+0x160/0x1f0 [ 2483.286148][ C0] ? __pfx_save_stack+0x10/0x10 [ 2483.290998][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 2483.296365][ C0] ? __put_partials+0x130/0x170 [ 2483.301210][ C0] ? qlist_free_all+0x4d/0x120 [ 2483.305971][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 2483.311606][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 2483.316636][ C0] ? page_ext_put+0x3e/0xd0 [ 2483.321140][ C0] __reset_page_owner+0x84/0x1a0 [ 2483.326079][ C0] __free_frozen_pages+0x7df/0x1160 [ 2483.331312][ C0] __put_partials+0x130/0x170 [ 2483.336088][ C0] qlist_free_all+0x4d/0x120 [ 2483.340683][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2483.346146][ C0] __kasan_slab_alloc+0x69/0x90 [ 2483.350998][ C0] __kvmalloc_node_noprof+0x35c/0x9c0 [ 2483.356373][ C0] ? trace_kmalloc+0x2b/0xd0 [ 2483.360961][ C0] ? __kmalloc_noprof+0x34f/0x880 [ 2483.365978][ C0] ? xt_replace_table+0x1ed/0x950 [ 2483.371002][ C0] ? xt_replace_table+0x1ed/0x950 [ 2483.376021][ C0] xt_replace_table+0x1ed/0x950 [ 2483.380880][ C0] __do_replace+0x1cf/0x9f0 [ 2483.385395][ C0] ? __pfx___do_replace+0x10/0x10 [ 2483.390431][ C0] do_ip6t_set_ctl+0x87c/0xb00 [ 2483.395188][ C0] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2483.401175][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 2483.406463][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2483.412466][ C0] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2483.418452][ C0] nf_setsockopt+0x8d/0xf0 [ 2483.422875][ C0] ipv6_setsockopt+0x135/0x170 [ 2483.427642][ C0] tcp_setsockopt+0xa7/0x100 [ 2483.432229][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2483.438127][ C0] do_sock_setsockopt+0xf3/0x1d0 [ 2483.443068][ C0] __sys_setsockopt+0x1a0/0x230 [ 2483.447919][ C0] __x64_sys_setsockopt+0xbd/0x160 [ 2483.453025][ C0] ? do_syscall_64+0x91/0xfa0 [ 2483.457700][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2483.462902][ C0] do_syscall_64+0xcd/0xfa0 [ 2483.467406][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2483.473302][ C0] RIP: 0033:0x7fb17e790eba [ 2483.477707][ C0] RSP: 002b:00007fff8061f728 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 2483.486112][ C0] RAX: ffffffffffffffda RBX: 00007fff8061f7b0 RCX: 00007fb17e790eba [ 2483.494076][ C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2483.502036][ C0] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 2483.510003][ C0] R10: 00007fb17e9b4800 R11: 0000000000000202 R12: 00007fb17e9b47a0 [ 2483.517971][ C0] R13: 00007fff8061f74c R14: 0000000000000000 R15: 00007fb17e9b4e60 [ 2483.525950][ C0] [ 2483.528962][ C0] rcu: rcu_preempt kthread starved for 8668 jiffies! g176109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2483.540145][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2483.550102][ C0] rcu: RCU grace-period kthread stack dump: [ 2483.555974][ C0] task:rcu_preempt state:R running task stack:27976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2483.569457][ C0] Call Trace: [ 2483.572723][ C0] [ 2483.575650][ C0] __schedule+0x1190/0x5de0 [ 2483.580158][ C0] ? __lock_acquire+0x622/0x1c90 [ 2483.585099][ C0] ? __pfx___schedule+0x10/0x10 [ 2483.589951][ C0] ? find_held_lock+0x2b/0x80 [ 2483.594620][ C0] ? schedule+0x2d7/0x3a0 [ 2483.598950][ C0] schedule+0xe7/0x3a0 [ 2483.603024][ C0] schedule_timeout+0x123/0x290 [ 2483.607868][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2483.613234][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2483.618522][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2483.624323][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2483.629788][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2483.634559][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2483.639842][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2483.645039][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2483.649973][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2483.654825][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2483.660631][ C0] rcu_gp_kthread+0x26d/0x380 [ 2483.665312][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2483.670503][ C0] ? rcu_is_watching+0x12/0xc0 [ 2483.675270][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2483.680468][ C0] ? __kthread_parkme+0x19e/0x250 [ 2483.685488][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2483.690685][ C0] kthread+0x3c5/0x780 [ 2483.694759][ C0] ? __pfx_kthread+0x10/0x10 [ 2483.699359][ C0] ? rcu_is_watching+0x12/0xc0 [ 2483.704116][ C0] ? __pfx_kthread+0x10/0x10 [ 2483.708711][ C0] ret_from_fork+0x675/0x7d0 [ 2483.713302][ C0] ? __pfx_kthread+0x10/0x10 [ 2483.717891][ C0] ret_from_fork_asm+0x1a/0x30 [ 2483.722662][ C0] [ 2483.725670][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2483.731982][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2483.740912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2483.750958][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2483.756594][ C0] Code: 97 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 95 23 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2483.776199][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 2483.782262][ C0] RAX: 000000000831bb95 RBX: 0000000000000000 RCX: ffffffff8b6692a9 [ 2483.790224][ C0] RDX: 0000000000000000 RSI: ffffffff8db03f46 RDI: ffffffff8bf1ea40 [ 2483.798188][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 2483.806156][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 2483.814118][ C0] R13: ffffffff8e097a00 R14: ffffffff908339d0 R15: 0000000000000000 [ 2483.822080][ C0] FS: 0000000000000000(0000) GS:ffff8881249d6000(0000) knlGS:0000000000000000 [ 2483.831002][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2483.837577][ C0] CR2: 00007f6c0f601000 CR3: 000000007fe68000 CR4: 00000000003526f0 [ 2483.845541][ C0] DR0: 0000000000000001 DR1: 0000000000000000 DR2: 0000000000000000 [ 2483.853518][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2483.861487][ C0] Call Trace: [ 2483.864755][ C0] [ 2483.867673][ C0] default_idle+0x13/0x20 [ 2483.872004][ C0] default_idle_call+0x6c/0xb0 [ 2483.876767][ C0] do_idle+0x38d/0x500 [ 2483.880830][ C0] ? __pfx_do_idle+0x10/0x10 [ 2483.885418][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 2483.890623][ C0] cpu_startup_entry+0x4f/0x60 [ 2483.895381][ C0] rest_init+0x16b/0x2b0 [ 2483.899623][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2483.904902][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2483.910446][ C0] start_kernel+0x3f6/0x4e0 [ 2483.914953][ C0] x86_64_start_reservations+0x18/0x30 [ 2483.920413][ C0] x86_64_start_kernel+0x130/0x190 [ 2483.925525][ C0] common_startup_64+0x13e/0x148 [ 2483.930486][ C0]