last executing test programs: 20m41.7789821s ago: executing program 32 (id=2854): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300), 0x4800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) socket$nl_route(0x10, 0x3, 0x0) timer_gettime(r0, &(0x7f0000000200)) 16m58.155418504s ago: executing program 33 (id=3517): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e334b98a5eb684e3ead540cdf317268f66643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="07000000003b88050e9621cee9d8deeb919ff272c600396b643d", @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x31229140, 0x3, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1a0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) accept4(r2, 0x0, 0x0, 0x80000) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0001) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa6087180, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x0, &(0x7f0000000040)={0x4, 0xe}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x54095}, 0x4000000) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 14m45.765386741s ago: executing program 34 (id=3925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x305500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80043f679a1070f7e433ff3d425f9c00f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c70", 0x58}], 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd7de80c2994f45be}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x50, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(0xffffffffffffffff, 0x5, 0x3) unshare(0x2c060000) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 9m34.528787634s ago: executing program 35 (id=4911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) userfaultfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r3}, 0x18) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r4) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/230, 0xe6) timer_create(0x3, 0x0, &(0x7f00000004c0)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='Lsache=fscache,\x00']) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24}, {0x10000, 0x5000, 0xb, 0xfc, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x6, 0x9, 0x7}, {0xeeee0000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0x0, 0x3, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0, 0x10}, {0xeeef0000, 0x4000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0xff, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2001, 0xcbd}, {}, 0x9df9ffdf, 0x0, 0x2, 0xa8, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 9m33.419702522s ago: executing program 36 (id=4913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) userfaultfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r3) timer_create(0x3, 0x0, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000500)="8f40bf3bd9984cb172d4c76bd6ab5d503b6d7af04884767bc14f628ad5d233ff002be19123e6031fbdcd5027fd105e060d876a41946ffead351953fb7d1a567b2c15e75eb9b7cab189e853dedd1406645f2dc32ee3e850ab422656e17f9187b193402ed4a18e3218a58c12825cb5b44bfe1847d919d02d5a1eb10d000000c726c24a5cf30137daf4c0290d107a2412a42362db791cad08ef92d62849be7f52f9d5210ad23b333044948232e738e1e39bc4b53c82139f6402cdbddfb3153e0919a1b43e23a95374fda4", 0xc9}, {0x0}], 0x2) madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17) keyctl$clear(0x7, r4) 9m11.666029006s ago: executing program 37 (id=4935): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = eventfd(0x80000b) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r2, 0x0, 0x0}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x426c3, 0x100) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 9m11.477008409s ago: executing program 38 (id=4934): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = eventfd(0x80000b) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r2, 0x0, 0x0}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x426c3, 0x100) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 8m56.145111105s ago: executing program 39 (id=4941): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = eventfd(0x80000b) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x426c3, 0x100) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 8m40.9308776s ago: executing program 40 (id=4949): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = eventfd(0x80000b) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r2, 0x0, 0x0}) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x426c3, 0x100) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 8m34.869962955s ago: executing program 41 (id=4953): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = eventfd(0x80000b) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r2, 0x0, 0x0}) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r7, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r7, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) 7m35.296487604s ago: executing program 42 (id=4965): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100"], 0x30}}, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (fail_nth: 2) 7m22.409944056s ago: executing program 43 (id=5029): socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x80000b) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) 7m20.544604845s ago: executing program 0 (id=5037): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000020601020000000000000000000000050500040001000000050001000700800000000780080008400000001105000500020000000d000300686173683a6e6574000000000c00030068611b7229a2676e1ef85f79bed692bf30cf7c943b7765a11a52f97fe0d47cc7f0d787f6e87a5fd5e785751765e027a0c859979ea6e18f9f304e7e358cd54657edef638413542e11e70e5e06cb4fc6b6040ebbd832a2bd9c96861d9af0e3bea8dd12e60cc508c897c4b2c85183c8265966ecb6edf9c343a853116ede500153068d2db68a56ead5327b9a666c8e724d4096ab4917f10550587f47eedd0a25844f0f040b0e0d013400"/271], 0x54}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x24004000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000dc0)=""/4096, 0x0, 0x1000, 0x1, 0x7, 0x10000, @value=r1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getrlimit(0x3, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x75, '\x00', r4, @cgroup_sock_addr=0x3c, r5, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x152f, 0x7}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 7m20.287441771s ago: executing program 44 (id=5038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) connect$nfc_llcp(r4, &(0x7f0000000300)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0xa, "5000ce097ee7fab7e1723e8ad6fd735e47f4acbcf6e7d639f6b539440dc67cef567739aee46d7a6c1da4c00f312f2fa3fd4cecda54a239134b2e602d98f57e", 0x30}, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400"], 0x40}}, 0x0) 7m19.566892439s ago: executing program 0 (id=5040): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000540), &(0x7f0000000700)=0x4) 7m18.361020626s ago: executing program 0 (id=5041): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = getpgid(0xffffffffffffffff) setpriority(0x2, r0, 0xab) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0r4}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f00000000c0)={0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000300)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a40)=""/4123, 0x101b) 7m17.705214998s ago: executing program 0 (id=5043): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 7m17.590105745s ago: executing program 0 (id=5044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r9, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 7m16.468140596s ago: executing program 0 (id=5045): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_ethernet(0xe3, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88480000000000000200b1fb764463d743822f233c134a5148b4a20cbdc6eee31d83d6e7b4f66816c7b7784a36809294f4b55d00c7086176395fe73c8e2028030c2ecf9b97fcfbb2ce9ce1c844340473ed651a27e21d5a67de4cc2b6f01eb1f560d36b7e6120829dde9765425b1c5acb256a491265240b9ec040a70568f46c84776f2724d38ed3fdace4e378f9023912a810545d4081ab5085306d28fa5d9ac2abb4814b93f12d007a89669ac733d7aee3aae040d0a0c1ff97c1c2b54d25dc0800"/216], 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0x9, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a009b9f140000f4ed22b15590a6583a765f003b001000000000fae57dd87d44506cac8301b16beb6268fd9316735daa09aaa9381e698da955", 0x65) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x7}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) 7m16.24848641s ago: executing program 45 (id=5045): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_ethernet(0xe3, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88480000000000000200b1fb764463d743822f233c134a5148b4a20cbdc6eee31d83d6e7b4f66816c7b7784a36809294f4b55d00c7086176395fe73c8e2028030c2ecf9b97fcfbb2ce9ce1c844340473ed651a27e21d5a67de4cc2b6f01eb1f560d36b7e6120829dde9765425b1c5acb256a491265240b9ec040a70568f46c84776f2724d38ed3fdace4e378f9023912a810545d4081ab5085306d28fa5d9ac2abb4814b93f12d007a89669ac733d7aee3aae040d0a0c1ff97c1c2b54d25dc0800"/216], 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0x9, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a009b9f140000f4ed22b15590a6583a765f003b001000000000fae57dd87d44506cac8301b16beb6268fd9316735daa09aaa9381e698da955", 0x65) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x7}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) 5m17.870386342s ago: executing program 8 (id=5385): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000100c0"]) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60f4a300ffff3a00fe8000000000000000000000000000bb0000000000000000000000000000000004009078000000066cf6cd53020033fffe800000000000000000000000000031fe8000000000dfff00000000000000aa290000000000000013d87159da0a7f6bb93044749465caab78ef2cbb376013e00a98e1cfab000ccdadb394eb2704f3be352f9965902e7f53a0"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) 5m16.074940994s ago: executing program 8 (id=5390): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m15.199442505s ago: executing program 8 (id=5392): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) 5m12.954906896s ago: executing program 7 (id=5400): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = eventfd(0x80000b) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r2, 0x0, 0x0}) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r7, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r7, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 5m11.581938308s ago: executing program 7 (id=5403): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m11.386923782s ago: executing program 8 (id=5405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f00000002c0)='./file0\x00') 5m11.349097065s ago: executing program 8 (id=5406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 5m10.970288282s ago: executing program 8 (id=5408): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000020601020000000000000000000000050500040001000000050001000700800000000780080008400000001105000500020000000d000300686173683a6e6574000000000c00030068611b7229a2676e1ef85f79bed692bf30cf7c943b7765a11a52f97fe0d47cc7f0d787f6e87a5fd5e785751765e027a0c859979ea6e18f9f304e7e358cd54657edef638413542e11e70e5e06cb4fc6b6040ebbd832a2bd9c96861d9af0e3bea8dd12e60cc508c897c4b2c85183c8265966ecb6edf9c343a853116ede500153068d2db68a56ead5327b9a666c8e724d4096ab4917f10550587f47eedd0a25844f0f040b0e0d013400"/271], 0x54}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x24004000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@fwd={0xa}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x5, 0x9}]}, @fwd={0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xffffffff}}, @struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x7, 0x5, 0x1}, {0xa, 0x0, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x61, 0x30]}}, &(0x7f0000000dc0)=""/4096, 0xb9, 0x1000, 0x1, 0x7, 0x10000, @value=r1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getrlimit(0x3, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x75, '\x00', r4, @cgroup_sock_addr=0x3c, r5, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x152f, 0x7}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 5m10.821576098s ago: executing program 46 (id=5408): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000020601020000000000000000000000050500040001000000050001000700800000000780080008400000001105000500020000000d000300686173683a6e6574000000000c00030068611b7229a2676e1ef85f79bed692bf30cf7c943b7765a11a52f97fe0d47cc7f0d787f6e87a5fd5e785751765e027a0c859979ea6e18f9f304e7e358cd54657edef638413542e11e70e5e06cb4fc6b6040ebbd832a2bd9c96861d9af0e3bea8dd12e60cc508c897c4b2c85183c8265966ecb6edf9c343a853116ede500153068d2db68a56ead5327b9a666c8e724d4096ab4917f10550587f47eedd0a25844f0f040b0e0d013400"/271], 0x54}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x24004000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@fwd={0xa}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x5, 0x9}]}, @fwd={0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xffffffff}}, @struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x7, 0x5, 0x1}, {0xa, 0x0, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x61, 0x30]}}, &(0x7f0000000dc0)=""/4096, 0xb9, 0x1000, 0x1, 0x7, 0x10000, @value=r1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getrlimit(0x3, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x75, '\x00', r4, @cgroup_sock_addr=0x3c, r5, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x152f, 0x7}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 5m10.705160936s ago: executing program 7 (id=5410): r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x9, 0x0, 0x0, 0x10}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00007dc000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000400010000000800030009006f"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xffffffffffffff9e) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) accept4(r6, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000300)=0x80, 0x800) 5m8.208998041s ago: executing program 7 (id=5418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 5m8.135158649s ago: executing program 7 (id=5419): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m7.120182517s ago: executing program 7 (id=5421): r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000a00)=0x1, 0x0, 0x4) unshare(0x6a040000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000000400)=0xb8e7) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7d77f40d61244045629010203010902120001000000000904cc00008b0a2e00"], 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000006c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, &(0x7f0000000700)="f9cb18f4294ced64db13ff0dfb38630be03342d2a007e10e24a01ab152a29e268805ad803264ade137fbb5041c6402924e10feb963c5f49d79a7b60f8a4f0825cb9bb4749ac8a0cf3b051011fcf4f27ee0bca4c253bcfad6ce89b233b8ade591a9dce300b63154de65fd11ec856ca61d1ef3be5bb64bb4b0ad6c29515c6524938d1a4e362a9bc0220a908b9003a9d271a4d19dd9ca7c58750b15c50bb677eaa2aa34b95a90d280fbc46882a491aafcfbdb4628b2f3a6c80787f63de5c3a48ba4a5dbbae6b9d19d8b653a46bd5e3f113e3664533fb4be3c7c2c957f6ec9cbc60837e34033e4fb3314db33", 0xea, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="3aa662416bceac26e7eb82690bae7b9ad658a47acf8b6dce6d0284de53b302c8e1055d969280c88ec34b0fd33301430354c0675d5a369c0f82d901cde2f19cf4ed1918e59d093274e2fc38540ca27d0fd58d00c5704da771a0308b89362f8cc558c0626e70707860d7f7993cb17163634fea93e522e19684a49faf0bbdbe64680dbc6a2bbb614c3b78a416941c97eda54e86e21d8ea27f34642f89ad557f38fbbee794b56bc36fd6bde6464dd34df7824c14bf521b2be7b3b6115b152d34c77032634cec91efef8685747e2f145c608afba1fcb415693aeab0cdb70b9f4e8a1609545a03") getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x1, 0x4, 0x0, 0xfffff325, 0x10c86039]}, &(0x7f00000000c0)=0x54) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0xb, 0x50, 0x9e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3c, 0x9}, [@selector_unit={0x9, 0x24, 0x5, 0x3, 0x1, "2e59a33b"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x0, "8a85b7ca"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x8, 0xa, 0x2, 0x1], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x3, 0x7, 0xfc00, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x81, 0x7, 0x0, "efa6602e8892efa9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x7f, "", "f542"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x63, 0x2, 0x0, 0x7f, "", "1bf0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x9, 0xd, {0x7, 0x25, 0x1, 0x2, 0xe, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x8, 0xe, {0x7, 0x25, 0x1, 0x3, 0x4, 0xe}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x3, 0x3, 0x7, 0x40, 0x6f}, 0x194, &(0x7f0000000280)={0x5, 0xf, 0x194, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x7, 0x8}, @generic={0xcb, 0x10, 0x3, "2d48b0e561f0e45b448333ec1116534144837dddff8036766f78bb3b77c2026dca1c82e9ced281674adb507cd09c4cdc9e0ab7ffc081eb47ecb752745160d25b8edfec239d5c2f558927c427e1aae67c777089010e4a55f5a6f2756bab10bbb50296af6445009e7178a95eb81a8534b70d8189b31471bcc70c9392de86e9ff7e0a41c03e2ee586523312a72ab44e5610b1613b99b2e59d5578764141de0daf4b3bffa427a8644f66126f6012d71548de0c654f9b8419dc6c99a8b7639f15fcc04da87bd5358e3270"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x6a}, @generic={0xb0, 0x10, 0x4, "d37e36d9878bd30a5f38b7bbef0e08d616a19ce1a9f1567ab3707263387accb44a3adbfcef7138aabbe7e7c29d6f5e4df70905aea7b60ae5c3c4a1d1932e0132b9dd8a1507d79330d1c5dd51562fbc2fc06d1664375f3b82ff393f92af2b85571be8837c7d5e5690f08543dbd7b0c49704a470d6d71f7889c2cb5cf651d0d196137bcddd82bfe38c4b4c2ed7ef52855a572a156895f439f4acd390f637334a23da493501606dffab148a00074b"}]}, 0x3, [{0xd7, &(0x7f0000000440)=ANY=[@ANYBLOB="d7034201a7d23ea8b9972c16e4b945bb80b093225efe5abf7fb1f89932bedbee4e3ff5183a485ffc69698464214803bacc1c9c9e82037abf955636f689e2304eefcd2a6da0bbfbc3e86a6213b19ab607e294088b595e0fddcf55772aa55e7eebce0b260eaae1f44c401638f5cf1eb91a109e2a5fb2e438855e78ee08004cd24e7d6098b134debb1736a66ce6ea26ac451ce613a0d6a7c736ec1b8a2a4a5a51e9407f86dd716639058c2696e39a7d6514788ae3429d797cd9da8497a00f759af0a51b64ca7a8b9e41d6e734c033f447caf0b5862a1863fb"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180c}}, {0xf3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]}]}) 5m6.928668644s ago: executing program 47 (id=5421): r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000a00)=0x1, 0x0, 0x4) unshare(0x6a040000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000000400)=0xb8e7) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7d77f40d61244045629010203010902120001000000000904cc00008b0a2e00"], 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000006c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, &(0x7f0000000700)="f9cb18f4294ced64db13ff0dfb38630be03342d2a007e10e24a01ab152a29e268805ad803264ade137fbb5041c6402924e10feb963c5f49d79a7b60f8a4f0825cb9bb4749ac8a0cf3b051011fcf4f27ee0bca4c253bcfad6ce89b233b8ade591a9dce300b63154de65fd11ec856ca61d1ef3be5bb64bb4b0ad6c29515c6524938d1a4e362a9bc0220a908b9003a9d271a4d19dd9ca7c58750b15c50bb677eaa2aa34b95a90d280fbc46882a491aafcfbdb4628b2f3a6c80787f63de5c3a48ba4a5dbbae6b9d19d8b653a46bd5e3f113e3664533fb4be3c7c2c957f6ec9cbc60837e34033e4fb3314db33", 0xea, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="3aa662416bceac26e7eb82690bae7b9ad658a47acf8b6dce6d0284de53b302c8e1055d969280c88ec34b0fd33301430354c0675d5a369c0f82d901cde2f19cf4ed1918e59d093274e2fc38540ca27d0fd58d00c5704da771a0308b89362f8cc558c0626e70707860d7f7993cb17163634fea93e522e19684a49faf0bbdbe64680dbc6a2bbb614c3b78a416941c97eda54e86e21d8ea27f34642f89ad557f38fbbee794b56bc36fd6bde6464dd34df7824c14bf521b2be7b3b6115b152d34c77032634cec91efef8685747e2f145c608afba1fcb415693aeab0cdb70b9f4e8a1609545a03") getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x1, 0x4, 0x0, 0xfffff325, 0x10c86039]}, &(0x7f00000000c0)=0x54) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0xb, 0x50, 0x9e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3c, 0x9}, [@selector_unit={0x9, 0x24, 0x5, 0x3, 0x1, "2e59a33b"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x0, "8a85b7ca"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x8, 0xa, 0x2, 0x1], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x3, 0x7, 0xfc00, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x81, 0x7, 0x0, "efa6602e8892efa9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x7f, "", "f542"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x63, 0x2, 0x0, 0x7f, "", "1bf0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x9, 0xd, {0x7, 0x25, 0x1, 0x2, 0xe, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x8, 0xe, {0x7, 0x25, 0x1, 0x3, 0x4, 0xe}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x3, 0x3, 0x7, 0x40, 0x6f}, 0x194, &(0x7f0000000280)={0x5, 0xf, 0x194, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x7, 0x8}, @generic={0xcb, 0x10, 0x3, "2d48b0e561f0e45b448333ec1116534144837dddff8036766f78bb3b77c2026dca1c82e9ced281674adb507cd09c4cdc9e0ab7ffc081eb47ecb752745160d25b8edfec239d5c2f558927c427e1aae67c777089010e4a55f5a6f2756bab10bbb50296af6445009e7178a95eb81a8534b70d8189b31471bcc70c9392de86e9ff7e0a41c03e2ee586523312a72ab44e5610b1613b99b2e59d5578764141de0daf4b3bffa427a8644f66126f6012d71548de0c654f9b8419dc6c99a8b7639f15fcc04da87bd5358e3270"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x6a}, @generic={0xb0, 0x10, 0x4, "d37e36d9878bd30a5f38b7bbef0e08d616a19ce1a9f1567ab3707263387accb44a3adbfcef7138aabbe7e7c29d6f5e4df70905aea7b60ae5c3c4a1d1932e0132b9dd8a1507d79330d1c5dd51562fbc2fc06d1664375f3b82ff393f92af2b85571be8837c7d5e5690f08543dbd7b0c49704a470d6d71f7889c2cb5cf651d0d196137bcddd82bfe38c4b4c2ed7ef52855a572a156895f439f4acd390f637334a23da493501606dffab148a00074b"}]}, 0x3, [{0xd7, &(0x7f0000000440)=ANY=[@ANYBLOB="d7034201a7d23ea8b9972c16e4b945bb80b093225efe5abf7fb1f89932bedbee4e3ff5183a485ffc69698464214803bacc1c9c9e82037abf955636f689e2304eefcd2a6da0bbfbc3e86a6213b19ab607e294088b595e0fddcf55772aa55e7eebce0b260eaae1f44c401638f5cf1eb91a109e2a5fb2e438855e78ee08004cd24e7d6098b134debb1736a66ce6ea26ac451ce613a0d6a7c736ec1b8a2a4a5a51e9407f86dd716639058c2696e39a7d6514788ae3429d797cd9da8497a00f759af0a51b64ca7a8b9e41d6e734c033f447caf0b5862a1863fb"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180c}}, {0xf3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]}]}) 3m33.462497512s ago: executing program 2 (id=5687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="20005e80040001000800060014cf00000800070021060000080005003a0000f8"], 0x3c}}, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x92200, 0x104, 0x10}, 0x18) write$P9_RGETLOCK(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1f000000370200020500000000000000f8ffffffffffffff", @ANYRES32=r0, @ANYBLOB="0100048853e3f152eff8177e5fd70ac15c1851cf2e02fe861d5849a1a16174481602e69362c3c7851faff5b98603f04c998c3d1560c627fcf9f14e94ef81fe6361e8170157e613f85bc28690c1c20851acf968ae38cf4b8a47ce1713822c88d17176c72a0eac6284dfa952783eefce6771be44a478421a6e14d1c60e46f864867882f908814569944e52788a7f9d6cfc1ba678328a2eb4a70ec5d70a"], 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x6, 0x8f, {{0x2b, 0x4, 0x1, 0x10, 0xac, 0x66, 0x0, 0x2b, 0x2f, 0x0, @multicast2, @local, {[@end, @lsrr={0x83, 0x13, 0x30, [@multicast2, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x4c, 0x3, [{0x2, 0x9, "676f9694992383"}, {0x1, 0xb, "40666c02d7e0d53293"}, {0x2, 0x5, "a466fc"}, {0x2, 0x5, "4d1d54"}, {0x1, 0x11, "14e39bb5162db6ad58e1e1a30645e4"}, {0x0, 0x5, "d9f5d4"}, {0x7, 0x12, "f88d9a210c8de52297bcafd887c87481"}]}, @timestamp={0x44, 0x8, 0x2c, 0x0, 0x2, [0x0]}, @end, @cipso={0x86, 0x20, 0x0, [{0x6, 0xc, "4c60c9bbb9a1255e3b30"}, {0x6, 0xb, "b02c68a123ee513f65"}, {0x1, 0x3, "b1"}]}, @timestamp={0x44, 0xc, 0xf9, 0x0, 0x7, [0x1, 0x0]}]}}}}}) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000340)="1d64eba05c2165eeba7cf0fae216e675a12bc3df901deaa4b5e00b26804445a0fe1cb452a5a1f118b6e1c84ef0f2fb625cbda49ca368c4d665a9ad015051b24f1c1d39582b2d4b4451fb5b34df6d066757b0edbb4257b9b79602b44be7d7d7bd1cb838898858eb0cfe45459bfd06c6c0f10171b92223f569aaada5e39d315397ffb2c521a0e927272f109de86d9a623fcd41965a62c666cb3338b544268438b2c2e019ad533bf2d53b0c50bd02cb885e054b50779315ba63bd52978143ad62cc868a500a82efc6dc49aa91286533287ff3a675185e051ee317658df18d8c23", 0xdf}, {&(0x7f0000000440)="220f2478c055337ab9cd7d1947113a26982d27aa48eac24f59bfd28dfb13d2ab3999e9c59364ba55e41648abebfd2d5a2ef70504faa6f197d05a265d28d2b65be5ebc288bc337a9df02dd60b8b27c2eb1bdbfb30f39dadf63c498974e3c5f2336a40ff0195632fe619ba641b9682647d31f5f7f0444e092f65c62d0af51810c929e859ed0cd2dc280ddd8f5bf8aeab4007b429e39e9dae94010860e4b10b8f7ddc", 0xa1}, {&(0x7f0000000500)="feaea7e1cc6e6cf01544e9efabdca0ffc132e88c28efb89c9d60c5ea9adffb0327db13493b9bd788470038e28f0f67da3fe321d4998ed26392b05aff3d9e0c8296b8c71f3aae829b936db3219d49654575565e0cb3e3d55f9bd7b7c3f1ff602c1d326643ed5f6203534d9c0004a6eececb38942349203f3b5aeb897d410741f9705631bbb4e038548603941714cde8fb3e1ee358c1e131ee231e875b0fd605cadb05b5dedf474d208f", 0xa9}, {&(0x7f00000005c0)="50ec8d02513492924ca17290ea38a202849dbfea53ac2ef05ada", 0x1a}], 0x4, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}], 0x20}}], 0x1, 0x2400c104) 3m32.375645581s ago: executing program 2 (id=5690): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = getpgid(0xffffffffffffffff) setpriority(0x2, r0, 0xab) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0r4}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f00000000c0)={0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000300)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a40)=""/4123, 0x101b) 3m30.444665614s ago: executing program 2 (id=5696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace(0x11, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m29.375124406s ago: executing program 2 (id=5698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x200bc98, 0x10100, 0x3, 0x80000210}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000440)) 3m28.098160131s ago: executing program 2 (id=5700): r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x12c6, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x0, 0x800220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xdddd1000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timerfd_create(0x7, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000040)=0x33ec09fc, 0x34) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x4a, &(0x7f0000000040), 0x4) 3m27.461417311s ago: executing program 2 (id=5705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) userfaultfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r3) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/230, 0xe6) timer_create(0x3, 0x0, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000500)="8f40bf3bd9984cb172d4c76bd6ab5d503b6d7af04884767bc14f628ad5d233ff002be19123e6031fbdcd5027fd105e060d876a41946ffead351953fb7d1a567b2c15e75eb9b7cab189e853dedd1406645f2dc32ee3e850ab422656e17f9187b193402ed4a18e3218a58c12825cb5b44bfe1847d919d02d5a1eb10d000000c726c24a5cf30137daf4c0290d107a2412a42362db791cad08ef92d62849be7f52f9d5210ad23b333044948232e738e1e39bc4b53c82139f6402cdbddfb3153e0919a1b43e23a95374fda4", 0xc9}, {0x0}], 0x2) madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17) keyctl$clear(0x7, r4) 3m27.337751574s ago: executing program 48 (id=5705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) userfaultfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r3) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/230, 0xe6) timer_create(0x3, 0x0, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000500)="8f40bf3bd9984cb172d4c76bd6ab5d503b6d7af04884767bc14f628ad5d233ff002be19123e6031fbdcd5027fd105e060d876a41946ffead351953fb7d1a567b2c15e75eb9b7cab189e853dedd1406645f2dc32ee3e850ab422656e17f9187b193402ed4a18e3218a58c12825cb5b44bfe1847d919d02d5a1eb10d000000c726c24a5cf30137daf4c0290d107a2412a42362db791cad08ef92d62849be7f52f9d5210ad23b333044948232e738e1e39bc4b53c82139f6402cdbddfb3153e0919a1b43e23a95374fda4", 0xc9}, {0x0}], 0x2) madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17) keyctl$clear(0x7, r4) 1m50.375959254s ago: executing program 1 (id=5981): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = getpgid(0xffffffffffffffff) setpriority(0x2, r0, 0xab) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0r4}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f00000000c0)={0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000300)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a40)=""/4123, 0x101b) 1m49.839478652s ago: executing program 1 (id=5982): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = eventfd(0x80000b) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r2, 0x0, 0x0}) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r7, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r7, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) unshare(0x64000600) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 1m48.709695791s ago: executing program 9 (id=5987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x404c041) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r5, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) waitid(0x2, r2, 0x0, 0x8, &(0x7f0000002240)) r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) 1m47.725206386s ago: executing program 9 (id=5988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3902, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r1, 0x5453, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 1m47.424136279s ago: executing program 9 (id=5990): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r4, 0x1, {0x1, 0x1, 0x4}, 0x2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xd1f, 0xf0, 0x1}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c::=\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5}) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="100fffffff96f87910114418fab3a12ffeb65a21"]) 1m47.236633159s ago: executing program 1 (id=5991): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00032ff0c8a200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000009558b1f8c4d72322ab4ffd64142c2c6017d22d652c0cb9010000000000002904f931e7b89e3dd2989d2dce78374be872011f6290767740630debf5a76dd9867249a2c360dc25f912f1047696bbe70ad7ee45c256993c7f718f6f8eee37d22f794e2ea6ee800a636ad0103ec5ed060a228db6e1caff8de72d92a97e0b1e34c59614f2471b2500000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008500000075000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x8d, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 1m45.899715871s ago: executing program 9 (id=5994): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.615943897s ago: executing program 1 (id=5996): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea0000000000000000", 0x7f) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) poll(0x0, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8004, &(0x7f00000005c0)=ANY=[]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x30}}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000007d40)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x404c084) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x6f6) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m43.373566924s ago: executing program 1 (id=6000): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r4, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r4, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) write$binfmt_script(r2, &(0x7f00000402c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) unshare(0x20020000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x16, 0x1}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x2b, 0x9, 0x20, 0x1b, 0x8, 0x2, 0x1, 0x0, 0x0, 0x20, 0x800}}, 0x50) unshare(0x200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$packet(r0, &(0x7f00000001c0)={0x11, 0xf7, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1m43.373143173s ago: executing program 9 (id=6001): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) 1m41.220363231s ago: executing program 9 (id=6004): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = eventfd(0x80000b) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r1, 0x0, 0x0}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 1m41.136043578s ago: executing program 1 (id=6005): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = eventfd(0x80000b) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r1, 0x0, 0x0}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 1m40.486522649s ago: executing program 4 (id=6006): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00032ff0c8a200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000009558b1f8c4d72322ab4ffd64142c2c6017d22d652c0cb9010000000000002904f931e7b89e3dd2989d2dce78374be872011f6290767740630debf5a76dd9867249a2c360dc25f912f1047696bbe70ad7ee45c256993c7f718f6f8eee37d22f794e2ea6ee800a636ad0103ec5ed060a228db6e1caff8de72d92a97e0b1e34c59614f2471b2500000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008500000075000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x8d, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 1m36.024152359s ago: executing program 4 (id=6008): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 1m28.388220486s ago: executing program 4 (id=6011): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010ac05620200000000000109022400080000500309040002010300000009210000500122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380002, @remote, 0xfffffffd}, 0x1c) 1m26.197437323s ago: executing program 49 (id=6004): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = eventfd(0x80000b) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r1, 0x0, 0x0}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 1m26.105041911s ago: executing program 50 (id=6005): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='\x00', 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = eventfd(0x80000b) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r1, 0x0, 0x0}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 1m24.427017008s ago: executing program 4 (id=6014): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) lsm_list_modules(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r6, 0x1000, 0x7fffffff}, 0x10) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) pwritev2(r7, &(0x7f0000000cc0)=[{0x0}], 0x1, 0x1001, 0xc, 0xe) write$evdev(r7, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000180)=0x7) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x203, 0x401, 0xffff5141}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 1m24.2921146s ago: executing program 6 (id=6015): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d70006"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r0, r0, 0x0, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="d598539da2"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x2, [@datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x0, 0x0, 0x8}], 'I'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d5"}]}}, 0x0, 0x42}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x20}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) 1m19.576183203s ago: executing program 4 (id=6018): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 1m17.534552179s ago: executing program 6 (id=6019): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = getpgid(0xffffffffffffffff) setpriority(0x2, r0, 0xab) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0r4}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f00000000c0)={0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000300)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a40)=""/4123, 0x101b) 1m17.407577817s ago: executing program 4 (id=6020): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="190000000400000004000000020000c0000000008c3ccfec1605978b5f50d06ec41b96759ce8dc6b08392da3bda8d4548633510add8119101ddcffa2a7ad8f974bce5c054c9b70fdb4db70f8682a61db3e3723a1e8be7303d7b3e65a31518cf114c34afb646b384f3cce134f53b03e3b7c4af839d963f04ddef34658d7e7e092198b3022506504edd3ebbc854fc82eebd463513890f33e8776ed04c28a3ee8fbaf445d3cc07d2f", @ANYBLOB="83dc232107fb702581ef6135e6b366d83385203449d5dcd89fdd6f018889d29b7644a6e94bb184e88d9ec9e2b9d1ce9139b27b967fc81205cacab17692766777286e229e9e108991b818383005f84b490c1d73787e6595459269381e7eb196c9e6eb15108ab9e5fb3c7a16eb59072f3f416d087663a47e47e5589d9913f5df334e77d0729ca8dbcba2dee0f1de388f9ddfc1f07494e53affa5cc0c6d7073224e840be0", @ANYBLOB="11a37e475f725122cf7e8dd33c321c00"/35, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000580)=""/4096, 0x1000) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}, {&(0x7f0000000480)="36a9b0ca90588ac0f75ffd0de3ba71a7360c7477890e2a513de10b9fdbd5007aa2f0", 0x22}], 0x2}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x44040) 1m9.896654135s ago: executing program 6 (id=6022): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1m9.483841485s ago: executing program 6 (id=6024): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000540)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x4d, 0x0, @opaque="ae886c98ed573a466f8e24e90e0aed14d4003dc886a5635791b1b88e086cb15b9dda905635dc54a83a1bbd2cc6218c7b26b1293d3a3d7898924d0dbe533ce260f84c5b18aa"}}}}}}, 0x0) (fail_nth: 4) 1m8.682089806s ago: executing program 6 (id=6025): syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000e00000059078ac1414ff0a0101008902000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090841c4ce54e591a91c606780000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800849, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xab, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x81, 0x50, 0x6e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xdc, 0x0, "9a", "a60864"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0xa, 0xf7, "d9e63a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2, 0x40, "11"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x83, 0x67, {0x7, 0x25, 0x1, 0x83, 0x9b, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x3, 0x0, "", 'C'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0x8, 0xeb, "", '['}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0xd, {0x7, 0x25, 0x1, 0x82, 0x1, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x8, 0xc, 0xef, 0x10, 0xb}, 0xe8, &(0x7f0000000180)={0x5, 0xf, 0xe8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "70b2cfcbefc02ed978ea5f6c4c6e58f5"}, @generic={0xd, 0x10, 0x2, "ef60aa7e035942ab88e3"}, @generic={0xa9, 0x10, 0xb, "e55bc6bc8a9ebddddc4fcf1b496c15bba44f6f7851f64fd569c49848d15fa6aa64d7f40380f3749f3527746a77ff897c0d908a65f60c5696f9a55d91a8f86e173403cae3e627e81575319e94aa346031984eca6ebea09b83f531535d991d15475eedbc86e14860092c450b2169d290326fcec428674d553f9bf505d26f78fb1a697a6cdbeb0dba8db32a92b99048f8a9117a6abc3093dae9b9f27f7440d424864697b9506ace"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x4, 0xd3, 0x61, 0x10, 0xa}, @wireless={0xb, 0x10, 0x1, 0x2, 0x35, 0xfb, 0x5, 0x2, 0xf}, @ptm_cap={0x3}]}, 0x6, [{0x54, &(0x7f0000000280)=@string={0x54, 0x3, "7f644e915d6d8f83061fc2c8db773b4ed3c1d7ea01e18c3f5135fab7e4649f84342ecc7633c312866037bc6f53f76a70a03c035d92054cb25e5ce7a24214926135479efec3631e4db91ff772b2c023796ced"}}, {0x18, &(0x7f0000000300)=@string={0x18, 0x3, "e1ff89fc4d7d7db57e31a58a2891064c377de9159e0f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x415}}, {0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "7c70cee6ec4fd2c8656396a3f87d502b9cc3105e85c6d92c9d286724aebbd674d86187c0ac2ee01cab6ed6d6c400f66604c6c142e7a716ed68a757e4831fb0380d1dc9d665cde441ae5f67ad87bd2f76f6d67c108f0820739f9e8099aaf72b32f5e98e86ef577c113059775f841103548ab82e00e0390d12302e6af2d85db2fd814fae7acb1008c22ef41b3af4b20e0adcb1b467cd0ee71be385829cd748833e4b7a0766ade946dd254473a7b5f1a1ba18ca20592330d2f7798593536f740e7867509766ee5650ac1c281fa3d09507ee145bf9cd"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x404}}, {0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000700)=r7) 1m7.990846633s ago: executing program 6 (id=6026): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c00000400458000020180c701dc8094010980900138801400af00fe8000000000000000000000000000bb08003f00ffffffffd5a3df40eeb7d415ff473c34cb2b6dd0c29840acd6dfa86df7b02e3023989945a5fa39f0b13ef7ade41ca39d380d95ad5db58bee6284df857440af8b4e1a364157fb5a754a76c4cfda397861fc0e7030a9aa82f362671bf539cf54a2f3bc9ddf78f58fee10032113f0b392bb6d6d83b641a7156ee5217b24c5f253c18f1827539889051d553c5f217f338038c112fc2b339147ebba41b3561b30734948ffe3bdbda9aa3d50c5a45221d1d8f1a36d4e09036761fa396a4c3e0452acfa640e3092ca778418ba65c448b02a5b9cb6c23d9ebcaadf9a8bcc3eed11", @ANYBLOB="2a004f800c00d70006"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r0, r0, 0x0, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="d598539da2"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x20}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) 1m2.098739582s ago: executing program 51 (id=6020): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="190000000400000004000000020000c0000000008c3ccfec1605978b5f50d06ec41b96759ce8dc6b08392da3bda8d4548633510add8119101ddcffa2a7ad8f974bce5c054c9b70fdb4db70f8682a61db3e3723a1e8be7303d7b3e65a31518cf114c34afb646b384f3cce134f53b03e3b7c4af839d963f04ddef34658d7e7e092198b3022506504edd3ebbc854fc82eebd463513890f33e8776ed04c28a3ee8fbaf445d3cc07d2f", @ANYBLOB="83dc232107fb702581ef6135e6b366d83385203449d5dcd89fdd6f018889d29b7644a6e94bb184e88d9ec9e2b9d1ce9139b27b967fc81205cacab17692766777286e229e9e108991b818383005f84b490c1d73787e6595459269381e7eb196c9e6eb15108ab9e5fb3c7a16eb59072f3f416d087663a47e47e5589d9913f5df334e77d0729ca8dbcba2dee0f1de388f9ddfc1f07494e53affa5cc0c6d7073224e840be0", @ANYBLOB="11a37e475f725122cf7e8dd33c321c00"/35, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000580)=""/4096, 0x1000) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}, {&(0x7f0000000480)="36a9b0ca90588ac0f75ffd0de3ba71a7360c7477890e2a513de10b9fdbd5007aa2f0", 0x22}], 0x2}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x44040) 52.709070669s ago: executing program 52 (id=6026): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d70006"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r0, r0, 0x0, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="d598539da2"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x20}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) 39.752054895s ago: executing program 5 (id=6033): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fstat(r2, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 37.782076088s ago: executing program 5 (id=6035): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x3fffffe, 0x208, 0x0, 0x60}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0xf0bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x5081}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa}]}}}]}, 0x4c}}, 0x20000080) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 26.80295449s ago: executing program 5 (id=6037): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x804844, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) lseek(r2, 0x9, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x804844, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) (async) 26.540183405s ago: executing program 5 (id=6038): connect$unix(0xffffffffffffffff, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0xb, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x98f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b00"], 0x30}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 24.479693388s ago: executing program 3 (id=6039): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 24.368164273s ago: executing program 3 (id=6040): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f0000000640)='/', 0x1, 0xe) copy_file_range(r0, 0x0, r0, 0x0, 0xff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201cc9d990b372b378e22a50c120000fa8e01024326e39b02a507000000000000000000"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x1) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x8) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x123a40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x4c}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x57, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x6, 0x10, 0xe, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, '?'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3ec, 0x2, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd4, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8d, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x5, 0xb}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x9, 0x91, 0x10, 0x2}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x438}}, {0x14, &(0x7f0000000400)=@string={0x14, 0x3, "29516e4c4b41104141617151afc09632d9ca"}}, {0x4, &(0x7f0000000440)=@string={0x4, 0x3, "c9a3"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x429}}, {0x98, &(0x7f0000000500)=@string={0x98, 0x3, "7df5a0d4f4477d51daff91dfcaf9f1a82c7ed6bf6229994b657585b87996899f9c0e28fccebe9ae658edae920b37ab8b12eecbd2d72a757e42acd91e9feeab7d3da52addb12a376425d012e5c2729848542684d4a9e23a96c509d628d567e3cd84b8eb152481eb749c0de327dcb6a545e6af9956dc2d58db621549f0224691e38b79ab8366587ff8ad1f24980e07326884adde1a540d"}}, {0x91, &(0x7f0000000680)=@string={0x91, 0x3, "bcd51d9b8eac6ebb1c25af9de4b64bd76780e64e2e79d3970ff2b11621498f22dc430dd57f81c172431a10b1eec7da34a84456360992c66ac612d1c82e4d7793d93913d9d12d880712e5b3ceda151c6b5a7ebab839ef000b6f47c12eec16976b658cb438965d3d73c2d462531575caf8d66263d0d7801a267aa1d374134f0d63cd06dc880a32b026ceaed42a62a5d2"}}, {0x57, &(0x7f00000005c0)=@string={0x57, 0x3, "593cf7072af62c4bd17f1b2c05e809ae0ed4413bd282a3fa425e1f8364ad46d11c1cd34d05c6e6d90217f2ba87a565548c06c51a290d3767170bf8b9214a6d78c98850796a777c6348fdbe7781ff4a7c5136e50666"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x4ff}}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000140)="3a08ba7a1677ebed3078bce920300e755b8503f675b541584916cfe771a062f9e478d50a7cae485ad2391fc35f53d91587653364d5ae0b6a5b4cf16fd25c2c280787a6dcd1c696ce9a6059f6698d93ab477e9bf2376d4648b73a542180fddbb2acf91fc703d8f5ba1425a0cf153e0d7be0eeec435844c0604cc97eb11acb45c0430c4a0b7a0a3bbdad3d1218b55e67b617a8df194afb939e1a1919084ce9cbc3b1c4ad1e0f3daa76f88e8fb9bf872bfb124b96160e197d6ff263aa8c82b34bbec98214912000c784c9e79c30d9ccdf2c95fd33643c27118f188983a7f8ef7100c95a6d7bce8af5d4d0", 0xe9, 0x840, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) 21.947215594s ago: executing program 5 (id=6041): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$lock(r0, 0x10e99fa29a90bff0, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x10000000000007}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x8}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r9 = eventfd2(0x65c, 0x80000) r10 = eventfd2(0x4001, 0x800) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b000)=@deltfilter={0x2d20, 0x2d, 0x109, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xfff1, 0xffe0}, {0x9, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4f8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1a}, @TCA_ROUTE4_ACT={0x4ac, 0x6, [@m_connmark={0x118, 0x14, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x7, 0x0, 0x1, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1e7d, 0x8, 0x5, 0xc, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0xfffffff8, 0x0, 0x1, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xef3, 0x2, 0x1, 0x3, 0x1ff}, 0x70}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x1, 0xc0, 0xb4}, 0x93c4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4724, 0x1, 0x10000002, 0x6, 0x5}, 0xc9}}]}, {0x40, 0x6, "0769c690d81ecbeb8733c5dbc6a540a58aab9e9767ea0d16865032f37bd878ccb07a1d72f92a1efad83e27a7d89499a7554229f23031789890ae00b6"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_csum={0x158, 0xf, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x5, 0xfffffff6, 0x1}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x0, 0x4}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xe, 0x7, 0x0, 0x5}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0xfffff801, 0x2, 0xe, 0x3}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x7, 0x7, 0x10}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x0, 0x0, 0xe8bd}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x8, 0xa0, 0x3}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc3ad, 0xf4, 0x5, 0x7, 0xffff}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x40, 0x7, 0x74, 0x1}, 0x1a}}]}, {0x2e, 0x6, "a5e6c5b3e20473fb176562afe84ccf6fa20a3255d3b5414426fc330adbb7802e5c5daeb3c6bc8021459c"}, {0xc, 0x7, {0x6a677a28b83ce90d}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x14c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x628, 0x200, 0x8, 0x5, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xc, 0x3, '\x91\'\\$%(-\x00'}]}, {0xe4, 0x6, "2d1b685c09ef0cb9f4d4be24db15a9ff891d4902f47d2abc8919f9d1fc7d0c119589d4b357f45f339acd10791ddd18d7a9b4618634e02a554235c323c591c4cbe3ba5ff251467fc8020cc798b95d6296d7fb12152b1f8de567a188946d05d4754078f4896542bb624052d152fa964aaad0ea67a308ed5fd3908d05415007905ec8f8654015aca9197d227a3c335b9f7c1b8477b6fdfa75ba6a29c7a3ab20bd46ee3f3fbf7dd81b96e9441cd667eb0bf43937a6dc534f5510b944f966ddcecdec977a6868f4efff94b9caf8b1a11aa0a14447e0389c303aa34b153345aefd7f72"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x26, 0x6, "1c9f763f8214dab6a03a4f20ee07bb23a3b7b3e3cb18935d6016d3fcc6e209c2d262"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x78, 0x8, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xba48}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x88}]}, {0x13, 0x6, "93cea7b8ced9156b2149b25a460fdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd}, @TCA_ROUTE4_TO={0x8, 0x2, 0x100}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xad}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x37}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc6}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9b}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0xf}}, @TCA_ROUTE4_IIF={0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x312}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa}, @TCA_FLOW_MODE={0x8}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x27a4, 0x2, [@TCA_CGROUP_ACT={0x210, 0x1, [@m_vlan={0x100, 0xe, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc4, 0x6, "c3aa9d60d53b64ba04c5d1f1386ae62f1a730a4da0e5a6a61acdc52720e82405503875cf8124f909ae801132e9cc9e761fdbcbc6052861b412eb39305533f5052e3b559c5b432fdc62a2cfcafc4f7d4ea744cc7ebb84f485a027d78cf5575950cabd9e060f4efbcf5af84d01ae7f8c8f003be98bc65f4bf0f34f1df2ac7a11da702e37335c0ae7423a68cc6dc684d41458f35a8c54825c6550b9cb6e97caca1f95030acedaa5a5da3330ac7744f00d286e55b915ee9b473cafff34091b999a31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x10c, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "08d324c60082c321d640d1d85dd42b6b"}]}, {0xb6, 0x6, "ba671becbf07e9b813aec40915350b1c422e8476953bcb673754773e63c3239af39c6aca5a8c76dbeb657142ce59b56e935d61949580ac3b1e7dc61a6d6589a4ecf4705bebee4ccb3261f4322d66007824ed2aa18fe49d62159ff64cd92def4aeb0721ad0e5d37fcc7dc7de4c64f13614e7830203bf7e9e199af564fbe7a00f74271ce18d140294d68b75ff7172f13a3143252dab090a274d585b4c75f973b2023b56115c6c9cf88e08c53d308fee95b83df"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x418, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa7c}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffffc, 0x1, 0x1, 0x9, 0x3, 0x3, 0xea, 0x77fe51c6, 0x4, 0x53d, 0x7fff, 0x40000008, 0x8, 0x2, 0x601, 0x4, 0x8000000, 0x4, 0x8, 0x40000000, 0x4bd, 0xffffff8d, 0x400, 0x0, 0x7fffffff, 0x5, 0x8, 0x6, 0xfffff5ba, 0x2, 0x5, 0x5, 0xe47, 0x8, 0x7, 0x7, 0x9, 0xd85d, 0x818, 0xd3, 0x401, 0xffff8000, 0x9, 0x1, 0xa6, 0x219, 0xb, 0x9, 0x9b6, 0x8, 0x6, 0xfffffffd, 0x800, 0x5, 0x3, 0x7, 0x80000000, 0x0, 0x8, 0x0, 0x4, 0x1, 0x9, 0x3, 0xf, 0x200, 0x0, 0x9, 0x3, 0x4, 0x1, 0xb, 0x4, 0x4, 0x3, 0x3, 0x504, 0x3, 0x7fffffff, 0x101, 0x5, 0x2, 0xfffffff7, 0x2, 0x1, 0x5a12, 0x1, 0xffff, 0x7, 0x7fff, 0xc9c5, 0x1, 0x3, 0x52f, 0x7, 0x800, 0x8, 0xbdf, 0xb5d, 0x9c16, 0x1, 0x0, 0x17, 0x6, 0x101, 0x9, 0x9, 0xa6, 0x4, 0x80000, 0xd, 0x200, 0x7, 0x8, 0xa092, 0xfffffff8, 0x3, 0xfffffffa, 0x4, 0xe, 0x8, 0x0, 0x7, 0x92, 0x6, 0x0, 0x81, 0x80000001, 0xfffffff8, 0x8001, 0x8, 0xff, 0x10000, 0x2, 0x8, 0xfffffffc, 0x3, 0xff, 0x93a0, 0x7, 0x3, 0x17, 0x9, 0x2, 0xfde7, 0x6, 0x8, 0x3d6, 0x4, 0x9cdf, 0x3, 0x80000000, 0xb, 0x1, 0x7fffffff, 0x8, 0x3, 0x1, 0xea8, 0x8, 0x1ff, 0x0, 0x1, 0x1, 0xfffffff0, 0xa, 0x7fff, 0x0, 0x3, 0x5d, 0x5, 0x4, 0x50000000, 0x2, 0x2, 0x611f5059, 0x8, 0x10001, 0xd, 0x6b, 0x8, 0x0, 0x813a, 0x2, 0x789d58e, 0x9, 0x0, 0x11, 0x5, 0x4, 0x6, 0x2, 0x3, 0xe, 0x800, 0x6, 0xd11, 0x59fb, 0x2, 0x8, 0xa1, 0xfff, 0x200, 0x80, 0x4, 0x9, 0xffffffff, 0x0, 0xfffffff7, 0x7, 0x9, 0x3, 0x9, 0x8000, 0x1, 0xfffffffa, 0x6, 0xffffff80, 0x3, 0x0, 0x8, 0x2, 0x12, 0xd77, 0x1, 0x1800, 0x1, 0x2, 0x1, 0x8, 0x9, 0xbb0, 0x4, 0x910f, 0x1, 0x8, 0x6, 0xb, 0x3, 0x2, 0x7fff, 0x5, 0xff, 0x3, 0xffffff81, 0x3, 0x4, 0x5, 0x7, 0x4, 0xead0, 0x6, 0x1, 0x8, 0x81]}]}, @TCA_CGROUP_ACT={0x29c, 0x1, [@m_skbmod={0xd4, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0xa7, 0x6, "e6ef053c67ee8374f72762cfb5d0efcf76a5ae7848a40459fe0d58216fff5ef81edce310afc04eb94e6ae5f35a4475b3f560fe62a10cad0492a78af1feac688b2b4c881e736eceac097579d51613afa1af103a9fd7f6501d0ddb688c9adcdc46c9d055d1ef9b318bec6c813c2486164003d45dd4bd238c5fef89e761bd9d0a1c1dc44c290a58c505854e91495b027093e9fa86d4bedefe2badfd386806b08cad48f2ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x108, 0x4, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xafe}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x1, 0xa, 0xfff, 0x4}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x9, 0xfffffffffffffffd, 0x724e, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x72, 0x6, "9dfc2163a6bfc8d0777f6fbe0de2e068ac792abab9cf17597b9cb56fb6a43b5448ab6f7d2bb932c717bf688a6b2ab031200d67ca64a3e63b83ffb859b05b2aa8db24f0f7e967ae7bf6ecf2278ac782d3a1ef490baffce795e72bed725ad07242312258281a6d37bc399fce454bf8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xbc, 0x14, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x6523, 0x5, 0x8, 0x10000}, {0x2, 0x20, 0x1, 0x9}, {0x5, 0x9, 0xfa, 0x7ff}, {0x7, 0x1, 0x1c, 0x6}, {0xfffd, 0x8, 0x4, 0xff}, {0x5, 0x9, 0x9, 0x47ca}, {0x1, 0x74, 0x7, 0x6}, {0xa0ac, 0x8e, 0x9, 0x80}, {0x4, 0x0, 0x0, 0x2}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xb8, 0x0, 0x6, 0x80000000}, {0xd, 0x61, 0x2, 0x2}]}]}, {0x2b, 0x6, "e1d78009208f1ce52a6ba2895fe67edebc58991ba38c6b01b3608e7ae049f9ac1cb73265498d9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}, @TCA_CGROUP_ACT={0x1edc, 0x1, [@m_tunnel_key={0x1068, 0x1a, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x7ff, 0x8, 0x5, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_police={0x960, 0x16, 0x0, 0x0, {{0xb}, {0x89c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x7, 0x7, 0x8, {0x0, 0x0, 0x1ff, 0x40, 0x14, 0x6}, {0x0, 0x2, 0x3781, 0x3, 0x0, 0x5}, 0x7, 0xabe, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x81, 0x8, 0x1, 0x1d, 0x7, 0x1, 0x2, 0x4, 0x4, 0x3, 0x5, 0x5, 0x8, 0x9, 0x3, 0x3d138c00, 0x3, 0x6, 0xf, 0x68433d1a, 0x3, 0x40, 0x100, 0x4, 0x8, 0x7, 0x1, 0x8, 0xc3d5, 0xc, 0x5f, 0x3e, 0x6, 0xd06e, 0x3, 0x9, 0x3, 0x2, 0x5552, 0x6, 0xcd2, 0x1, 0x0, 0x1, 0x8, 0x5, 0x7fff, 0xffff, 0x0, 0xe, 0x8000, 0xff, 0x4, 0x9, 0xfffffff9, 0x6, 0x2, 0x8, 0x4, 0x0, 0x7, 0x2, 0x4, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x14, 0x7, 0x8, 0xfffffffc, 0xd, 0x7fff, 0xfffffffe, 0x5, 0x3c9, 0x1a40, 0x8000, 0x1ff, 0x3ff, 0x0, 0x3, 0x80000000, 0x4, 0x5e, 0x3ff, 0xfffffb3e, 0xa, 0x40, 0x97f, 0x10001, 0x8, 0xd580, 0x9, 0x0, 0x9, 0x0, 0xfffffffe, 0xffffffff, 0x81, 0xce, 0x80000001, 0x8, 0x6, 0x7f, 0x4, 0x0, 0x4, 0x2, 0xfffffff8, 0x1000, 0x5, 0x7, 0x0, 0xfff, 0x8, 0x10000, 0x40, 0x1, 0x8, 0x1, 0x2, 0x0, 0x3f5, 0xf, 0xff, 0x79d, 0x8, 0x6, 0x9, 0x0, 0x10000, 0x4, 0x7b, 0x4a, 0x3, 0x3, 0x101, 0x4, 0x10001, 0x7fffffff, 0x3, 0x10000000, 0xffff, 0xaa1, 0x7, 0x0, 0x1, 0x0, 0x49a000, 0xd, 0x2, 0x1, 0x0, 0x0, 0x1ff, 0xfffffffe, 0x7, 0xffff, 0x39a, 0x7, 0xb, 0x4, 0x3, 0x3, 0xffffff81, 0x0, 0x1, 0x5, 0x9, 0x6, 0x3, 0xfffffffb, 0x7fff, 0x80000000, 0x43, 0x6, 0xdd9, 0x401, 0x5, 0x7, 0xf382, 0xc481, 0xfffff800, 0x8, 0x1, 0x101, 0x8, 0x1ff, 0x5453, 0x9a, 0x7f, 0x1, 0x8, 0x1, 0x99, 0x0, 0x4, 0xae, 0x63723b48, 0x2392, 0x5, 0x5, 0x100, 0x8, 0x2, 0x3a, 0x6, 0xd, 0xffffffff, 0xb, 0x6, 0x1, 0x7fffffff, 0x240000, 0x2, 0x10001, 0x67f, 0xffffffff, 0x6, 0x5, 0x4, 0x9, 0x7, 0x10, 0x9, 0x80000000, 0x800, 0x0, 0xfffffbea, 0x1, 0x4, 0x978, 0x0, 0x8, 0x7f, 0x7, 0x0, 0x9, 0x1, 0xe6, 0x4, 0xbb6f, 0x8, 0x5, 0x9, 0xffffffff, 0x3, 0x3, 0x4, 0x0, 0x5, 0xe1, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x2, 0x6a5049b2, 0x7fffffff, 0x7, {0x9, 0x0, 0x2, 0xe9b, 0x1}, {0xe, 0x2, 0x8001, 0x2, 0x1ff, 0x10000}, 0x2, 0x1, 0xa}}, @TCA_POLICE_RATE={0x404, 0x2, [0xdcde, 0x10, 0x1, 0x4, 0x0, 0x7, 0x2, 0xa1, 0x0, 0x8, 0xff, 0xe, 0x7fe00, 0xfff, 0x8, 0x0, 0x0, 0x4, 0x81, 0x0, 0x5, 0xe, 0x45, 0x400, 0xf, 0x20000, 0xff, 0x9, 0x7f, 0x8, 0x3cb99e75, 0x1cf, 0x6, 0x0, 0x2, 0x200, 0x7fff, 0xfffffff8, 0x148c, 0x7f, 0xfffffff0, 0x6, 0x1, 0x10000, 0xa, 0x65, 0x2, 0x5, 0x7a7, 0x6, 0x5, 0x0, 0x40, 0x8, 0x6, 0x6, 0x8, 0x53, 0x8001, 0x462a7b6f, 0x9, 0x3, 0x0, 0x2, 0xffff, 0x4, 0x10c0, 0x575, 0x8001, 0xef, 0x8, 0x2, 0x9, 0x8, 0xf1d, 0x31, 0x7, 0xfff, 0xfffffffe, 0x800, 0x5, 0x0, 0x0, 0x6, 0xc4c3, 0xb15, 0x7ff, 0x9, 0x2, 0x0, 0x800, 0x1, 0x9, 0x84f, 0x9, 0x0, 0x81, 0x1, 0x8, 0x2, 0x8, 0x9, 0x10, 0x9, 0x2, 0x3, 0x2, 0x4, 0x1ff, 0x2, 0xd74, 0x9, 0x3, 0x9, 0x9, 0x7fffffff, 0x7, 0x8, 0x15, 0x3, 0x7, 0x2d, 0x1, 0x1, 0x1, 0x723, 0x5, 0x0, 0x5, 0xf444, 0x29e, 0x3, 0x8, 0x3, 0x81, 0x7f, 0x6, 0x653, 0x4, 0x45b1, 0x90000, 0x9, 0x400, 0xda50, 0x303, 0x2, 0x5, 0xffffffff, 0x8, 0x1, 0xffff, 0x0, 0x0, 0x4, 0x180000, 0x4, 0x8, 0xb, 0xec, 0x8, 0x3, 0x3, 0x6, 0x7fffffff, 0xf, 0x101, 0x0, 0x7fff, 0x6, 0x2, 0xaf, 0x3, 0x3, 0x7, 0x0, 0x400, 0x2e, 0x80000000, 0x5, 0x3, 0x4, 0x6, 0x9, 0x8001, 0x49dd, 0x7, 0x5, 0x2, 0x1ff, 0x3, 0x5700000, 0xf750, 0x5, 0x0, 0x40, 0x1, 0xffffffff, 0x3, 0xffff7719, 0x6, 0x6, 0xb051, 0x8, 0xfffffffe, 0xfffffff8, 0x6, 0x0, 0xfffffffb, 0x4, 0x8c46, 0x1, 0xeb, 0x2, 0x2, 0xb, 0x100, 0x2, 0x7, 0xb9, 0x9, 0x6c63d2c7, 0xb, 0x1, 0xf, 0x9, 0x400000, 0xff, 0x400, 0x80, 0xffffffff, 0x10001, 0x5, 0x8, 0x0, 0x0, 0x5, 0x800, 0xfffff800, 0x7ff, 0xfe, 0x5, 0xefa, 0x0, 0x0, 0x4, 0xca1, 0x7, 0x1, 0x1, 0x0, 0xeef0, 0xfffffffc, 0x40, 0x6, 0xfffffffb, 0xe]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}]]}, {0x9a, 0x6, "66823c9a3d8e08b292116fab6bb864856a98c8075fe37c49bcba6031f913ccec4b15f213a58234ed956b63ca6999898b777b14121d948ded34c890a8fbab3eb30a3d82018e4b1f32e48c4685b91b6918069da0dc3336579f1ea968af699cba11694c246d301e418cca7824314a4e5728d9d54bede4d6a02bdfe032d8b86698bd9f62e15c7d2b548af3c4979cee25e19aacf25735ab5c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xac, 0xa, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x676}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}]}, {0x2f, 0x6, "27aa059f55bfbffd963f9a6d4cfe53023b58495714a9a2d7dbb7c4495cc74ff5ddc29afd281b67a89f58ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x12c, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x94, 0x8, 0x5, 0xfff, 0xfff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0xbe, 0x6, "96b09bc9d77b7c209db42868dde0cdcbdd919514765f411faabb0bf5fbf6bf97dcc29c05c119a6a921a284e0b7ebd6021f0c5135c9a314b9e20fefdeee7e5526f597f2840d3f3caeaa02dd4ee61c91054971f53b8f77fba21c24144c4d1a8d9ffb11a7cd4d6008ef8974d26346af86c0093349cd5b1e360cba3c670ace3654ffbf588bc91462db6ff69a56ee0ac0c4fbd8507707ac7eb895ef127f8b3bb63afaa046034bf6fbf4551e65de5e936ef9c4fbaddb0f3832acf96c13"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1c8, 0x15, 0x0, 0x0, {{0xa}, {0xa0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x9c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x170, 0x2, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x5, 0xfffffffd, 0xfffffff8}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x624280cde8781af3, 0x3, 0x8157}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xe0, 0x6, "9dc8c29470a450eaa14d8977f8ae7e022d6bb79da95a160ede658802ff6abaf22a9dbc0cf255a3df74934c3551c9c1dabe5c7a5e4e9722f72fed22855f4cb3a36064c720c8061d29c1e66b58eda2d2a08b102834b9c01ee9a8bb2db19542b6074708bd10fdd4930d883e0e8afd1f4576b55b71024f66c65be7a9cf213d7a176fa9a3c79a65f22ed63ac3900981661dbd6f62cc12921907954f23d62952cd102744341fe07674b2f51b86a2e5b6d25a2640e3da59b9abd60aa79bd11851452464956a300bf6d4938b0dc69f6a8c52fac6d879df94936cb048042fecb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x70, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x29}}, @TCA_CHAIN={0x8, 0xb, 0xd77}, @TCA_CHAIN={0x8, 0xb, 0x53}]}, 0x2d20}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r9, 0x7, 0x2, r10}) ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21.228183796s ago: executing program 3 (id=6042): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r1, 0x8926, &(0x7f0000001580)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20.308677402s ago: executing program 3 (id=6043): r0 = semget$private(0x0, 0x7, 0x180) semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}], 0x7, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$inet6(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="04", 0x1}], 0x1}}], 0x1, 0x804) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000a40)={0x4}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r9, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) pwritev2(r2, &(0x7f0000000a00)=[{&(0x7f0000000800)="70070b909ab5bd9059ad71e95289b127d27ce1ebb3e149584a2914313b9b5a3d94f16210dfb51b6b2abfd4a04cae5b93290bc0c3bbce15ffefa1405bdf10c1cdb42dda159f2628e29a06a023611c5ecbef2d58f44a26c749bd2c31579903b317593433d75f73dfa77718512d210e4bc3bb94db4387e5c7f64d5a5f67257615f9c6027a0e6601a68a6a2a218040e9c5757141303ea377", 0x96}, {&(0x7f00000006c0)="7b3daeba5714504bc906081e4d0adcff629a0cfefb08a9d5d999e5169f296363d38507da7513beba", 0x28}, {&(0x7f00000008c0)="e7c9d6cc8f96893dd7ecae4cd065aab8191145c04383ac9d788dabeaa8deb84b152449182ea35914df17db0ff75b4989ba1b9f6d76efa0ef6abb3dc17de93a46cae365847db22b59b4ca06d004f6317a2f799f0550c64899ff8ba82f3b026f41afc6a378351bcde272d502d0833c302094c8da5f159e6a10318f5329b39d30ba2498e030acfca990f977057e295beede6a8d0442f6be70b936eb56b6", 0x9c}, {&(0x7f0000000980)="297851957bf2ef3c732c1178e009556d1fed1f30c7c150ca716a995da9786f20b350246127c942f40d7d83a6562fa82e3f4a9a31905604160537259782a48ac6ccaa2b591c5c43cc88c8045c6ce0c7c649564bd4ad4f814b1fb848d82262c5121a2f2a01c5d1782970", 0x69}], 0x4, 0x5b, 0x9, 0x8) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x5b, {0x5b, 0x31, "4e5ee6a7c8035ca88ca93e5b7ca3759eb23a4162ae6b95d7deb7c7a2592a48919db7f38d09e5c8448aaecb8683d91398fc10eb07c26410911f1de600e23622b0f399fb57f4b99784afdfe6a2b7c0ce80e88d5bcd23f2921cbd"}}, &(0x7f0000000080)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "de4cd637539422f6c37008419c506011e92b8ab57cbb59fead1627480530f2867c7cffcc9336fe7b4aafe8d9b168a27b935ec5e8719e9c97247ba77710c551db756bff2b5985c520c57014a6c905ab6dd7bbc89a8e1e1bdbad0b0f2ff6086274416d674562ab6f84eba4337461ecae6a1cd58a7537a7e7417029dbc58a5bc1dc58033d48b799cc54dca25b6131917bf076dfab37899e7ade7a22544e657ce2ebbef251cf8a7d45af4fb76eea6308c4f2449435f9160002eaba87ae8db844f0a4e849622e8775cb39356be573ee2811b5bbf5f8f0f82be48f3998648de189d244b4d94224f20d4a9c24432a80ebe19c36f974ddcabe824ce78916"}}, &(0x7f00000001c0)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x6b, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x55, 0x8, 0x98, 0x6, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3b, 0x7, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0xf, 0x1, 0x40, 0x0, 0x5, [0xff000f]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x0, 0x3, 0xe0, "d80c9d7b", "f26187f1"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf4, 0x0, 0xc8, 0x0, 0xf9, 0x10, 0x7f}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x3, 0x14, "9c6d1555eb97b316b3c2a07b9d9ec678e68c4a47"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x2, 0x4, [0x8800]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "00e9"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "30ed"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001d40)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 19.794464579s ago: executing program 5 (id=6044): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0xa, 0x100, 0x7, {0x49, 0x1000, 0x4}}) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) recvfrom$netrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x101, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@default, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000ecff4000621400000008000300c577669652327b398502a502ad4be2", @ANYRES32=r5, @ANYBLOB="0800050006000000"], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000080000002c00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008884) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r11 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) r12 = socket$kcm(0x2, 0x1, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "ce4f017535a718f7", "35332cf0f2a4df68b01d56d8c49cc8850b4288241e7ca69f4504b8063158aecb", "1b841891", "41d7a09f6e577b6e"}, 0x38) setsockopt$sock_attach_bpf(r12, 0x1, 0x4a, &(0x7f0000000040), 0x4) gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) 15.589747005s ago: executing program 3 (id=6045): syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x10281, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000440)={0x2, 0x1, 0x1, 0x0, 0x7}) 15.339951051s ago: executing program 3 (id=6046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000180)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x7, 0x40}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x22, @void}, 0x1e) 4.525417249s ago: executing program 53 (id=6044): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0xa, 0x100, 0x7, {0x49, 0x1000, 0x4}}) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) recvfrom$netrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x101, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@default, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000ecff4000621400000008000300c577669652327b398502a502ad4be2", @ANYRES32=r5, @ANYBLOB="0800050006000000"], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000080000002c00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008884) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r11 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) r12 = socket$kcm(0x2, 0x1, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "ce4f017535a718f7", "35332cf0f2a4df68b01d56d8c49cc8850b4288241e7ca69f4504b8063158aecb", "1b841891", "41d7a09f6e577b6e"}, 0x38) setsockopt$sock_attach_bpf(r12, 0x1, 0x4a, &(0x7f0000000040), 0x4) gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) 0s ago: executing program 54 (id=6046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000180)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x7, 0x40}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x22, @void}, 0x1e) kernel console output (not intermixed with test programs): 520708][T25234] usb 2-1: USB disconnect, device number 70 [ 2131.659664][T18435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2131.670412][T18435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2131.680238][T18435] bond0 (unregistering): Released all slaves [ 2131.701131][T28310] batman_adv: batadv0: Adding interface: macvtap1 [ 2131.707530][T28310] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.734911][T28310] batman_adv: batadv0: Interface activated: macvtap1 [ 2131.848639][T18435] tipc: Left network mode [ 2132.068653][T18435] hsr_slave_0: left promiscuous mode [ 2132.074680][T18435] hsr_slave_1: left promiscuous mode [ 2132.091329][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2132.109382][T18435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2132.117445][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2132.125106][T18435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2132.145971][T18435] veth1_macvtap: left promiscuous mode [ 2132.151512][T18435] veth0_macvtap: left promiscuous mode [ 2132.157039][T18435] veth1_vlan: left promiscuous mode [ 2132.162423][T18435] ªªªªª2: left promiscuous mode [ 2132.189912][T17214] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2132.344500][T17214] usb 7-1: Using ep0 maxpacket: 32 [ 2132.431332][T17214] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2132.448279][T17214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.473804][T17214] usb 7-1: config 0 descriptor?? [ 2132.484097][T17214] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2132.769949][T14810] Bluetooth: hci2: command tx timeout [ 2132.848708][T18435] team0 (unregistering): Port device team_slave_1 removed [ 2132.885952][T18435] team0 (unregistering): Port device team_slave_0 removed [ 2133.196457][T17214] gspca_nw80x: reg_r err -110 [ 2133.201215][T17214] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 2133.884247][T28270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2133.903731][T28270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2133.958466][T28270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2133.988904][T28270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2134.084795][T28270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.123052][T28270] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.851955][T14810] Bluetooth: hci2: command tx timeout [ 2135.065254][T18435] IPVS: stop unused estimator thread 0... [ 2135.071031][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.078717][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2135.246374][T18423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.253541][T18423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2135.292310][T28270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2135.303804][T28270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2135.435061][T28270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2135.603739][T28270] veth0_vlan: entered promiscuous mode [ 2135.614042][T28270] veth1_vlan: entered promiscuous mode [ 2135.635977][T28270] veth0_macvtap: entered promiscuous mode [ 2135.646778][T28270] veth1_macvtap: entered promiscuous mode [ 2135.660896][T28270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.673659][T28270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2135.685911][T18423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.695289][T18423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.705715][T18423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.713143][ T5897] usb 7-1: USB disconnect, device number 47 [ 2135.717489][T18423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.919316][T18423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2135.927313][T18423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2135.951293][T26395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2135.959461][T26395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.350549][T28368] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5706'. [ 2136.487763][T28370] net_ratelimit: 12 callbacks suppressed [ 2136.487781][T28370] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2136.854536][T28369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2136.894008][T28367] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5721'. [ 2136.902950][T28367] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5721'. [ 2136.922800][T14810] Bluetooth: hci2: command tx timeout [ 2137.855191][ T30] audit: type=1400 audit(3911870392.822:1835): avc: denied { module_request } for pid=28386 comm="syz.4.5730" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2137.877750][T17214] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2137.919057][ T30] audit: type=1400 audit(3911870392.822:1836): avc: denied { read write } for pid=28388 comm="syz.9.5731" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2137.943666][ T30] audit: type=1400 audit(3911870392.822:1837): avc: denied { open } for pid=28388 comm="syz.9.5731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2137.968734][ T30] audit: type=1400 audit(3911870392.822:1838): avc: denied { ioctl } for pid=28388 comm="syz.9.5731" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2137.987640][T28393] syzkaller0: entered promiscuous mode [ 2137.996085][ T30] audit: type=1400 audit(3911870392.882:1839): avc: denied { read } for pid=28386 comm="syz.4.5730" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2137.999703][T28393] syzkaller0: entered allmulticast mode [ 2138.027544][ T30] audit: type=1400 audit(3911870392.882:1840): avc: denied { open } for pid=28386 comm="syz.4.5730" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.058680][ T30] audit: type=1400 audit(3911870392.882:1841): avc: denied { sys_module } for pid=28386 comm="syz.4.5730" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2138.092100][ T30] audit: type=1400 audit(3911870392.922:1842): avc: denied { create } for pid=28386 comm="syz.4.5730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2138.112961][T17214] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2138.121189][ T9595] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2138.130077][T17214] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.142478][T17214] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2138.154107][ T30] audit: type=1400 audit(3911870392.922:1843): avc: denied { write } for pid=28386 comm="syz.4.5730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2138.175992][ T30] audit: type=1400 audit(3911870392.972:1844): avc: denied { read } for pid=28386 comm="syz.4.5730" path="socket:[134101]" dev="sockfs" ino=134101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2138.211532][T17214] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2138.220655][T17214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.228832][T17214] usb 2-1: Product: syz [ 2138.233764][T17214] usb 2-1: Manufacturer: syz [ 2138.238685][T17214] usb 2-1: SerialNumber: syz [ 2138.290018][ T9595] usb 10-1: Using ep0 maxpacket: 32 [ 2138.296879][ T9595] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2138.310127][ T9595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.327137][ T9595] usb 10-1: config 0 descriptor?? [ 2138.337238][ T9595] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2138.494330][T17214] usb 2-1: USB disconnect, device number 71 [ 2139.469879][T17261] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2139.641430][T17261] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2139.654887][T17261] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2139.691294][T17261] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2139.700428][T17261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.719383][T17261] usb 7-1: Product: syz [ 2139.724518][T17261] usb 7-1: Manufacturer: syz [ 2139.729119][T17261] usb 7-1: SerialNumber: syz [ 2139.738964][T17261] usb 7-1: config 0 descriptor?? [ 2139.752987][T17261] usb 7-1: ucan: probing device on interface #0 [ 2139.759237][T17261] usb 7-1: ucan: invalid EP count (0) [ 2139.764982][T17261] usb 7-1: ucan: probe failed; try to update the device firmware [ 2139.908722][T28426] FAULT_INJECTION: forcing a failure. [ 2139.908722][T28426] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.921363][T28426] CPU: 1 UID: 0 PID: 28426 Comm: syz.4.5739 Not tainted syzkaller #0 PREEMPT(full) [ 2139.921379][T28426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2139.921386][T28426] Call Trace: [ 2139.921391][T28426] [ 2139.921395][T28426] dump_stack_lvl+0x16c/0x1f0 [ 2139.921410][T28426] should_fail_ex+0x512/0x640 [ 2139.921424][T28426] ? __kmalloc_noprof+0xca/0x880 [ 2139.921441][T28426] should_failslab+0xc2/0x120 [ 2139.921455][T28426] __kmalloc_noprof+0xdd/0x880 [ 2139.921470][T28426] ? __fget_files+0x20e/0x3c0 [ 2139.921481][T28426] ? mark_held_locks+0x49/0x80 [ 2139.921490][T28426] ? io_cache_alloc_new+0x45/0xf0 [ 2139.921505][T28426] ? io_cache_alloc_new+0x45/0xf0 [ 2139.921516][T28426] io_cache_alloc_new+0x45/0xf0 [ 2139.921529][T28426] io_msg_alloc_async+0x1c3/0x3a0 [ 2139.921541][T28426] io_bind_prep+0x1a3/0x260 [ 2139.921556][T28426] ? io_queue_async+0x72/0x130 [ 2139.921572][T28426] io_submit_sqes+0x855/0x2710 [ 2139.921597][T28426] __do_sys_io_uring_enter+0xd69/0x1630 [ 2139.921616][T28426] ? __fget_files+0x20e/0x3c0 [ 2139.921627][T28426] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2139.921645][T28426] ? fput+0x9b/0xd0 [ 2139.921659][T28426] ? ksys_write+0x1ac/0x250 [ 2139.921669][T28426] ? __pfx_ksys_write+0x10/0x10 [ 2139.921685][T28426] do_syscall_64+0xcd/0xfa0 [ 2139.921697][T28426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.921708][T28426] RIP: 0033:0x7fd9d8b8f749 [ 2139.921718][T28426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2139.921729][T28426] RSP: 002b:00007fd9d995a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.921740][T28426] RAX: ffffffffffffffda RBX: 00007fd9d8de5fa0 RCX: 00007fd9d8b8f749 [ 2139.921748][T28426] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 2139.921754][T28426] RBP: 00007fd9d995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.921761][T28426] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 2139.921768][T28426] R13: 00007fd9d8de6038 R14: 00007fd9d8de5fa0 R15: 00007ffc7e72cef8 [ 2139.921784][T28426] [ 2140.213324][ T9586] usb 7-1: USB disconnect, device number 48 [ 2140.269882][T17214] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2140.404298][T17214] usb 6-1: device descriptor read/64, error -71 [ 2140.720252][T17214] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 2140.880446][T17214] usb 6-1: device descriptor read/64, error -71 [ 2140.995353][T17978] usb 10-1: USB disconnect, device number 14 [ 2141.005554][T17214] usb usb6-port1: attempt power cycle [ 2141.402425][T17214] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 2141.487963][T28454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2141.512516][T28454] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2141.838846][T17214] usb 6-1: device descriptor read/8, error -71 [ 2141.960243][ T9586] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2142.080023][T17214] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 2142.147141][T17214] usb 6-1: device descriptor read/8, error -71 [ 2142.156158][ T9586] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2142.165349][ T9586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.185453][ T9586] usb 2-1: config 0 descriptor?? [ 2142.199250][ T9586] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2142.290252][T17214] usb usb6-port1: unable to enumerate USB device [ 2142.810219][ T9586] gspca_cpia1: usb_control_msg 03, error -32 [ 2142.816720][ T9586] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 2142.950361][T17214] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2143.181023][T17214] usb 5-1: Using ep0 maxpacket: 16 [ 2143.188006][T17214] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 2143.197237][T17214] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.207611][T17214] usb 5-1: config 8 has no interface number 0 [ 2143.214726][T17214] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2143.226643][T17214] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2143.237832][T17214] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2143.253386][T17214] usb 5-1: config 8 interface 206 has no altsetting 0 [ 2143.262758][T17214] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 2143.272080][T17214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.280149][T17214] usb 5-1: Product: syz [ 2143.284383][T17214] usb 5-1: Manufacturer: syz [ 2143.288984][T17214] usb 5-1: SerialNumber: syz [ 2143.323784][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 2143.323797][ T30] audit: type=1400 audit(3911870398.292:1913): avc: denied { name_bind } for pid=28459 comm="syz.6.5748" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2143.356799][ T30] audit: type=1400 audit(3911870398.292:1914): avc: denied { node_bind } for pid=28459 comm="syz.6.5748" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2143.432599][T28472] netlink: 'syz.5.5751': attribute type 29 has an invalid length. [ 2143.449031][T28472] netlink: 'syz.5.5751': attribute type 29 has an invalid length. [ 2143.457858][ T30] audit: type=1400 audit(3911870398.422:1915): avc: denied { create } for pid=28471 comm="syz.5.5751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2143.479511][ T30] audit: type=1400 audit(3911870398.442:1916): avc: denied { write } for pid=28471 comm="syz.5.5751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2143.507162][ T30] audit: type=1400 audit(3911870398.452:1917): avc: denied { unmount } for pid=27044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2143.528999][T17214] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 2143.538987][T17214] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 2143.549593][T17214] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 2143.562012][T17214] usb 5-1: USB disconnect, device number 126 [ 2143.573497][T17214] garmin_gps 5-1:8.206: device disconnected [ 2143.582177][ T30] audit: type=1400 audit(3911870398.552:1918): avc: denied { nlmsg_write } for pid=28471 comm="syz.5.5751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2143.604646][T28472] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5751'. [ 2143.640250][ T9586] cpia1 2-1:0.0: only firmware version 1 is supported (got: 138) [ 2143.924011][T25234] usb 2-1: USB disconnect, device number 72 [ 2144.006858][ T30] audit: type=1400 audit(3911870398.972:1919): avc: denied { prog_run } for pid=28473 comm="syz.9.5752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2145.929541][ T30] audit: type=1400 audit(3911870400.892:1920): avc: denied { mounton } for pid=28499 comm="syz.4.5759" path="/proc/43/task" dev="proc" ino=136425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2146.066574][T28504] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5759'. [ 2146.077499][ T30] audit: type=1400 audit(3911870401.032:1921): avc: denied { write } for pid=28499 comm="syz.4.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2146.118663][ T30] audit: type=1400 audit(3911870401.032:1922): avc: denied { nlmsg_read } for pid=28499 comm="syz.4.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2146.139294][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.593616][T28500] netlink: 'syz.4.5759': attribute type 29 has an invalid length. [ 2146.613856][T28502] netlink: 'syz.4.5759': attribute type 29 has an invalid length. [ 2147.149889][T17214] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 2147.349923][T17214] usb 5-1: device descriptor read/64, error -71 [ 2147.609985][T17214] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 2147.761731][T17214] usb 5-1: device descriptor read/64, error -71 [ 2147.880184][T17214] usb usb5-port1: attempt power cycle [ 2148.240858][T17214] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 2148.339920][T17214] usb 5-1: device descriptor read/8, error -71 [ 2148.610339][T17214] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 2148.680231][T17214] usb 5-1: device descriptor read/8, error -71 [ 2148.810146][T17214] usb usb5-port1: unable to enumerate USB device [ 2150.100227][ T30] audit: type=1400 audit(3911870405.042:1923): avc: denied { create } for pid=28510 comm="syz.4.5765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2150.520761][ T30] audit: type=1400 audit(3911870405.422:1924): avc: denied { create } for pid=28510 comm="syz.4.5765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2150.613464][ T30] audit: type=1400 audit(3911870405.422:1925): avc: denied { write } for pid=28510 comm="syz.4.5765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2154.209858][ T30] audit: type=1400 audit(3911870409.172:1926): avc: denied { append } for pid=28514 comm="syz.5.5762" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.392159][T28517] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2154.635610][T28516] netlink: zone id is out of range [ 2154.645075][T28516] netlink: zone id is out of range [ 2154.651360][T28516] netlink: zone id is out of range [ 2154.653062][T28517] batadv_slave_0: entered promiscuous mode [ 2154.690677][T28517] batman_adv: batadv0: Adding interface: macvtap1 [ 2154.697316][T28517] batman_adv: batadv0: Interface activated: macvtap1 [ 2154.802048][T28516] netlink: zone id is out of range [ 2154.810086][T28516] netlink: zone id is out of range [ 2154.815219][T28516] netlink: zone id is out of range [ 2154.822083][T28516] netlink: zone id is out of range [ 2154.827200][T28516] netlink: zone id is out of range [ 2154.832716][T28516] netlink: zone id is out of range [ 2154.837823][T28516] netlink: zone id is out of range [ 2155.646480][T28541] serio: Serial port ptm1 [ 2155.655223][T23270] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.369352][T28545] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2156.747706][T28548] serio: Serial port ptm0 [ 2157.125648][T23270] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.149968][ T30] audit: type=1400 audit(3911870411.332:1927): avc: denied { mount } for pid=28540 comm="syz.5.5770" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2157.309554][ T30] audit: type=1400 audit(3911870412.272:1928): avc: denied { sqpoll } for pid=28549 comm="syz.4.5772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2157.350615][ T30] audit: type=1400 audit(3911870412.302:1929): avc: denied { setattr } for pid=28549 comm="syz.4.5772" name="BNEP" dev="sockfs" ino=135768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2157.379895][ T30] audit: type=1400 audit(3911870412.302:1930): avc: denied { getopt } for pid=28549 comm="syz.4.5772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2157.434752][T28553] FAULT_INJECTION: forcing a failure. [ 2157.434752][T28553] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.461447][T28553] CPU: 0 UID: 0 PID: 28553 Comm: syz.4.5773 Not tainted syzkaller #0 PREEMPT(full) [ 2157.461472][T28553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2157.461479][T28553] Call Trace: [ 2157.461484][T28553] [ 2157.461488][T28553] dump_stack_lvl+0x16c/0x1f0 [ 2157.461504][T28553] should_fail_ex+0x512/0x640 [ 2157.461519][T28553] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2157.461535][T28553] should_failslab+0xc2/0x120 [ 2157.461549][T28553] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2157.461566][T28553] ? skb_clone+0x190/0x3f0 [ 2157.461584][T28553] ? skb_clone+0x190/0x3f0 [ 2157.461602][T28553] skb_clone+0x190/0x3f0 [ 2157.461617][T28553] netlink_deliver_tap+0xabd/0xd30 [ 2157.461637][T28553] netlink_unicast+0x64c/0x870 [ 2157.461655][T28553] ? __pfx_netlink_unicast+0x10/0x10 [ 2157.461677][T28553] netlink_sendmsg+0x8c8/0xdd0 [ 2157.461704][T28553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2157.461743][T28553] ____sys_sendmsg+0xa98/0xc70 [ 2157.461756][T28553] ? copy_msghdr_from_user+0x10a/0x160 [ 2157.461771][T28553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2157.461789][T28553] ___sys_sendmsg+0x134/0x1d0 [ 2157.461805][T28553] ? __pfx____sys_sendmsg+0x10/0x10 [ 2157.461819][T28553] ? __lock_acquire+0x622/0x1c90 [ 2157.461848][T28553] __sys_sendmsg+0x16d/0x220 [ 2157.461864][T28553] ? __pfx___sys_sendmsg+0x10/0x10 [ 2157.461889][T28553] do_syscall_64+0xcd/0xfa0 [ 2157.461901][T28553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2157.461912][T28553] RIP: 0033:0x7fd9d8b8f749 [ 2157.461922][T28553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2157.461939][T28553] RSP: 002b:00007fd9d995a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2157.461958][T28553] RAX: ffffffffffffffda RBX: 00007fd9d8de5fa0 RCX: 00007fd9d8b8f749 [ 2157.461972][T28553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2157.461984][T28553] RBP: 00007fd9d995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2157.461996][T28553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2157.462003][T28553] R13: 00007fd9d8de6038 R14: 00007fd9d8de5fa0 R15: 00007ffc7e72cef8 [ 2157.462019][T28553] [ 2157.463046][T28553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5773'. [ 2158.359916][T17978] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 2158.566467][T17978] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 2158.908459][T17978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.962962][T17978] usb 5-1: config 0 has no interface number 0 [ 2158.977392][T17978] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 2158.998959][T17978] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2159.013566][ T30] audit: type=1400 audit(3911870413.982:1931): avc: denied { unmount } for pid=25171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2159.017703][T17978] usb 5-1: config 0 interface 128 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2159.056870][T17978] usb 5-1: config 0 interface 128 has no altsetting 0 [ 2159.068647][T17978] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 2159.077794][T17978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.086378][T17978] usb 5-1: Product: syz [ 2159.090669][T17978] usb 5-1: Manufacturer: syz [ 2159.095262][T17978] usb 5-1: SerialNumber: syz [ 2159.103715][T17978] usb 5-1: config 0 descriptor?? [ 2159.114347][T17978] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 2159.136516][T17978] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 2159.145885][T17978] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 2159.407453][T17214] usb 5-1: USB disconnect, device number 5 [ 2160.482765][ T30] audit: type=1400 audit(3911870414.492:1932): avc: denied { ioctl } for pid=28569 comm="syz.5.5777" path="socket:[136531]" dev="sockfs" ino=136531 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2160.487903][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.598355][ T30] audit: type=1400 audit(3911870415.562:1933): avc: denied { ioctl } for pid=28578 comm="syz.6.5782" path="socket:[135802]" dev="sockfs" ino=135802 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2160.633248][ T30] audit: type=1400 audit(3911870415.602:1934): avc: denied { setopt } for pid=28578 comm="syz.6.5782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2160.840994][T28583] net_ratelimit: 11 callbacks suppressed [ 2160.841013][T28583] netlink: zone id is out of range [ 2160.852360][T28583] netlink: zone id is out of range [ 2160.858054][T28583] netlink: zone id is out of range [ 2160.863632][T28583] netlink: zone id is out of range [ 2160.868872][T28583] netlink: zone id is out of range [ 2160.874494][T28583] netlink: zone id is out of range [ 2160.879783][T28583] netlink: zone id is out of range [ 2160.896916][T28583] netlink: zone id is out of range [ 2160.916491][T28583] netlink: zone id is out of range [ 2160.947451][ T30] audit: type=1400 audit(3911870415.912:1935): avc: denied { read } for pid=28584 comm="syz.6.5783" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2160.973734][T28586] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2161.059487][T28583] netlink: zone id is out of range [ 2161.174804][T28586] batadv_slave_0: entered promiscuous mode [ 2161.183067][ T30] audit: type=1400 audit(3911870416.152:1936): avc: denied { open } for pid=28584 comm="syz.6.5783" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2161.185789][T28586] batman_adv: batadv0: Adding interface: macvtap1 [ 2161.213600][T28586] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2161.285423][T28586] batman_adv: batadv0: Interface activated: macvtap1 [ 2161.543191][T28593] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5784'. [ 2161.709064][ T9586] IPVS: starting estimator thread 0... [ 2161.852665][T28594] IPVS: using max 31 ests per chain, 74400 per kthread [ 2162.278108][ T30] audit: type=1400 audit(3911870417.242:1937): avc: denied { create } for pid=28584 comm="syz.6.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2162.419920][ T30] audit: type=1400 audit(3911870417.372:1938): avc: denied { ioctl } for pid=28584 comm="syz.6.5783" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2162.445403][ C1] vkms_vblank_simulate: vblank timer overrun [ 2162.451555][ T9586] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 2162.615578][ T9586] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2162.624743][ T9586] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.635530][ T9586] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2162.648459][ T9586] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2162.657913][ T9586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.666107][ T9586] usb 5-1: Product: syz [ 2162.670659][ T9586] usb 5-1: Manufacturer: syz [ 2162.675280][ T9586] usb 5-1: SerialNumber: syz [ 2162.800589][T28610] FAULT_INJECTION: forcing a failure. [ 2162.800589][T28610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2162.831993][T28610] CPU: 1 UID: 0 PID: 28610 Comm: syz.9.5788 Not tainted syzkaller #0 PREEMPT(full) [ 2162.832019][T28610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2162.832033][T28610] Call Trace: [ 2162.832040][T28610] [ 2162.832048][T28610] dump_stack_lvl+0x16c/0x1f0 [ 2162.832071][T28610] should_fail_ex+0x512/0x640 [ 2162.832098][T28610] _copy_from_user+0x2e/0xd0 [ 2162.832123][T28610] sctp_setsockopt+0x2045/0xb870 [ 2162.832148][T28610] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 2162.832178][T28610] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2162.832203][T28610] ? find_held_lock+0x2b/0x80 [ 2162.832234][T28610] ? selinux_socket_setsockopt+0x6a/0x80 [ 2162.832254][T28610] ? sock_common_setsockopt+0x2e/0xf0 [ 2162.832284][T28610] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2162.832317][T28610] do_sock_setsockopt+0xf3/0x1d0 [ 2162.832351][T28610] __sys_setsockopt+0x1a0/0x230 [ 2162.832381][T28610] __x64_sys_setsockopt+0xbd/0x160 [ 2162.832405][T28610] ? do_syscall_64+0x91/0xfa0 [ 2162.832424][T28610] ? lockdep_hardirqs_on+0x7c/0x110 [ 2162.832444][T28610] do_syscall_64+0xcd/0xfa0 [ 2162.832466][T28610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2162.832486][T28610] RIP: 0033:0x7fdc98b8f749 [ 2162.832503][T28610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2162.832522][T28610] RSP: 002b:00007fdc999dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2162.832542][T28610] RAX: ffffffffffffffda RBX: 00007fdc98de5fa0 RCX: 00007fdc98b8f749 [ 2162.832556][T28610] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 2162.832569][T28610] RBP: 00007fdc999dc090 R08: 0000000000000009 R09: 0000000000000000 [ 2162.832581][T28610] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 2162.832594][T28610] R13: 00007fdc98de6038 R14: 00007fdc98de5fa0 R15: 00007ffe7e5ca158 [ 2162.832624][T28610] [ 2163.027407][ C1] vkms_vblank_simulate: vblank timer overrun [ 2163.208333][ T9586] usb 5-1: USB disconnect, device number 6 [ 2163.536113][T28614] FAULT_INJECTION: forcing a failure. [ 2163.536113][T28614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2163.549213][T28614] CPU: 0 UID: 0 PID: 28614 Comm: syz.9.5789 Not tainted syzkaller #0 PREEMPT(full) [ 2163.549241][T28614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2163.549254][T28614] Call Trace: [ 2163.549262][T28614] [ 2163.549271][T28614] dump_stack_lvl+0x16c/0x1f0 [ 2163.549295][T28614] should_fail_ex+0x512/0x640 [ 2163.549325][T28614] _copy_from_user+0x2e/0xd0 [ 2163.549352][T28614] video_usercopy+0xee2/0x1720 [ 2163.549375][T28614] ? __pfx___video_do_ioctl+0x10/0x10 [ 2163.549406][T28614] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2163.549433][T28614] ? __pfx_video_usercopy+0x10/0x10 [ 2163.549473][T28614] v4l2_ioctl+0x1bd/0x250 [ 2163.549502][T28614] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2163.549533][T28614] __x64_sys_ioctl+0x18e/0x210 [ 2163.549565][T28614] do_syscall_64+0xcd/0xfa0 [ 2163.549588][T28614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.549610][T28614] RIP: 0033:0x7fdc98b8f749 [ 2163.549627][T28614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.549647][T28614] RSP: 002b:00007fdc9999a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.549667][T28614] RAX: ffffffffffffffda RBX: 00007fdc98de6180 RCX: 00007fdc98b8f749 [ 2163.549681][T28614] RDX: 00002000000013c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 2163.549695][T28614] RBP: 00007fdc9999a090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.549708][T28614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.549721][T28614] R13: 00007fdc98de6218 R14: 00007fdc98de6180 R15: 00007ffe7e5ca158 [ 2163.549750][T28614] [ 2163.789405][ T30] audit: type=1400 audit(3911870418.752:1939): avc: denied { read write } for pid=28617 comm="syz.6.5791" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2163.813697][ C1] vkms_vblank_simulate: vblank timer overrun [ 2163.820536][ T30] audit: type=1400 audit(3911870418.792:1940): avc: denied { open } for pid=28617 comm="syz.6.5791" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2163.844671][ C1] vkms_vblank_simulate: vblank timer overrun [ 2164.849913][ T30] audit: type=1400 audit(3911870419.812:1941): avc: denied { ioctl } for pid=28620 comm="syz.4.5792" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2165.055598][ T30] audit: type=1400 audit(3911870420.022:1942): avc: denied { execute_no_trans } for pid=28630 comm="syz.9.5794" path="/82/file1" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2165.250969][ T30] audit: type=1400 audit(3911870420.222:1943): avc: denied { append } for pid=28632 comm="syz.9.5795" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2166.601657][ T30] audit: type=1400 audit(3911870421.572:1944): avc: denied { read write } for pid=28646 comm="syz.5.5797" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2166.637599][ T30] audit: type=1400 audit(3911870421.572:1945): avc: denied { open } for pid=28646 comm="syz.5.5797" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2166.721741][ T30] audit: type=1400 audit(3911870421.692:1946): avc: denied { create } for pid=28661 comm="syz.4.5802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2167.782099][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2167.782133][ T30] audit: type=1400 audit(3911870422.162:1949): avc: denied { read write } for pid=28667 comm="syz.1.5803" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2168.077487][ T30] audit: type=1400 audit(3911870422.162:1950): avc: denied { open } for pid=28667 comm="syz.1.5803" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2168.112330][ T30] audit: type=1400 audit(3911870423.082:1951): avc: denied { read write } for pid=28681 comm="syz.4.5806" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2168.671894][ T30] audit: type=1400 audit(3911870423.632:1952): avc: denied { open } for pid=28681 comm="syz.4.5806" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2169.195847][T28692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2169.593441][ T30] audit: type=1400 audit(3911870424.562:1953): avc: denied { create } for pid=28696 comm="syz.6.5809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2169.679902][T17978] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2169.900019][T17978] usb 6-1: Using ep0 maxpacket: 32 [ 2169.906569][T17978] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2169.920128][T17978] usb 6-1: config 0 has no interface number 0 [ 2169.937460][T17978] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2169.947366][T17978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.955453][T17978] usb 6-1: Product: syz [ 2169.960006][T17978] usb 6-1: Manufacturer: syz [ 2169.964641][T17978] usb 6-1: SerialNumber: syz [ 2169.980437][T17978] usb 6-1: config 0 descriptor?? [ 2169.988390][T17978] smsc95xx v2.0.0 [ 2169.995379][T17978] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2170.006075][T17978] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 2170.093872][ T30] audit: type=1400 audit(3911870425.062:1954): avc: denied { ioctl } for pid=28708 comm="syz.4.5813" path="socket:[136085]" dev="sockfs" ino=136085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2170.173006][T28709] FAULT_INJECTION: forcing a failure. [ 2170.173006][T28709] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.185948][T28709] CPU: 0 UID: 0 PID: 28709 Comm: syz.4.5813 Not tainted syzkaller #0 PREEMPT(full) [ 2170.185964][T28709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2170.185971][T28709] Call Trace: [ 2170.185975][T28709] [ 2170.185980][T28709] dump_stack_lvl+0x16c/0x1f0 [ 2170.185995][T28709] should_fail_ex+0x512/0x640 [ 2170.186012][T28709] should_failslab+0xc2/0x120 [ 2170.186027][T28709] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2170.186044][T28709] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2170.186064][T28709] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2170.186078][T28709] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2170.186098][T28709] idr_get_free+0x528/0xa30 [ 2170.186119][T28709] idr_alloc_u32+0x190/0x2f0 [ 2170.186138][T28709] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2170.186156][T28709] ? lock_acquire+0x179/0x350 [ 2170.186170][T28709] idr_alloc_cyclic+0x10b/0x230 [ 2170.186187][T28709] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 2170.186202][T28709] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2170.186219][T28709] bpf_link_prime+0x6e/0x290 [ 2170.186237][T28709] bpf_xdp_link_attach+0x27a/0x930 [ 2170.186255][T28709] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 2170.186269][T28709] ? find_held_lock+0x2b/0x80 [ 2170.186289][T28709] ? __fget_files+0x204/0x3c0 [ 2170.186307][T28709] ? fput+0x9b/0xd0 [ 2170.186320][T28709] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2170.186337][T28709] __sys_bpf+0x2417/0x4980 [ 2170.186356][T28709] ? __pfx___sys_bpf+0x10/0x10 [ 2170.186372][T28709] ? find_held_lock+0x2b/0x80 [ 2170.186388][T28709] ? find_held_lock+0x2b/0x80 [ 2170.186406][T28709] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2170.186428][T28709] ? fput+0x9b/0xd0 [ 2170.186441][T28709] ? ksys_write+0x1ac/0x250 [ 2170.186451][T28709] ? __pfx_ksys_write+0x10/0x10 [ 2170.186464][T28709] __x64_sys_bpf+0x78/0xc0 [ 2170.186474][T28709] ? lockdep_hardirqs_on+0x7c/0x110 [ 2170.186485][T28709] do_syscall_64+0xcd/0xfa0 [ 2170.186497][T28709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.186508][T28709] RIP: 0033:0x7fd9d8b8f749 [ 2170.186518][T28709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2170.186531][T28709] RSP: 002b:00007fd9d995a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2170.186542][T28709] RAX: ffffffffffffffda RBX: 00007fd9d8de5fa0 RCX: 00007fd9d8b8f749 [ 2170.186549][T28709] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 000000000000001c [ 2170.186557][T28709] RBP: 00007fd9d995a090 R08: 0000000000000000 R09: 0000000000000000 [ 2170.186563][T28709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2170.186570][T28709] R13: 00007fd9d8de6038 R14: 00007fd9d8de5fa0 R15: 00007ffc7e72cef8 [ 2170.186586][T28709] [ 2170.479637][ T30] audit: type=1400 audit(3911870425.442:1955): avc: denied { create } for pid=28685 comm="syz.5.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2170.508390][ T30] audit: type=1400 audit(3911870425.472:1956): avc: denied { setopt } for pid=28685 comm="syz.5.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2170.652306][T18435] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.713430][T28713] net_ratelimit: 11 callbacks suppressed [ 2170.713447][T28713] netlink: zone id is out of range [ 2170.724416][T28713] netlink: zone id is out of range [ 2170.729630][T28713] netlink: zone id is out of range [ 2170.734896][T28713] netlink: zone id is out of range [ 2170.740256][T28713] netlink: zone id is out of range [ 2170.745431][T28713] netlink: zone id is out of range [ 2170.750882][T28713] netlink: zone id is out of range [ 2170.756147][T28713] netlink: zone id is out of range [ 2170.761522][T28713] netlink: zone id is out of range [ 2170.768467][T28713] netlink: zone id is out of range [ 2170.802688][T28715] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2170.872774][T18435] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2171.136858][ T30] audit: type=1400 audit(3911870426.102:1957): avc: denied { append } for pid=28685 comm="syz.5.5807" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2171.164876][ T30] audit: type=1400 audit(3911870426.132:1958): avc: denied { ioctl } for pid=28685 comm="syz.5.5807" path="/dev/sg0" dev="devtmpfs" ino=785 ioctlcmd=0x227f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2171.201227][T28713] batadv_slave_0: entered promiscuous mode [ 2171.208780][T28713] batman_adv: batadv0: Adding interface: macvtap1 [ 2171.215225][T28713] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2171.240590][T28713] batman_adv: batadv0: Interface activated: macvtap1 [ 2171.311905][T18435] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2171.879357][T28725] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2171.892192][T28725] qnx6: wrong signature (magic) in superblock #1. [ 2171.898742][T28725] qnx6: unable to read the first superblock [ 2171.999512][T18435] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.224219][T18435] bridge_slave_1: left allmulticast mode [ 2172.234759][T18435] bridge_slave_1: left promiscuous mode [ 2172.240906][T18435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.251437][T18435] bridge_slave_0: left allmulticast mode [ 2172.257074][T18435] bridge_slave_0: left promiscuous mode [ 2172.263172][T18435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.166004][T28737] tmpfs: Unknown parameter 'noinode32' [ 2173.391731][T28739] ubi31: detaching mtd0 [ 2173.432839][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2173.432870][ T30] audit: type=1400 audit(3911870428.352:1966): avc: denied { ioctl } for pid=28733 comm="syz.6.5819" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=136978 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2173.465004][ C1] vkms_vblank_simulate: vblank timer overrun [ 2173.502319][T28739] ubi31: mtd0 is detached [ 2174.422028][T18435] hsr_slave_0: left promiscuous mode [ 2174.427911][T18435] hsr_slave_1: left promiscuous mode [ 2174.433853][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2174.442725][T17978] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2174.450327][T18435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2174.458525][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2174.465957][T18435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2174.497963][T18435] veth1_macvtap: left promiscuous mode [ 2174.503637][T18435] veth0_macvtap: left promiscuous mode [ 2174.510297][T18435] veth1_vlan: left promiscuous mode [ 2174.516944][T18435] veth0_vlan: left promiscuous mode [ 2174.602850][T17978] usb 5-1: Using ep0 maxpacket: 32 [ 2174.665285][T17978] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2174.679867][T17978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.701724][T17978] usb 5-1: config 0 descriptor?? [ 2174.719752][T17978] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2175.120979][T25265] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2175.263848][T18435] team0 (unregistering): Port device team_slave_1 removed [ 2175.298201][T25265] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2175.307855][T25265] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.322333][T25265] usb 10-1: string descriptor 0 read error: -22 [ 2175.328760][T25265] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2175.348367][T25265] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.969228][T18435] team0 (unregistering): Port device team_slave_0 removed [ 2176.026589][T25265] usb 10-1: reset high-speed USB device number 15 using dummy_hcd [ 2176.312516][ T9595] usb 6-1: USB disconnect, device number 51 [ 2176.484143][T28761] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2176.499384][T28761] qnx6: wrong signature (magic) in superblock #1. [ 2176.505863][T28761] qnx6: unable to read the first superblock [ 2176.943236][T25265] usb 10-1: device descriptor read/64, error -71 [ 2177.334565][ T30] audit: type=1400 audit(3911870432.302:1967): avc: denied { bind } for pid=28777 comm="syz.6.5830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2177.355070][ T30] audit: type=1400 audit(3911870432.302:1968): avc: denied { listen } for pid=28777 comm="syz.6.5830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2177.374857][T25265] usb 10-1: reset high-speed USB device number 15 using dummy_hcd [ 2177.376110][T25265] usb 10-1: device reset changed ep0 maxpacket size! [ 2177.397266][T25265] usb 10-1: USB disconnect, device number 15 [ 2177.423650][ T30] audit: type=1400 audit(3911870432.302:1969): avc: denied { accept } for pid=28777 comm="syz.6.5830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2177.447272][ T30] audit: type=1400 audit(3911870432.422:1970): avc: denied { ioctl } for pid=28777 comm="syz.6.5830" path="socket:[137120]" dev="sockfs" ino=137120 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2177.479752][T18435] IPVS: stop unused estimator thread 0... [ 2177.561674][T25265] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2177.789856][T25265] usb 10-1: Using ep0 maxpacket: 16 [ 2177.828578][T28787] netlink: 584 bytes leftover after parsing attributes in process `syz.6.5831'. [ 2177.854457][T25234] usb 5-1: USB disconnect, device number 7 [ 2178.811681][T28798] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5823'. [ 2178.824746][ T30] audit: type=1400 audit(3911870433.782:1971): avc: denied { create } for pid=28802 comm="syz.4.5835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2178.860128][ T30] audit: type=1400 audit(3911870433.792:1972): avc: denied { write } for pid=28748 comm="syz.9.5823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2178.882044][ T30] audit: type=1400 audit(3911870433.822:1973): avc: denied { read } for pid=28802 comm="syz.4.5835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2179.099295][ T30] audit: type=1400 audit(3911870434.062:1974): avc: denied { create } for pid=28802 comm="syz.4.5835" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2179.152740][ T30] audit: type=1400 audit(3911870434.112:1975): avc: denied { mounton } for pid=28802 comm="syz.4.5835" path="/40/file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2179.198206][ T30] audit: type=1400 audit(3911870434.162:1976): avc: denied { write } for pid=28802 comm="syz.4.5835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2179.510397][T28804] vcan0: entered allmulticast mode [ 2179.670165][ T30] audit: type=1400 audit(3911870434.632:1977): avc: denied { unlink } for pid=28270 comm="syz-executor" name="file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2179.738869][ T30] audit: type=1400 audit(3911870434.692:1978): avc: denied { read } for pid=28810 comm="syz.4.5837" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2179.855168][ T30] audit: type=1400 audit(3911870434.692:1979): avc: denied { open } for pid=28810 comm="syz.4.5837" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2179.878811][ T30] audit: type=1400 audit(3911870434.742:1980): avc: denied { ioctl } for pid=28810 comm="syz.4.5837" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2179.927357][T28804] vcan0: left allmulticast mode [ 2180.484997][T25265] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2180.494161][T25265] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2180.501900][T25265] usb 10-1: can't read configurations, error -71 [ 2181.040214][T28833] serio: Serial port ptm0 [ 2184.989195][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5846'. [ 2185.028031][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2185.028047][ T30] audit: type=1400 audit(3911870439.992:1988): avc: denied { write } for pid=28854 comm="syz.5.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2185.075406][T28855] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5847'. [ 2185.107988][ T30] audit: type=1400 audit(3911870440.072:1989): avc: denied { name_bind } for pid=28854 comm="syz.5.5847" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2185.682083][ T9595] IPVS: starting estimator thread 0... [ 2185.780290][T28859] IPVS: using max 32 ests per chain, 76800 per kthread [ 2186.940636][T28870] overlayfs: failed to resolve './file1': -2 [ 2187.759613][ T30] audit: type=1400 audit(3911870442.722:1990): avc: denied { write } for pid=28880 comm="syz.1.5854" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2187.783773][ T30] audit: type=1400 audit(3911870442.752:1991): avc: denied { map } for pid=28880 comm="syz.1.5854" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2187.839778][ T30] audit: type=1400 audit(3911870442.802:1992): avc: denied { call } for pid=28880 comm="syz.1.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2187.874400][ T30] audit: type=1400 audit(3911870442.842:1993): avc: denied { getopt } for pid=28882 comm="syz.5.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2187.882788][T28885] binder_alloc: 28880: pid 28880 spamming oneway? 1 buffers allocated for a total size of 4096 [ 2187.963602][T28885] binder_alloc: 28880: pid 28880 spamming oneway? 2 buffers allocated for a total size of 5120 [ 2187.992903][T17214] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 2188.163950][T17214] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2188.176461][T17214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2188.270485][T17214] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2188.489143][T17214] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2188.498628][T17214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.506849][T17214] usb 7-1: Product: syz [ 2188.511021][T17214] usb 7-1: Manufacturer: syz [ 2188.515620][T17214] usb 7-1: SerialNumber: syz [ 2188.671265][T28891] ªªªªª2: renamed from veth0_vlan (while UP) [ 2188.892871][T17214] usb 7-1: USB disconnect, device number 49 [ 2189.157364][T25209] udevd[25209]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2190.019770][ T30] audit: type=1400 audit(3911870444.982:1994): avc: denied { getopt } for pid=28902 comm="syz.4.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2190.189293][T28922] net_ratelimit: 12 callbacks suppressed [ 2190.189331][T28922] netlink: zone id is out of range [ 2190.200436][T28922] netlink: zone id is out of range [ 2190.205588][T28922] netlink: zone id is out of range [ 2190.210908][T28922] netlink: zone id is out of range [ 2190.216319][T28922] netlink: zone id is out of range [ 2190.221586][T28922] netlink: zone id is out of range [ 2190.226727][T28922] netlink: zone id is out of range [ 2190.232165][T28922] netlink: zone id is out of range [ 2190.237375][T28922] netlink: zone id is out of range [ 2190.247884][T28922] netlink: zone id is out of range [ 2190.249689][T28923] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2190.398048][T28922] batman_adv: batadv0: Adding interface: macvtap2 [ 2190.404854][T28922] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 2190.499936][T28922] batman_adv: batadv0: Interface activated: macvtap2 [ 2190.866453][ T30] audit: type=1400 audit(3911870445.832:1995): avc: denied { create } for pid=28927 comm="syz.1.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2190.896132][ T30] audit: type=1400 audit(3911870445.862:1996): avc: denied { create } for pid=28927 comm="syz.1.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2191.041499][T28931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2191.464809][ T30] audit: type=1400 audit(3911870446.432:1997): avc: denied { connect } for pid=28927 comm="syz.1.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2191.485851][ T30] audit: type=1400 audit(3911870446.432:1998): avc: denied { ioctl } for pid=28927 comm="syz.1.5865" path="socket:[138555]" dev="sockfs" ino=138555 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2191.997515][ T30] audit: type=1400 audit(3911870446.962:1999): avc: denied { create } for pid=28934 comm="syz.1.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2192.029513][ T30] audit: type=1400 audit(3911870446.992:2000): avc: denied { setopt } for pid=28934 comm="syz.1.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2192.075218][T28940] befs: (nullb0): invalid magic header [ 2192.118459][ T30] audit: type=1400 audit(3911870447.082:2001): avc: denied { mount } for pid=28939 comm="syz.9.5867" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2192.290472][T28943] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5869'. [ 2192.328483][T14810] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 2192.328525][T14810] Bluetooth: hci0: Dropping invalid advertising data [ 2192.343992][T14810] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2192.658393][ T30] audit: type=1400 audit(3911870447.612:2002): avc: denied { mounton } for pid=28944 comm="syz.9.5871" path="/93/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2194.012698][T28975] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2194.227876][T28971] batman_adv: batadv0: Adding interface: macvtap2 [ 2194.234446][T28971] batman_adv: batadv0: Interface activated: macvtap2 [ 2194.458227][T28981] FAULT_INJECTION: forcing a failure. [ 2194.458227][T28981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.809931][T28981] CPU: 1 UID: 0 PID: 28981 Comm: syz.4.5878 Not tainted syzkaller #0 PREEMPT(full) [ 2194.809948][T28981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2194.809955][T28981] Call Trace: [ 2194.809959][T28981] [ 2194.809964][T28981] dump_stack_lvl+0x16c/0x1f0 [ 2194.809980][T28981] should_fail_ex+0x512/0x640 [ 2194.809997][T28981] _copy_from_user+0x2e/0xd0 [ 2194.810011][T28981] move_addr_to_kernel+0x65/0x170 [ 2194.810025][T28981] __sys_sendto+0x1be/0x520 [ 2194.810038][T28981] ? __pfx___sys_sendto+0x10/0x10 [ 2194.810064][T28981] ? ksys_write+0x1ac/0x250 [ 2194.810076][T28981] ? __pfx_ksys_write+0x10/0x10 [ 2194.810088][T28981] __x64_sys_sendto+0xe0/0x1c0 [ 2194.810101][T28981] ? do_syscall_64+0x91/0xfa0 [ 2194.810111][T28981] ? lockdep_hardirqs_on+0x7c/0x110 [ 2194.810122][T28981] do_syscall_64+0xcd/0xfa0 [ 2194.810134][T28981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.810145][T28981] RIP: 0033:0x7fd9d8b8f749 [ 2194.810155][T28981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2194.810166][T28981] RSP: 002b:00007fd9d995a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2194.810176][T28981] RAX: ffffffffffffffda RBX: 00007fd9d8de5fa0 RCX: 00007fd9d8b8f749 [ 2194.810184][T28981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2194.810191][T28981] RBP: 00007fd9d995a090 R08: 00002000000000c0 R09: 000000000000006e [ 2194.810198][T28981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2194.810205][T28981] R13: 00007fd9d8de6038 R14: 00007fd9d8de5fa0 R15: 00007ffc7e72cef8 [ 2194.810220][T28981] [ 2195.410026][ T9595] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2195.840030][ T9595] usb 5-1: Using ep0 maxpacket: 32 [ 2196.007046][ T9595] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2196.322536][ T9595] usb 5-1: config 0 has no interface number 0 [ 2196.653759][ T9595] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2196.663044][ T9595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.685510][ T9595] usb 5-1: Product: syz [ 2196.700829][ T9595] usb 5-1: Manufacturer: syz [ 2196.705505][ T9595] usb 5-1: SerialNumber: syz [ 2196.717253][ T9595] usb 5-1: config 0 descriptor?? [ 2196.752346][ T9595] smsc95xx v2.0.0 [ 2196.756055][ T9595] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2196.766840][ T9595] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 2197.281173][T25265] usb 5-1: USB disconnect, device number 8 [ 2200.364694][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2200.400821][T25234] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2200.501150][T29038] overlayfs: failed to resolve './file0': -2 [ 2200.520251][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 2200.539887][T25234] usb 2-1: device descriptor read/64, error -71 [ 2200.550190][ T5897] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2200.566233][ T5897] usb 5-1: config 0 has no interface number 0 [ 2200.588033][ T5897] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2200.607314][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.636900][ T5897] usb 5-1: Product: syz [ 2200.641435][ T5897] usb 5-1: Manufacturer: syz [ 2200.646032][ T5897] usb 5-1: SerialNumber: syz [ 2200.680427][ T5897] usb 5-1: config 0 descriptor?? [ 2200.711250][ T5897] smsc95xx v2.0.0 [ 2200.714899][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2200.760736][ T5897] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 2200.780187][T25234] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2200.891695][ T30] audit: type=1400 audit(3911870455.862:2003): avc: denied { read write } for pid=29045 comm="syz.5.5894" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2200.919972][T25234] usb 2-1: device descriptor read/64, error -71 [ 2200.926526][ T30] audit: type=1400 audit(3911870455.862:2004): avc: denied { open } for pid=29045 comm="syz.5.5894" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2200.963935][ T30] audit: type=1400 audit(3911870455.892:2005): avc: denied { map } for pid=29045 comm="syz.5.5894" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2201.030101][T25234] usb usb2-port1: attempt power cycle [ 2201.269949][ T5897] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2201.381003][T25234] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2201.400690][T25234] usb 2-1: device descriptor read/8, error -71 [ 2201.480067][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 2201.640111][T25234] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2201.640754][ T5897] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2201.681100][ T5897] usb 6-1: config 0 has no interface number 0 [ 2201.768957][ T5897] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2201.778144][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.786228][ T5897] usb 6-1: Product: syz [ 2201.790614][ T5897] usb 6-1: Manufacturer: syz [ 2201.795203][ T5897] usb 6-1: SerialNumber: syz [ 2201.811385][ T5897] usb 6-1: config 0 descriptor?? [ 2201.821416][ T5897] smsc95xx v2.0.0 [ 2201.825046][ T5897] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2201.835511][T25234] usb 2-1: device descriptor read/8, error -71 [ 2201.835844][ T5897] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 2201.950113][T25234] usb usb2-port1: unable to enumerate USB device [ 2202.441252][ T5897] usb 5-1: USB disconnect, device number 9 [ 2202.494806][T25234] usb 6-1: USB disconnect, device number 52 [ 2202.539700][ T30] audit: type=1400 audit(3911870457.502:2006): avc: denied { write } for pid=29062 comm="syz.6.5898" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2202.561758][ T30] audit: type=1400 audit(3911870457.532:2007): avc: denied { connect } for pid=29062 comm="syz.6.5898" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2202.601274][ T30] audit: type=1400 audit(3911870457.572:2008): avc: denied { name_connect } for pid=29062 comm="syz.6.5898" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2203.363196][ T30] audit: type=1400 audit(3911870458.322:2009): avc: denied { create } for pid=29062 comm="syz.6.5898" name="#7e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2203.391577][ T30] audit: type=1400 audit(3911870458.322:2010): avc: denied { link } for pid=29062 comm="syz.6.5898" name="#7e" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2203.421420][ T30] audit: type=1400 audit(3911870458.322:2011): avc: denied { rename } for pid=29062 comm="syz.6.5898" name="#7f" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2203.615921][ T30] audit: type=1400 audit(3911870458.582:2012): avc: denied { unmount } for pid=27116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2204.002246][T29082] serio: Serial port ptm0 [ 2204.716559][T29087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5904'. [ 2204.814761][T29093] serio: Serial port ptm1 [ 2205.434992][T29100] xt_NFQUEUE: number of total queues is 0 [ 2205.928888][T29099] input: syz1 as /devices/virtual/input/input252 [ 2205.936628][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2205.936642][ T30] audit: type=1400 audit(3911870460.912:2015): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=6091 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2205.968979][ T30] audit: type=1400 audit(3911870460.942:2016): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=6091 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2205.992741][ T30] audit: type=1400 audit(3911870460.942:2017): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=6091 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2206.051578][ T30] audit: type=1400 audit(3911870461.022:2018): avc: denied { create } for pid=29098 comm="syz.6.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2206.071225][ C1] vkms_vblank_simulate: vblank timer overrun [ 2206.170068][T29101] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2206.739207][T29120] net_ratelimit: 33 callbacks suppressed [ 2206.746910][T29120] netlink: zone id is out of range [ 2206.752186][T29120] netlink: zone id is out of range [ 2206.757495][T29120] netlink: zone id is out of range [ 2206.762847][T29120] netlink: zone id is out of range [ 2206.768092][T29120] netlink: zone id is out of range [ 2206.773403][T29120] netlink: zone id is out of range [ 2206.778688][T29120] netlink: zone id is out of range [ 2206.784891][T29121] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2206.980114][T29120] netlink: zone id is out of range [ 2207.063433][T29120] netlink: zone id is out of range [ 2207.068740][T29120] netlink: zone id is out of range [ 2207.905959][T29118] batman_adv: batadv0: Adding interface: macvtap2 [ 2207.912456][T29118] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2207.937789][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.943984][T29118] batman_adv: batadv0: Interface activated: macvtap2 [ 2208.178104][T29135] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5912'. [ 2210.403421][ T30] audit: type=1400 audit(3911870465.372:2019): avc: denied { connect } for pid=29175 comm="syz.5.5921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2211.572487][ T9586] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2211.664867][ T30] audit: type=1400 audit(3911870466.632:2020): avc: denied { write } for pid=29198 comm="syz.5.5927" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2211.759917][ T9586] usb 7-1: Using ep0 maxpacket: 32 [ 2211.803957][ T30] audit: type=1400 audit(3911870466.772:2021): avc: denied { bind } for pid=29201 comm="syz.5.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2211.823415][ T9586] usb 7-1: config 4 has no interfaces? [ 2211.829013][ T30] audit: type=1400 audit(3911870466.772:2022): avc: denied { listen } for pid=29201 comm="syz.5.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2211.848490][ C0] vkms_vblank_simulate: vblank timer overrun [ 2211.877827][ T9586] usb 7-1: New USB device found, idVendor=05ac, idProduct=1205, bcdDevice=26.19 [ 2211.886918][ T9586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.895147][ T9586] usb 7-1: Product: syz [ 2211.899340][ T9586] usb 7-1: Manufacturer: syz [ 2211.908930][ T9586] usb 7-1: SerialNumber: syz [ 2211.979784][T29207] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2212.155064][ T9586] apple-mfi-fastcharge 7-1: USB disconnect, device number 50 [ 2212.246094][ C0] vkms_vblank_simulate: vblank timer overrun [ 2212.324841][T29212] binder: 29211:29212 ioctl c0306201 200000000040 returned -14 [ 2212.513325][T29223] net_ratelimit: 11 callbacks suppressed [ 2212.513382][T29223] netlink: zone id is out of range [ 2212.524763][T29223] netlink: zone id is out of range [ 2212.530698][T29223] netlink: zone id is out of range [ 2212.536073][T29223] netlink: zone id is out of range [ 2212.541667][T29223] netlink: zone id is out of range [ 2212.547101][T29223] netlink: zone id is out of range [ 2212.552492][T29223] netlink: zone id is out of range [ 2212.558041][T29223] netlink: zone id is out of range [ 2212.563358][T29223] netlink: zone id is out of range [ 2212.580068][T17261] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2212.581647][T29223] netlink: zone id is out of range [ 2212.599876][T29225] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2212.730059][T17261] usb 10-1: Using ep0 maxpacket: 32 [ 2212.776862][T17261] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.784716][T29223] batman_adv: batadv0: Adding interface: macvtap3 [ 2212.787503][T17261] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2212.794171][T29223] batman_adv: batadv0: Interface activated: macvtap3 [ 2212.809890][T17261] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2212.824020][T17261] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2212.942215][T17261] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2212.953681][T17261] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.961932][T17261] usb 10-1: Product: syz [ 2212.966160][T17261] usb 10-1: Manufacturer: syz [ 2212.970864][T17261] usb 10-1: SerialNumber: syz [ 2213.008634][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2213.017456][T17261] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input253 [ 2213.184300][T29229] overlayfs: failed to resolve './file1': -2 [ 2213.221673][T29212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.270707][T29212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.320363][T17261] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2213.337394][T17261] (id 0x00) [ 2213.399925][T17261] rc_core: IR keymap rc-imon-pad not found [ 2213.405846][T17261] Registered IR keymap rc-empty [ 2213.410832][T17261] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2213.421481][T17261] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2213.836164][T17261] imon:send_packet: packet tx failed (-71) [ 2213.860038][T17261] imon 10-1:155.0: remote input dev register failed [ 2213.866977][T17261] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 2213.915090][T17261] imon 10-1:155.0: unable to initialize intf0, err 0 [ 2213.922186][T17261] imon:imon_probe: failed to initialize context! [ 2213.928533][T17261] imon 10-1:155.0: unable to register, err -19 [ 2213.939152][T17261] usb 10-1: USB disconnect, device number 18 [ 2214.120582][T29245] netlink: 45 bytes leftover after parsing attributes in process `syz.1.5942'. [ 2214.161698][ T30] audit: type=1400 audit(3911870469.122:2023): avc: denied { write } for pid=29244 comm="syz.1.5942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2214.228413][T29249] 9pnet_fd: Insufficient options for proto=fd [ 2214.391128][T17261] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2214.674456][T17261] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2214.692570][T17261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.701422][T17261] usb 2-1: Product: syz [ 2214.705635][T17261] usb 2-1: Manufacturer: syz [ 2214.712511][T17261] usb 2-1: SerialNumber: syz [ 2214.726986][T17261] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2214.736514][ T30] audit: type=1400 audit(3911870469.712:2024): avc: denied { firmware_load } for pid=9595 comm="kworker/1:11" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 2214.755074][ T9595] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2214.803996][T29261] overlayfs: failed to resolve './file0': -2 [ 2214.983390][ T30] audit: type=1400 audit(3911870469.952:2025): avc: denied { setopt } for pid=29266 comm="syz.6.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2215.004698][ T30] audit: type=1400 audit(3911870469.972:2026): avc: denied { connect } for pid=29266 comm="syz.6.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2215.170718][ T5897] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 2215.349960][ T9586] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 2215.518117][ T9586] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 2215.526415][ T9586] usb 7-1: config 0 has no interface number 0 [ 2215.537493][ T9586] usb 7-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 2215.556553][ T9586] usb 7-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2215.570754][ T9586] usb 7-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2215.582290][ T9586] usb 7-1: config 0 interface 84 has no altsetting 0 [ 2215.589420][ T9586] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2215.604545][ T9586] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.656268][ T9586] usb 7-1: config 0 descriptor?? [ 2215.675957][T29269] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2215.803464][ T9595] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2215.807761][ T9586] option 7-1:0.84: GSM modem (1-port) converter detected [ 2215.810768][ T9595] ath9k_htc: Failed to initialize the device [ 2215.883296][ T9595] usb 2-1: ath9k_htc: USB layer deinitialized [ 2215.992226][ T30] audit: type=1400 audit(3911870470.952:2027): avc: denied { connect } for pid=29268 comm="syz.6.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2216.077758][ T9586] usb 7-1: USB disconnect, device number 51 [ 2216.088639][ T9586] option 7-1:0.84: device disconnected [ 2216.659971][ T9586] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 2216.826630][ T9586] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2216.835822][ T9586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.847879][ T9586] usb 5-1: Product: syz [ 2216.853250][ T9586] usb 5-1: Manufacturer: syz [ 2216.857908][ T9586] usb 5-1: SerialNumber: syz [ 2216.870908][ T9586] usb 5-1: config 0 descriptor?? [ 2217.131696][ T5897] usb 2-1: USB disconnect, device number 77 [ 2217.300586][ T9586] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2219.042582][T29301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5954'. [ 2220.210657][ T9586] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2220.262498][T29330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5962'. [ 2220.587749][T17214] usb 5-1: USB disconnect, device number 10 [ 2220.629121][T29333] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5963'. [ 2221.030855][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.370904][T29350] net_ratelimit: 11 callbacks suppressed [ 2221.370922][T29350] netlink: zone id is out of range [ 2221.382123][T29350] netlink: zone id is out of range [ 2221.387819][T29350] netlink: zone id is out of range [ 2221.393236][T29350] netlink: zone id is out of range [ 2221.398741][T29350] netlink: zone id is out of range [ 2221.404531][T29350] netlink: zone id is out of range [ 2221.409783][T29350] netlink: zone id is out of range [ 2221.415120][T29350] netlink: zone id is out of range [ 2221.428876][T29351] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2221.789926][T17214] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2221.861584][T29350] netlink: zone id is out of range [ 2221.880899][T29350] netlink: zone id is out of range [ 2221.905966][T29351] batman_adv: batadv0: Adding interface: macvtap3 [ 2221.915015][T29351] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 2221.951079][T29351] batman_adv: batadv0: Interface activated: macvtap3 [ 2222.029887][T17214] usb 10-1: device descriptor read/64, error -71 [ 2222.280549][T17214] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2222.321159][T29361] overlayfs: failed to resolve './file1': -2 [ 2222.440675][T17214] usb 10-1: device descriptor read/64, error -71 [ 2222.570972][T17214] usb usb10-port1: attempt power cycle [ 2223.109877][T17214] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2223.141941][T17214] usb 10-1: device descriptor read/8, error -71 [ 2223.390118][T17214] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2223.419889][T17214] usb 10-1: device descriptor read/8, error -71 [ 2223.550574][T17214] usb usb10-port1: unable to enumerate USB device [ 2223.903574][ T30] audit: type=1400 audit(3911870478.872:2028): avc: denied { create } for pid=29382 comm="syz.6.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2223.925458][ T30] audit: type=1400 audit(3911870478.872:2029): avc: denied { bind } for pid=29376 comm="syz.4.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2223.946198][ T30] audit: type=1400 audit(3911870478.872:2030): avc: denied { node_bind } for pid=29376 comm="syz.4.5974" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2224.051886][T17214] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 2224.343585][T17214] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2224.351988][T17214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.365989][T17214] usb 6-1: config 0 has no interface number 0 [ 2224.372335][T17214] usb 6-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 2224.383700][T17214] usb 6-1: config 0 interface 128 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2224.394008][T17214] usb 6-1: config 0 interface 128 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2224.409002][T17214] usb 6-1: config 0 interface 128 has no altsetting 0 [ 2224.417921][T17214] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 2224.427296][T17214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.435731][T17214] usb 6-1: Product: syz [ 2224.444325][T17214] usb 6-1: Manufacturer: syz [ 2224.448964][T17214] usb 6-1: SerialNumber: syz [ 2224.456457][T17214] usb 6-1: config 0 descriptor?? [ 2224.473615][T17214] radio-si470x 6-1:0.128: could not find interrupt in endpoint [ 2224.481524][T17214] radio-si470x 6-1:0.128: probe with driver radio-si470x failed with error -5 [ 2224.490954][T17214] usbhid 6-1:0.128: couldn't find an input interrupt endpoint [ 2224.553470][ T30] audit: type=1400 audit(3911870479.522:2031): avc: denied { create } for pid=29392 comm="syz.6.5977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2224.863046][T17261] usb 6-1: USB disconnect, device number 53 [ 2224.950226][ T9595] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2225.089912][ T9595] usb 7-1: device descriptor read/64, error -71 [ 2225.340373][ T9595] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2225.480121][ T9595] usb 7-1: device descriptor read/64, error -71 [ 2225.590184][ T9595] usb usb7-port1: attempt power cycle [ 2225.990098][ T9595] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2226.021964][ T9595] usb 7-1: device descriptor read/8, error -71 [ 2226.289881][ T9595] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2226.323629][ T9595] usb 7-1: device descriptor read/8, error -71 [ 2226.440605][ T9595] usb usb7-port1: unable to enumerate USB device [ 2226.599639][ T30] audit: type=1400 audit(3911870481.542:2032): avc: denied { write } for pid=29429 comm="syz.9.5986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2226.938189][ T30] audit: type=1400 audit(3911870481.882:2033): avc: denied { mount } for pid=29434 comm="syz.9.5987" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2227.573935][ T30] audit: type=1400 audit(3911870482.542:2034): avc: denied { unmount } for pid=27044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2228.213805][ T9586] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2228.373100][ T9586] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2228.384453][ T9586] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.393330][ T9586] usb 10-1: Product: syz [ 2228.397645][ T9586] usb 10-1: Manufacturer: syz [ 2228.402626][ T9586] usb 10-1: SerialNumber: syz [ 2228.412509][ T9586] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2228.447580][T17214] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2228.714434][ T9586] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2228.986862][ T9586] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2228.996278][ T9586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.008538][ T9586] usb 6-1: config 0 descriptor?? [ 2229.020046][ T9586] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2229.333323][ T9595] usb 10-1: USB disconnect, device number 24 [ 2229.477198][T29466] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5995'. [ 2229.486965][T17214] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2229.494234][T17214] ath9k_htc: Failed to initialize the device [ 2229.500967][ T9595] usb 10-1: ath9k_htc: USB layer deinitialized [ 2229.509080][ T9586] gspca_cpia1: usb_control_msg 03, error -32 [ 2229.519927][ T9586] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 2229.592974][T29466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5995'. [ 2229.690014][ T30] audit: type=1400 audit(3911870484.652:2035): avc: denied { read } for pid=29469 comm="syz.1.5996" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2229.714069][ T30] audit: type=1400 audit(3911870484.682:2036): avc: denied { open } for pid=29469 comm="syz.1.5996" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2229.825746][ T30] audit: type=1400 audit(3911870484.792:2037): avc: denied { create } for pid=29476 comm="syz.4.5997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2230.930149][ T9586] gspca_cpia1: usb_control_msg 02, error -110 [ 2230.939940][ T9586] cpia1 6-1:0.0: only firmware version 1 is supported (got: 138) [ 2232.099900][T17978] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 2232.251458][T17978] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2232.261147][T17978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.271416][T17978] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2232.418026][T17261] usb 6-1: USB disconnect, device number 54 [ 2232.435431][T17978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2232.435464][T17978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.435486][T17978] usb 5-1: Product: syz [ 2232.435503][T17978] usb 5-1: Manufacturer: syz [ 2232.435521][T17978] usb 5-1: SerialNumber: syz [ 2233.335367][T29496] input: syz1 as /devices/virtual/input/input255 [ 2233.890080][T14810] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2233.899624][T14810] Bluetooth: hci2: Injecting HCI hardware error event [ 2233.908682][T14810] Bluetooth: hci2: hardware error 0x00 [ 2233.966525][T17978] usb 5-1: USB disconnect, device number 11 [ 2234.313781][T29497] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2236.279924][T14810] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2247.129937][ T9586] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2248.283427][ T9586] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2248.292802][ T9586] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2248.780896][ T9586] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2248.820751][ T9586] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2248.852883][ T9586] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 2248.896064][ T9586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.958175][ T9586] usb 5-1: config 0 descriptor?? [ 2250.011141][T25043] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2250.024511][T25043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2250.032825][T25043] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2250.043252][T25043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2250.051480][T25043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2250.091933][ T30] audit: type=1400 audit(3911870505.032:2038): avc: denied { mounton } for pid=29543 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2250.154558][T14810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2250.169326][T14810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2250.178482][T14810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2250.193518][T14810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2250.201896][T14810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2250.631750][T29543] chnl_net:caif_netlink_parms(): no params data found [ 2250.783092][T29545] chnl_net:caif_netlink_parms(): no params data found [ 2250.871390][ T9586] usbhid 5-1:0.0: can't add hid device: -71 [ 2250.878317][ T9586] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2250.922133][ T9586] usb 5-1: USB disconnect, device number 12 [ 2250.993081][T29543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2251.012136][T29543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.019369][T29543] bridge_slave_0: entered allmulticast mode [ 2251.032105][T29543] bridge_slave_0: entered promiscuous mode [ 2251.047398][T29543] bridge0: port 2(bridge_slave_1) entered blocking state [ 2251.055333][T29543] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.062882][T29543] bridge_slave_1: entered allmulticast mode [ 2251.070931][T29543] bridge_slave_1: entered promiscuous mode [ 2251.192383][T29545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2251.199506][T29545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.207448][T29545] bridge_slave_0: entered allmulticast mode [ 2251.216685][T29545] bridge_slave_0: entered promiscuous mode [ 2251.707943][T29543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2251.798969][T29545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2251.807914][T29545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.815532][T29545] bridge_slave_1: entered allmulticast mode [ 2251.823408][T29545] bridge_slave_1: entered promiscuous mode [ 2251.888564][T29543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2251.926806][T29564] net_ratelimit: 11 callbacks suppressed [ 2251.926823][T29564] netlink: zone id is out of range [ 2251.974551][T29564] netlink: zone id is out of range [ 2251.987187][T29545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2252.013730][T29565] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2252.021900][T29564] netlink: zone id is out of range [ 2252.036339][T29564] netlink: zone id is out of range [ 2252.055268][T29543] team0: Port device team_slave_0 added [ 2252.067149][T29543] team0: Port device team_slave_1 added [ 2252.075660][T29545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2252.117032][T29564] netlink: zone id is out of range [ 2252.122470][T29564] netlink: zone id is out of range [ 2252.130432][T14810] Bluetooth: hci4: command tx timeout [ 2252.156251][T29564] netlink: zone id is out of range [ 2252.185198][T29564] netlink: zone id is out of range [ 2252.194564][T29564] netlink: zone id is out of range [ 2252.200770][T29564] netlink: zone id is out of range [ 2252.285393][T14810] Bluetooth: hci5: command tx timeout [ 2252.548495][ T30] audit: type=1400 audit(3911870507.512:2039): avc: denied { name_bind } for pid=29567 comm="syz.5.6016" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2252.592349][T29565] batman_adv: batadv0: Adding interface: macvtap4 [ 2252.598782][T29565] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 2252.664534][T29565] batman_adv: batadv0: Interface activated: macvtap4 [ 2252.739528][T29545] team0: Port device team_slave_0 added [ 2252.746508][T29543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2252.757247][T29543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2252.800151][T29543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2252.813474][T29545] team0: Port device team_slave_1 added [ 2252.958511][T29543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2252.965933][T29543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2252.993207][T29543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2254.204315][T14810] Bluetooth: hci4: command tx timeout [ 2254.360277][T14810] Bluetooth: hci5: command tx timeout [ 2255.757789][T29545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2255.765626][T29545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2255.792100][T29545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2255.806100][T29545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2255.819252][T29545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2255.860673][T29545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.285557][T14810] Bluetooth: hci4: command tx timeout [ 2256.291035][ T9586] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2256.444664][T14810] Bluetooth: hci5: command tx timeout [ 2257.055825][T29543] hsr_slave_0: entered promiscuous mode [ 2257.063428][T29543] hsr_slave_1: entered promiscuous mode [ 2257.070299][T29543] debugfs: 'hsr0' already exists in 'hsr' [ 2257.076046][T29543] Cannot create hsr debugfs directory [ 2257.267040][T29545] hsr_slave_0: entered promiscuous mode [ 2257.274210][T29545] hsr_slave_1: entered promiscuous mode [ 2257.281005][T29545] debugfs: 'hsr0' already exists in 'hsr' [ 2257.287039][T29545] Cannot create hsr debugfs directory [ 2258.361739][T14810] Bluetooth: hci4: command tx timeout [ 2258.520265][T14810] Bluetooth: hci5: command tx timeout [ 2259.399139][ T9586] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2259.571876][ T9586] usb 6-1: can't read configurations, error -71 [ 2259.735681][T29583] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6020'. [ 2261.555547][T29592] net_ratelimit: 11 callbacks suppressed [ 2261.555566][T29592] netlink: zone id is out of range [ 2261.566489][T29592] netlink: zone id is out of range [ 2261.571691][T29592] netlink: zone id is out of range [ 2261.576815][T29592] netlink: zone id is out of range [ 2261.581980][T29592] netlink: zone id is out of range [ 2261.587186][T29592] netlink: zone id is out of range [ 2261.592418][T29592] netlink: zone id is out of range [ 2261.597536][T29592] netlink: zone id is out of range [ 2261.602683][T29592] netlink: zone id is out of range [ 2261.610859][T29593] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 2261.620576][T29592] netlink: zone id is out of range [ 2265.352447][T29593] batman_adv: batadv0: Adding interface: macvtap4 [ 2265.358900][T29593] batman_adv: batadv0: Interface activated: macvtap4 [ 2266.076848][T29605] FAULT_INJECTION: forcing a failure. [ 2266.076848][T29605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.090622][T29605] CPU: 0 UID: 0 PID: 29605 Comm: syz.6.6024 Not tainted syzkaller #0 PREEMPT(full) [ 2266.090650][T29605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2266.090663][T29605] Call Trace: [ 2266.090670][T29605] [ 2266.090679][T29605] dump_stack_lvl+0x16c/0x1f0 [ 2266.090704][T29605] should_fail_ex+0x512/0x640 [ 2266.090733][T29605] _copy_to_user+0x32/0xd0 [ 2266.090762][T29605] simple_read_from_buffer+0xcb/0x170 [ 2266.090796][T29605] proc_fail_nth_read+0x197/0x240 [ 2266.090822][T29605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2266.090849][T29605] ? rw_verify_area+0xcf/0x6c0 [ 2266.090877][T29605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2266.090901][T29605] vfs_read+0x1e4/0xcf0 [ 2266.090924][T29605] ? __pfx___mutex_lock+0x10/0x10 [ 2266.090946][T29605] ? __pfx_vfs_read+0x10/0x10 [ 2266.090974][T29605] ? __fget_files+0x20e/0x3c0 [ 2266.091004][T29605] ksys_read+0x12a/0x250 [ 2266.091024][T29605] ? __pfx_ksys_read+0x10/0x10 [ 2266.091052][T29605] do_syscall_64+0xcd/0xfa0 [ 2266.091075][T29605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.091096][T29605] RIP: 0033:0x7ff145f8e15c [ 2266.091113][T29605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2266.091132][T29605] RSP: 002b:00007ff146df9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2266.091151][T29605] RAX: ffffffffffffffda RBX: 00007ff1461e5fa0 RCX: 00007ff145f8e15c [ 2266.091165][T29605] RDX: 000000000000000f RSI: 00007ff146df90a0 RDI: 0000000000000004 [ 2266.091178][T29605] RBP: 00007ff146df9090 R08: 0000000000000000 R09: 0000000000000000 [ 2266.091191][T29605] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000001 [ 2266.091209][T29605] R13: 00007ff1461e6038 R14: 00007ff1461e5fa0 R15: 00007ffecea0ba28 [ 2266.091239][T29605] [ 2266.279108][ T30] audit: type=1400 audit(3911870521.192:2040): avc: denied { create } for pid=29601 comm="syz.5.6023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2266.299197][T29606] FAULT_INJECTION: forcing a failure. [ 2266.299197][T29606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.312289][T29606] CPU: 0 UID: 0 PID: 29606 Comm: syz.5.6023 Not tainted syzkaller #0 PREEMPT(full) [ 2266.312316][T29606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2266.312329][T29606] Call Trace: [ 2266.312336][T29606] [ 2266.312345][T29606] dump_stack_lvl+0x16c/0x1f0 [ 2266.312371][T29606] should_fail_ex+0x512/0x640 [ 2266.312400][T29606] _copy_to_user+0x32/0xd0 [ 2266.312429][T29606] simple_read_from_buffer+0xcb/0x170 [ 2266.312463][T29606] proc_fail_nth_read+0x197/0x240 [ 2266.312490][T29606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2266.312516][T29606] ? rw_verify_area+0xcf/0x6c0 [ 2266.312545][T29606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2266.312570][T29606] vfs_read+0x1e4/0xcf0 [ 2266.312592][T29606] ? __pfx___mutex_lock+0x10/0x10 [ 2266.312614][T29606] ? __pfx_vfs_read+0x10/0x10 [ 2266.312642][T29606] ? __fget_files+0x20e/0x3c0 [ 2266.312672][T29606] ksys_read+0x12a/0x250 [ 2266.312691][T29606] ? __pfx_ksys_read+0x10/0x10 [ 2266.312720][T29606] do_syscall_64+0xcd/0xfa0 [ 2266.312742][T29606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.312763][T29606] RIP: 0033:0x7f053a98e15c [ 2266.312780][T29606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2266.312800][T29606] RSP: 002b:00007f053b7bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2266.312819][T29606] RAX: ffffffffffffffda RBX: 00007f053abe6180 RCX: 00007f053a98e15c [ 2266.312832][T29606] RDX: 000000000000000f RSI: 00007f053b7bd0a0 RDI: 0000000000000009 [ 2266.312845][T29606] RBP: 00007f053b7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 2266.312858][T29606] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 2266.312871][T29606] R13: 00007f053abe6218 R14: 00007f053abe6180 R15: 00007ffce40a8668 [ 2266.312901][T29606] [ 2266.591524][ T30] audit: type=1400 audit(3911870521.562:2041): avc: denied { mount } for pid=29607 comm="syz.6.6025" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2266.629972][ T30] audit: type=1400 audit(3911870521.592:2042): avc: denied { create } for pid=29607 comm="syz.6.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2266.667599][ T30] audit: type=1400 audit(3911870521.632:2043): avc: denied { sys_admin } for pid=29607 comm="syz.6.6025" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2267.304878][ T30] audit: type=1400 audit(3911870522.272:2044): avc: denied { unmount } for pid=27116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2267.330086][ T30] audit: type=1400 audit(3911870522.292:2045): avc: denied { setattr } for pid=27116 comm="syz-executor" path="/132/file0/eps" dev="proc" ino=4026534394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2267.514406][T29612] overlayfs: missing 'lowerdir' [ 2281.044166][T25043] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2281.064100][T25043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2281.091623][T25043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2281.169427][T25043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2281.200686][T25043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2281.557499][T29617] chnl_net:caif_netlink_parms(): no params data found [ 2281.813777][T29617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.823914][T29617] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.832736][T29617] bridge_slave_0: entered allmulticast mode [ 2281.840433][T29617] bridge_slave_0: entered promiscuous mode [ 2281.848699][T29617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.862471][T29617] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.869678][T29617] bridge_slave_1: entered allmulticast mode [ 2281.880297][T29617] bridge_slave_1: entered promiscuous mode [ 2281.939468][T29617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2281.953664][T29617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2282.027112][T29617] team0: Port device team_slave_0 added [ 2282.035536][T29617] team0: Port device team_slave_1 added [ 2282.097840][T29617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2282.104979][T29617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2282.132429][T29617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2282.146318][T29617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2282.156330][T29617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2282.189929][T29617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2282.449701][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.465126][T29617] hsr_slave_0: entered promiscuous mode [ 2282.472670][T29617] hsr_slave_1: entered promiscuous mode [ 2282.479000][T29617] debugfs: 'hsr0' already exists in 'hsr' [ 2282.487999][T29617] Cannot create hsr debugfs directory [ 2282.940861][T14810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2282.953762][T14810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2282.962589][T14810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2282.970814][T14810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2282.978422][T14810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2283.174364][ T30] audit: type=1400 audit(3911870538.142:2046): avc: denied { read } for pid=29634 comm="syz.5.6030" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2283.262733][ T30] audit: type=1400 audit(3911870538.232:2047): avc: denied { open } for pid=29634 comm="syz.5.6030" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2283.322765][T14810] Bluetooth: hci6: command tx timeout [ 2283.486728][T29632] chnl_net:caif_netlink_parms(): no params data found [ 2283.671590][T29632] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.678837][T29632] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.686534][T29632] bridge_slave_0: entered allmulticast mode [ 2283.694635][T29632] bridge_slave_0: entered promiscuous mode [ 2283.703706][T29632] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.711156][T29632] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.718392][T29632] bridge_slave_1: entered allmulticast mode [ 2283.731745][T29632] bridge_slave_1: entered promiscuous mode [ 2283.844254][T29632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.857444][T29632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2284.003721][T29632] team0: Port device team_slave_0 added [ 2284.016044][T29632] team0: Port device team_slave_1 added [ 2284.089638][T29632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.096768][T29632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.126212][T29632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2284.141570][T29632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.148523][T29632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.182040][T29632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2284.261530][T29632] hsr_slave_0: entered promiscuous mode [ 2284.267984][T29632] hsr_slave_1: entered promiscuous mode [ 2284.274814][T29632] debugfs: 'hsr0' already exists in 'hsr' [ 2284.281878][T29632] Cannot create hsr debugfs directory [ 2285.081363][T14810] Bluetooth: hci7: command tx timeout [ 2285.402685][T14810] Bluetooth: hci6: command tx timeout [ 2287.159933][T14810] Bluetooth: hci7: command tx timeout [ 2287.479914][T14810] Bluetooth: hci6: command tx timeout [ 2289.260350][T14810] Bluetooth: hci7: command tx timeout [ 2289.560017][T14810] Bluetooth: hci6: command tx timeout [ 2291.327051][T14810] Bluetooth: hci7: command tx timeout [ 2291.663411][T29543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2291.691659][T29543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2291.820694][T29543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2291.839609][T29543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2292.303898][T29543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2292.337732][T29543] 8021q: adding VLAN 0 to HW filter on device team0 [ 2292.350337][T18423] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.357498][T18423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2292.386225][T18423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.393387][T18423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2292.645012][ T3021] bridge_slave_1: left allmulticast mode [ 2292.657636][ T3021] bridge_slave_1: left promiscuous mode [ 2292.665960][ T3021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.689063][ T3021] bridge_slave_0: left allmulticast mode [ 2292.695354][ T3021] bridge_slave_0: left promiscuous mode [ 2292.716980][ T3021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.987126][ T3021] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2293.360634][ T3021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2293.378850][ T3021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2293.396125][ T3021] bond0 (unregistering): (slave team0): Releasing backup interface [ 2293.409146][ T3021] bond0 (unregistering): Released all slaves [ 2293.641777][ T3021] bond1 (unregistering): Released all slaves [ 2294.084853][T29543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2294.125006][T29543] veth0_vlan: entered promiscuous mode [ 2294.136650][T29543] veth1_vlan: entered promiscuous mode [ 2294.169791][T29543] veth0_macvtap: entered promiscuous mode [ 2294.184479][T29543] veth1_macvtap: entered promiscuous mode [ 2294.203052][T29543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2294.214172][T29543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2294.905846][T18435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.916455][T18435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.054739][T27332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.071242][T27332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.114427][T27332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.126908][T27332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.178187][ T30] audit: type=1400 audit(3911870550.142:2048): avc: denied { mounton } for pid=29543 comm="syz-executor" path="/root/syzkaller.Duh8Xa/syz-tmp" dev="sda1" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2295.254152][ T30] audit: type=1400 audit(3911870550.182:2049): avc: denied { mount } for pid=29543 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2295.326566][ T30] audit: type=1400 audit(3911870550.182:2050): avc: denied { mounton } for pid=29543 comm="syz-executor" path="/root/syzkaller.Duh8Xa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2295.390810][ T30] audit: type=1400 audit(3911870550.182:2051): avc: denied { mounton } for pid=29543 comm="syz-executor" path="/root/syzkaller.Duh8Xa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=143031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2295.421258][ T30] audit: type=1400 audit(3911870550.192:2052): avc: denied { mounton } for pid=29543 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2295.446568][ T30] audit: type=1400 audit(3911870550.192:2053): avc: denied { mounton } for pid=29543 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2295.889967][T17214] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 2296.089506][T17214] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2296.108687][T17214] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2296.196567][T17214] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2296.211298][T17214] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2296.228287][T17214] usb 6-1: Product: syz [ 2296.237150][T17214] usb 6-1: Manufacturer: syz [ 2296.249181][T17214] usb 6-1: SerialNumber: syz [ 2296.271019][T17214] usb 6-1: config 0 descriptor?? [ 2296.312860][T17214] usb 6-1: selecting invalid altsetting 0 [ 2296.778063][ T9586] usb 6-1: USB disconnect, device number 57 [ 2308.580023][T29684] batadv_slave_1: entered promiscuous mode [ 2308.693989][T29684] batadv_slave_1: left promiscuous mode [ 2310.605918][T25043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2310.623540][T25043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2310.631622][T25043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2310.772886][T25047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2310.780635][T25047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2311.219899][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2311.360284][ T5897] usb 4-1: device descriptor read/64, error -71 [ 2311.600241][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2311.739912][ T5897] usb 4-1: device descriptor read/64, error -71 [ 2311.858001][ T5897] usb usb4-port1: attempt power cycle [ 2312.209950][ T5897] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2312.240790][ T5897] usb 4-1: device descriptor read/8, error -71 [ 2312.480120][ T5897] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2312.510620][ T5897] usb 4-1: device descriptor read/8, error -71 [ 2312.628101][ T5897] usb usb4-port1: unable to enumerate USB device [ 2312.840637][T25047] Bluetooth: hci0: command tx timeout [ 2312.979568][T18435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.903394][T29708] Falling back ldisc for ptm0. [ 2314.920605][T25047] Bluetooth: hci0: command tx timeout [ 2315.065324][T18435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.270313][ T5897] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2315.455682][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 2315.463929][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.474620][ T5897] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2315.484509][ T5897] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2315.501006][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.534941][ T5897] usb 4-1: config 0 descriptor?? [ 2315.581680][ T3021] hsr_slave_0: left promiscuous mode [ 2315.595448][ T3021] hsr_slave_1: left promiscuous mode [ 2315.601661][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2315.623767][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2315.644178][ T3021] batman_adv: batadv0: Interface deactivated: macvtap1 [ 2315.652988][ T3021] batman_adv: batadv0: Removing interface: macvtap1 [ 2315.671047][ T3021] batman_adv: batadv0: Interface deactivated: macvtap2 [ 2315.678037][ T3021] batman_adv: batadv0: Removing interface: macvtap2 [ 2315.690554][ T3021] batman_adv: batadv0: Interface deactivated: macvtap3 [ 2315.698149][ T3021] batman_adv: batadv0: Removing interface: macvtap3 [ 2315.713286][ T3021] batman_adv: batadv0: Interface deactivated: macvtap4 [ 2315.725759][ T3021] batman_adv: batadv0: Removing interface: macvtap4 [ 2316.124438][ T30] audit: type=1400 audit(3911870571.092:2054): avc: denied { bind } for pid=29713 comm="syz.5.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2316.649902][ T5897] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2316.815280][ T5897] usb 6-1: config 0 has no interfaces? [ 2316.836222][ T5897] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2316.858053][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.875179][ T5897] usb 6-1: Product: syz [ 2316.881317][ T5897] usb 6-1: Manufacturer: syz [ 2316.885996][ T5897] usb 6-1: SerialNumber: syz [ 2316.893759][ T3021] team0 (unregistering): Port device team_slave_1 removed [ 2316.921041][ T5897] usb 6-1: config 0 descriptor?? [ 2317.015047][T25047] Bluetooth: hci0: command tx timeout [ 2317.046068][ T3021] team0 (unregistering): Port device team_slave_0 removed [ 2317.273252][ T30] audit: type=1400 audit(3911870572.242:2055): avc: denied { setopt } for pid=29713 comm="syz.5.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2319.080590][T25047] Bluetooth: hci0: command tx timeout [ 2319.670811][T17214] usb 4-1: USB disconnect, device number 26 [ 2320.114794][T29731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2320.155667][T29731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2320.168781][T29731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2331.348250][T14810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2331.364345][T14810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2331.372973][T14810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2331.381484][T14810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2331.398541][T14810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2333.480022][T25047] Bluetooth: hci1: command tx timeout [ 2334.081878][T14810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2334.094108][T14810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2334.105321][T14810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2334.114122][T14810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2334.125905][T14810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2335.561359][T25047] Bluetooth: hci1: command tx timeout [ 2335.580645][T25047] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2335.592143][T25047] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2335.602771][T25047] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2335.611861][T25047] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2335.621393][T25047] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2336.200586][T25047] Bluetooth: hci5: command tx timeout [ 2337.642240][T25047] Bluetooth: hci8: command tx timeout [ 2337.649616][T14810] Bluetooth: hci1: command tx timeout [ 2338.280871][T14810] Bluetooth: hci5: command tx timeout [ 2339.719989][T25047] Bluetooth: hci8: command tx timeout [ 2339.727597][T14810] Bluetooth: hci1: command tx timeout [ 2340.359941][T14810] Bluetooth: hci5: command tx timeout [ 2341.799966][T14810] Bluetooth: hci8: command tx timeout [ 2342.440002][T14810] Bluetooth: hci5: command tx timeout [ 2344.520347][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.528863][T14810] Bluetooth: hci8: command tx timeout [ 2345.077497][T25047] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2345.088909][T25047] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2345.100673][T25047] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2345.109410][T25047] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2345.118104][T25047] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2347.239960][T25047] Bluetooth: hci9: command tx timeout [ 2349.320097][T25047] Bluetooth: hci9: command tx timeout [ 2351.400035][T25047] Bluetooth: hci9: command tx timeout [ 2353.480514][T14810] Bluetooth: hci9: command tx timeout [ 2372.146452][T14810] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2372.162438][T14810] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2372.170790][T14810] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2372.178705][T14810] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2372.186390][T14810] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2374.200047][T14810] Bluetooth: hci11: command tx timeout [ 2376.280324][T14810] Bluetooth: hci11: command tx timeout [ 2376.679994][T14810] Bluetooth: hci4: command 0x0406 tx timeout [ 2378.360224][T25047] Bluetooth: hci11: command tx timeout [ 2380.439912][T25047] Bluetooth: hci11: command tx timeout [ 2392.158664][T14810] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2392.173564][T14810] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2392.181704][T14810] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2392.189793][T14810] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2392.198728][T14810] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2394.279966][T14810] Bluetooth: hci12: command tx timeout [ 2394.665994][T25047] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2394.678178][T25047] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2394.687017][T25047] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2394.696773][T25047] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2394.707512][T25047] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2396.122102][T14810] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2396.133673][T14810] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2396.142411][T14810] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2396.150668][T14810] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2396.167363][T14810] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2396.360007][T25047] Bluetooth: hci12: command tx timeout [ 2396.761989][T14810] Bluetooth: hci13: command tx timeout [ 2398.201941][T14810] Bluetooth: hci14: command tx timeout [ 2398.439935][T14810] Bluetooth: hci12: command tx timeout [ 2398.841730][T14810] Bluetooth: hci13: command tx timeout [ 2400.280008][T14810] Bluetooth: hci14: command tx timeout [ 2400.519910][T14810] Bluetooth: hci12: command tx timeout [ 2400.920124][T14810] Bluetooth: hci13: command tx timeout [ 2402.360113][T14810] Bluetooth: hci14: command tx timeout [ 2402.999964][T14810] Bluetooth: hci13: command tx timeout [ 2404.439918][T14810] Bluetooth: hci14: command tx timeout [ 2405.294958][T25047] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2405.305905][T25047] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2405.317833][T25047] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2405.327631][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.369725][T29771] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2405.379716][T29771] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2407.410549][T29771] Bluetooth: hci15: command tx timeout [ 2407.416831][T29771] Bluetooth: hci6: command 0x0406 tx timeout [ 2407.422897][T14810] Bluetooth: hci7: command 0x0406 tx timeout [ 2409.480103][T29772] Bluetooth: hci15: command tx timeout [ 2411.559960][T29772] Bluetooth: hci15: command tx timeout [ 2413.639975][T29772] Bluetooth: hci15: command tx timeout [ 2433.009372][T29772] Bluetooth: hci0: command 0x0406 tx timeout [ 2433.255301][T29772] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2433.264921][T29772] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2433.273936][T29772] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2433.282671][T29772] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2433.290979][T29772] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2435.323640][T29772] Bluetooth: hci16: command tx timeout [ 2437.400085][T29772] Bluetooth: hci16: command tx timeout [ 2439.479917][T29772] Bluetooth: hci16: command tx timeout [ 2440.520768][ T31] INFO: task syz-executor:29632 blocked for more than 143 seconds. [ 2440.528768][ T31] Not tainted syzkaller #0 [ 2440.556858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2440.569873][ T31] task:syz-executor state:D stack:24056 pid:29632 tgid:29632 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2440.599900][ T31] Call Trace: [ 2440.603205][ T31] [ 2440.606135][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2440.617716][ T30] audit: type=1400 audit(3911870695.582:2056): avc: denied { write } for pid=5804 comm="syz-executor" path="pipe:[4530]" dev="pipefs" ino=4530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2440.649941][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 2440.655191][ T31] ? __lock_acquire+0x622/0x1c90 [ 2440.669961][ T31] ? __pfx___schedule+0x10/0x10 [ 2440.674862][ T31] ? find_held_lock+0x2b/0x80 [ 2440.679559][ T31] ? schedule+0x2d7/0x3a0 [ 2440.699940][ T31] ? del_device_store+0xd1/0x4a0 [ 2440.704908][ T31] schedule+0xe7/0x3a0 [ 2440.709003][ T31] schedule_preempt_disabled+0x13/0x30 [ 2440.735060][ T31] __mutex_lock+0x818/0x1060 [ 2440.739683][ T31] ? del_device_store+0xd1/0x4a0 [ 2440.750947][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2440.756006][ T31] ? __pfx_sscanf+0x10/0x10 [ 2440.773810][ T31] ? __lock_acquire+0x622/0x1c90 [ 2440.778783][ T31] ? del_device_store+0xd1/0x4a0 [ 2440.797696][ T31] del_device_store+0xd1/0x4a0 [ 2440.802569][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2440.807975][ T31] ? find_held_lock+0x2b/0x80 [ 2440.834669][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 2440.839558][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2440.849924][ T31] bus_attr_store+0x74/0xb0 [ 2440.858068][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 2440.869215][ T31] sysfs_kf_write+0xf2/0x150 [ 2440.879854][ T31] kernfs_fop_write_iter+0x3af/0x570 [ 2440.885169][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2441.729941][ T31] vfs_write+0x7d3/0x11d0 [ 2441.734355][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2441.749850][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2441.755512][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2441.779680][ T31] ? find_held_lock+0x2b/0x80 [ 2441.789985][ T31] ksys_write+0x12a/0x250 [ 2441.794344][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2441.799219][ T31] do_syscall_64+0xcd/0xfa0 [ 2441.813644][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2441.819566][ T31] RIP: 0033:0x7f50ebb8e1ff [ 2441.838628][ T31] RSP: 002b:00007ffc518236a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2441.847371][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f50ebb8e1ff [ 2441.857602][ T31] RDX: 0000000000000001 RSI: 00007ffc518236f0 RDI: 0000000000000005 [ 2441.865904][ T31] RBP: 00007f50ebc152cb R08: 0000000000000000 R09: 00007ffc518234f7 [ 2441.874217][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2441.883278][ T31] R13: 00007ffc518236f0 R14: 00007f50ec914620 R15: 0000000000000003 [ 2441.891500][ T31] [ 2441.894600][ T31] [ 2441.894600][ T31] Showing all locks held in the system: [ 2441.902758][ T31] 1 lock held by khungtaskd/31: [ 2441.907641][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2441.917974][ T31] 4 locks held by kworker/u8:8/3021: [ 2441.923524][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2441.938869][ T31] #1: ffffc9000bf47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2441.951322][ T31] #2: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 2441.961152][ T31] #3: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x30/0x3d0 [ 2441.970245][ T31] 2 locks held by getty/5582: [ 2441.975010][ T31] #0: ffff88814d8260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2441.984631][T29772] Bluetooth: hci16: command tx timeout [ 2441.985994][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2442.000858][ T31] 1 lock held by syz-executor/5804: [ 2442.006077][ T31] 2 locks held by kworker/1:5/5896: [ 2442.012156][ T31] 3 locks held by kworker/0:4/9586: [ 2442.017531][ T31] #0: ffff88813ff12948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2442.029837][ T31] #1: ffffc9001b477d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2442.045898][ T31] #2: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x11f0 [ 2442.056065][ T31] 3 locks held by kworker/1:6/17265: [ 2442.061636][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2442.072478][ T31] #1: ffffc9000451fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2442.083899][ T31] #2: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 2442.094519][ T31] 3 locks held by kworker/u8:27/18434: [ 2442.100239][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2442.111922][ T31] #1: ffffc90004747d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2442.122697][ T31] #2: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 2442.131977][ T31] 3 locks held by kworker/u8:37/23270: [ 2442.137451][ T31] #0: ffff888030c6d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2442.148923][ T31] #1: ffffc900045afd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2442.168850][ T31] #2: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 2442.178608][ T31] 2 locks held by syz.9.6004/29504: [ 2442.184845][ T31] 7 locks held by syz-executor/29617: [ 2442.190623][ T31] #0: ffff888035f34420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2442.199628][ T31] #1: ffff8880570eb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 2442.209874][ T31] #2: ffff888140b8f1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 2442.220210][ T31] #3: ffffffff8f669b08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2442.236656][ T31] #4: ffff8880260190e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 2442.260051][ T31] #5: ffff88802601d250 (&devlink->lock_key#25){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 2442.287119][ T31] #6: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 2442.319847][ T31] 4 locks held by syz-executor/29632: [ 2442.325245][ T31] #0: ffff888035f34420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2442.363733][ T31] #1: ffff888033652488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 2442.380007][ T31] #2: ffff888140b8f1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 2442.409963][ T31] #3: ffffffff8f669b08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2442.429835][ T31] 2 locks held by syz-executor/29694: [ 2442.435227][ T31] #0: ffffffff90825660 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 2442.459830][ T31] #1: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 2442.468932][ T31] 2 locks held by syz.5.6044/29716: [ 2442.489923][ T31] #0: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 2442.514603][ T31] #1: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 2442.539870][ T31] 1 lock held by syz.3.6046/29728: [ 2442.545029][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x10a/0x930 [ 2442.610467][ T31] 2 locks held by syz.3.6046/29729: [ 2442.615710][ T31] #0: ffffffff9018bb10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2442.664534][ T31] #1: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 2442.674273][ T31] 2 locks held by syz.3.6046/29730: [ 2442.679488][ T31] #0: ffffffff9018bb10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2442.688026][ T31] #1: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 2442.698355][ T31] 1 lock held by syz-executor/29734: [ 2442.703911][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.713726][ T31] 1 lock held by syz-executor/29739: [ 2442.719094][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.728827][ T31] 1 lock held by syz-executor/29742: [ 2442.742776][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.752653][ T31] 1 lock held by syz-executor/29745: [ 2442.757958][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.780829][ T31] 1 lock held by syz-executor/29750: [ 2442.786144][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.796024][ T31] 1 lock held by syz-executor/29755: [ 2442.802365][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.812043][ T31] 1 lock held by syz-executor/29761: [ 2442.817347][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.829836][ T31] 1 lock held by syz-executor/29764: [ 2442.835145][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.860763][ T31] 1 lock held by syz-executor/29767: [ 2442.866087][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.875965][ T31] 1 lock held by syz-executor/29775: [ 2442.881552][ T31] #0: ffffffff900e7d48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 2442.891249][ T31] [ 2442.893567][ T31] ============================================= [ 2442.893567][ T31] [ 2442.903376][ T31] NMI backtrace for cpu 0 [ 2442.903390][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2442.903415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2442.903434][ T31] Call Trace: [ 2442.903441][ T31] [ 2442.903450][ T31] dump_stack_lvl+0x116/0x1f0 [ 2442.903473][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2442.903501][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2442.903532][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2442.903561][ T31] watchdog+0xf3f/0x1170 [ 2442.903592][ T31] ? rcu_is_watching+0x12/0xc0 [ 2442.903618][ T31] ? __pfx_watchdog+0x10/0x10 [ 2442.903641][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2442.903664][ T31] ? __kthread_parkme+0x19e/0x250 [ 2442.903695][ T31] ? __pfx_watchdog+0x10/0x10 [ 2442.903719][ T31] kthread+0x3c5/0x780 [ 2442.903740][ T31] ? __pfx_kthread+0x10/0x10 [ 2442.903762][ T31] ? rcu_is_watching+0x12/0xc0 [ 2442.903788][ T31] ? __pfx_kthread+0x10/0x10 [ 2442.903810][ T31] ret_from_fork+0x675/0x7d0 [ 2442.903829][ T31] ? __pfx_kthread+0x10/0x10 [ 2442.903850][ T31] ret_from_fork_asm+0x1a/0x30 [ 2442.903893][ T31] [ 2442.903901][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2443.024980][ C1] NMI backtrace for cpu 1 [ 2443.024996][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 2443.025019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2443.025032][ C1] RIP: 0010:ip_rcv+0x1ff/0x600 [ 2443.025061][ C1] Code: 00 00 e8 74 0d fc f7 4c 8d 6b 58 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 8b 03 00 00 4c 8b 63 58 <31> ff 4c 89 e5 83 e5 01 48 89 ee e8 b1 08 fc f7 48 85 ed 0f 85 cf [ 2443.025080][ C1] RSP: 0018:ffffc900001d79b8 EFLAGS: 00000246 [ 2443.025097][ C1] RAX: dffffc0000000000 RBX: ffff8880991b8b40 RCX: ffffffff89c0da4e [ 2443.025110][ C1] RDX: 1ffff11013237173 RSI: ffffffff89c0da5c RDI: 0000000000000005 [ 2443.025123][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 2443.025135][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802847b800 [ 2443.025147][ C1] R13: ffff8880991b8b98 R14: 0000000000000000 R15: ffff888024920000 [ 2443.025164][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 2443.025182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2443.025195][ C1] CR2: 0000564342e61ad8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 2443.025208][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2443.025220][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2443.025233][ C1] Call Trace: [ 2443.025239][ C1] [ 2443.025253][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2443.025277][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 2443.025301][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2443.025326][ C1] ? lock_acquire+0x179/0x350 [ 2443.025349][ C1] ? process_backlog+0x3e7/0x15e0 [ 2443.025370][ C1] __netif_receive_skb+0x1d/0x160 [ 2443.025392][ C1] process_backlog+0x439/0x15e0 [ 2443.025419][ C1] __napi_poll.constprop.0+0xba/0x550 [ 2443.025442][ C1] ? skb_defer_free_flush+0x149/0x280 [ 2443.025471][ C1] net_rx_action+0x97f/0xef0 [ 2443.025498][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2443.025521][ C1] ? rcu_is_watching+0x12/0xc0 [ 2443.025546][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2443.025567][ C1] ? tmigr_handle_remote+0x132/0x380 [ 2443.025597][ C1] ? run_timer_base+0x121/0x190 [ 2443.025615][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2443.025636][ C1] handle_softirqs+0x219/0x8e0 [ 2443.025663][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2443.025686][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2443.025717][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 2443.025740][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 2443.025766][ C1] run_ksoftirqd+0x3a/0x60 [ 2443.025788][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 2443.025816][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2443.025843][ C1] kthread+0x3c5/0x780 [ 2443.025862][ C1] ? __pfx_kthread+0x10/0x10 [ 2443.025882][ C1] ? rcu_is_watching+0x12/0xc0 [ 2443.025906][ C1] ? __pfx_kthread+0x10/0x10 [ 2443.025925][ C1] ret_from_fork+0x675/0x7d0 [ 2443.025942][ C1] ? __pfx_kthread+0x10/0x10 [ 2443.025962][ C1] ret_from_fork_asm+0x1a/0x30 [ 2443.025995][ C1]